INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)
Last updated: 5 September 2026
WHY THIS INFORMATION IS PROVIDED
Pursuant to Regulation (EU) 2016/679 (hereinafter the “Regulation” or “GDPR”), this page describes how the personal data of users who visit the website available at the following address are processed:
This information does not apply to other websites, pages or online services that may be accessed through hyperlinks published on the website but referring to resources outside the Data Controller’s domain.
DATA CONTROLLER
Following consultation of the website, data relating to identified or identifiable natural persons may be processed.
The Data Controller is:
CENTRO QUALITÀ TESSILE S.R.L.
Via Francesco Guicciardini, 8 – 41012 Carpi (MO), Italy
Tel. +39 059 642628 – Fax +39 059 646240
Email: qualita@centroqualitatessile.it
Tax ID and VAT number: 02810350369
TYPES OF DATA PROCESSED, PURPOSES AND LEGAL BASES
Browsing data
During their normal operation, the IT systems and software procedures used to operate the website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the devices used by users, the URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response, and other parameters relating to the user’s operating system and IT environment.
These data are processed in order to:
- enable browsing and the proper provision of the website’s services;
- verify the proper operation, stability and security of the systems;
- obtain aggregated statistical information on the use of the website;
- prevent or detect possible misuse, cyberattacks and fraudulent activities, and protect the Data Controller’s rights.
Legal basis: the pursuit of the Data Controller’s legitimate interest in ensuring the operation, security and protection of the website and its IT systems, pursuant to Article 6(1)(f) GDPR. Where required by law, processing may be necessary to comply with a legal obligation pursuant to Article 6(1)(c) GDPR.
Browsing data are retained for no longer than seven days and are subsequently erased or anonymised, unless they need to be retained for the investigation of criminal offences, the management of security incidents, or the establishment, exercise or defence of a legal claim by the Data Controller before an authority.
Data provided by the user
The optional, explicit and voluntary sending of messages to the Data Controller’s contact addresses, as well as the completion and submission of forms available on the website, entails the acquisition of the sender’s contact details and any other personal data included in the communication, to the extent necessary to respond to and follow up on the request.
Purposes: to manage requests for information, communications, quotation requests and any pre-contractual activities requested by the data subject.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR. For requests unrelated to a potential contractual relationship, the legal basis is the Data Controller’s legitimate interest in responding to communications received, pursuant to Article 6(1)(f) GDPR.
Retention period: the data are retained for the time necessary to handle the request and, thereafter, for a maximum of 12 months, unless a contractual relationship is established, retention is necessary to comply with legal obligations, or the data must be retained for the establishment, exercise or defence of legal claims.
Specific privacy notices may be published on pages intended for the provision of particular services.
NATURE OF THE PROVISION OF DATA
The provision of browsing data is necessary to access the website and use its features.
The provision of data through forms or communications is optional. However, failure to provide data identified as necessary may prevent the Data Controller from receiving, assessing or responding to the request.
COOKIES AND OTHER TRACKING TECHNOLOGIES
The website does not use profiling cookies, non-anonymised analytics cookies or other tools intended to track or profile users for advertising or commercial purposes.
The website uses only technical and session cookies, which are non-persistent and used only to the extent strictly necessary to ensure secure and efficient browsing and the use of features requested by the user. The user’s consent is not required for these cookies.
Legal basis: performance of the user’s request to access and use the website, pursuant to Article 6(1)(b) GDPR, and the Data Controller’s legitimate interest in ensuring the security and functionality of the service, pursuant to Article 6(1)(f) GDPR. The storage of or access to technical cookies takes place within the limits permitted by Article 122 of Italian Legislative Decree No. 196/2003.
Session cookies are deleted when the browser is closed, subject to the settings or technical features of the browser used. Users can manage or delete cookies through their browser settings; disabling them may impair the operation of certain parts of the website.
PROCESSING METHODS AND SECURITY MEASURES
Personal data are processed using electronic tools and, where necessary, paper-based means, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality.
The data are processed by personnel authorised by the Data Controller, acting on the basis of specific instructions concerning the purposes and methods of processing.
Appropriate technical and organisational measures are adopted to prevent data loss, unlawful or improper use and unauthorised access.
RECIPIENTS OF PERSONAL DATA
To the extent necessary for the purposes described above, personal data may be disclosed to:
- personnel and collaborators authorised by the Data Controller;
- providers of hosting, email, maintenance and IT support services;
- consultants and professionals subject to confidentiality obligations;
- public authorities, judicial authorities or other parties to whom disclosure is required by law.
Where required, service providers that process personal data on behalf of the Data Controller are appointed as data processors pursuant to Article 28 GDPR. An up-to-date list of data processors may be requested from the Data Controller using the contact details provided in this privacy notice.
Personal data are not disseminated.
TRANSFERS TO THIRD COUNTRIES
Personal data are processed within the European Economic Area and are not transferred to third countries.
AUTOMATED DECISION-MAKING
The Data Controller does not use data collected through the website to make decisions based solely on automated processing, including profiling, that produce legal effects concerning the data subject or similarly significantly affect them.
RIGHTS OF DATA SUBJECTS
Where provided for by the GDPR, data subjects may exercise the following rights:
- obtain confirmation as to whether or not their personal data are being processed and access such data;
- obtain the rectification of inaccurate data or the completion of incomplete data;
- obtain the erasure of personal data;
- obtain restriction of processing;
- object to processing based on legitimate interests, on grounds relating to their particular situation;
- receive the data they have provided in a structured, commonly used and machine-readable format and, where applicable, transmit those data to another controller;
- withdraw consent at any time where specific processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal;
- not be subject to a decision based solely on automated processing in the cases provided for by Article 22 GDPR.
A request may be submitted to the Data Controller:
CENTRO QUALITÀ TESSILE S.R.L.
Via Francesco Guicciardini, 8 – 41012 Carpi (MO), Italy
Tel. +39 059 642628 – Fax +39 059 646240
Email: qualita@centroqualitatessile.it
The Data Controller will respond to requests within the time limits set out in Article 12 GDPR.
RIGHT TO LODGE A COMPLAINT
Data subjects who consider that the processing of their personal data through the website infringes the GDPR have the right to lodge a complaint with the Italian Data Protection Authority pursuant to Article 77 GDPR, or to seek a judicial remedy before the competent courts pursuant to Article 79 GDPR.
Information and forms for lodging a complaint are available on the website of the Italian Data Protection Authority: www.garanteprivacy.it.