Privacy Policy
Information on the processing of personal data pursuant to Regulation (EU) 2016/679 (GDPR).
Data Controller
The Data Controller for the personal data of users who browse eurven.com is:
Eurven Srl
Via Industrie, 6/A
31040 Trevignano - TV - Italy
VAT No. 03528040243
The Data Controller can be contacted by email at
This Privacy Policy describes how the website is managed in relation to the processing of the personal data of its users. Personal data is processed in accordance with the principles of lawfulness, fairness and transparency, and appropriate security measures are adopted to protect such data.
Further information regarding the processing of personal data may be requested by contacting the Data Controller.
Legal basis for processing
Performance of a contract
The processing of data required to provide purchased products or requested services, including the creation of a user account where applicable, is necessary for the performance of the relevant contractual relationship.
Legal obligations
Processing may be necessary to comply with obligations arising under applicable legislation, including tax obligations, or to protect the rights of the Data Controller or third parties in legal proceedings.
Consent
For specific purposes, such as subscribing to a newsletter, using contact forms or carrying out marketing activities, processing is based on the user's consent. Consent may be withdrawn at any time.
Legitimate interests
The Data Controller may process personal data on the basis of its legitimate interests, within the limits and under the conditions laid down by Regulation (EU) 2016/679.
Users may object to processing based on legitimate interests in the cases and within the limits provided for by applicable legislation.
Types of personal data processed
Eurven collects and processes the personal data necessary to provide the services and products available through the website. Such data may include, by way of example:
- first name and surname;
- date and place of birth, where required;
- email address;
- browsing data collected through cookies.
Eurven does not collect or process special categories of personal data, such as health data, genetic or biometric data, nor personal data relating to criminal convictions and offences.
Methods and purposes of processing
The processing of personal data may be necessary to manage relationships with website users, including the possible purchase of products or services.
Data may be processed using IT, electronic and paper-based systems. Eurven adopts appropriate organisational, procedural and technical measures to ensure confidentiality, integrity and availability, including backup systems, antivirus software, firewalls and the appropriate allocation of roles and responsibilities.
Personal data provided by users is used exclusively for purposes relevant to the individual services requested or used.
Contact forms and information requests
Data provided through contact forms is used to respond to requests submitted by users. The data is retained for the time necessary to handle the request and is subsequently deleted from our systems, unless further retention is required by law.
Customer support
Eurven provides customer support through channels such as telephone, email and, where available, chat systems.
Where necessary, personal data may be requested in order to respond to information or support enquiries relating, for example, to purchases, deliveries, withdrawal rights, statutory warranties, payments, products, services, complaints or loyalty programmes.
Purchase of products and services
Data provided in connection with a purchase may be used to process the order and related activities, including shipping, delivery, invoicing and payment processing.
The data is retained for the period necessary to perform the contract and comply with applicable legal obligations.
User account registration
Where provided by the website, personal data may be used to enable users to create a personal account and access related services, such as managing purchases or participating in initiatives reserved for customers.
Recipients of personal data
Personal data may be disclosed to third parties where this is necessary and relevant to the purposes for which it was collected and in compliance with applicable legislation.
In particular, personal data may be disclosed to:
- public authorities authorised by law to access such data;
- IT service providers, hosting providers and infrastructure maintenance and management providers;
- web agencies and other technical service providers;
- companies and professional firms providing consultancy services;
- banks and payment service providers, including PayPal, where necessary;
- shipping companies and postal service providers;
- other parties necessary for the provision of the requested products or services.
Some browsing data may also be collected by third parties, such as social networks, when users interact with the relevant tools and, in some cases, even without directly using those interaction tools. Any processing carried out by these third parties is governed by their respective privacy policies.
International data transfers
Personal data may be processed in Italy, in other countries within the European Economic Area or, in connection with the use of specific third-party providers and services, in countries outside the European Economic Area.
Where processing involves an international transfer of personal data, the Data Controller relies on the safeguards provided for by applicable legislation, including, where applicable, adequacy decisions adopted by the European Commission or other transfer mechanisms provided for by Regulation (EU) 2016/679.
Further information about the parties that may process personal data and the applicable
transfer arrangements may be requested from the Data Controller by writing to
Data retention period
Personal data is retained for the period necessary to achieve the purposes for which it was collected and in accordance with applicable legal obligations.
- Data processed to comply with legal obligations is retained for the period required by the applicable legislation.
- Data processed for the performance of a contract is retained for the period necessary to manage the contractual relationship, any applicable warranty periods and any further legal obligations.
- Data relating to a user account is retained until the account is deleted, subject to any applicable legal retention requirements.
Nature of the provision of personal data
Mandatory data
Providing personal data is mandatory where it is necessary for the performance of a contract or compliance with a legal obligation.
Failure to provide such data may prevent the Data Controller from providing the requested product or service. Mandatory fields in forms available on the website may be marked with an asterisk.
Optional data
Failure to provide data identified as optional does not affect access to the requested service.
Voluntary submission of emails
Voluntarily sending an email to one of the addresses listed on the website results in the acquisition of the sender's email address and any other personal data contained in the message and its attachments.
The email addresses listed on the website belong to the Data Controller and are used for the conduct of business activities, even where they include the first name or surname of an individual.
Data subject rights
Data subjects may exercise the rights granted to them under Regulation (EU) 2016/679 at any time by contacting the Data Controller.
- Right of access (Article 15): the right to obtain confirmation as to whether or not personal data concerning the data subject is being processed and, where that is the case, to access such personal data.
- Right to rectification (Article 16): the right to have inaccurate or incomplete personal data corrected, supplemented or updated.
- Right to erasure (Article 17): the right to request the deletion of personal data in the circumstances provided for by law.
- Right to restriction of processing (Article 18): the right to obtain restriction of processing in the circumstances provided for by the Regulation.
- Right to data portability (Article 20): the right to receive personal data provided to a Data Controller in a structured, commonly used and machine-readable format and, where applicable, to transmit that data to another Data Controller.
- Right to object (Article 21): the right to object to the processing of personal data in the circumstances provided for by applicable legislation.
- Right to withdraw consent: the right to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
- Right to lodge a complaint: the right to lodge a complaint with the competent data protection supervisory authority.
To exercise these rights, please contact