Privacy policy

This notice explains, pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code), how the personal data of those who visit stagnoliaccessories.com and use its forms and downloads are processed.

1. Data controller

Stagnoli T.G. S.r.l. · Via Mantova traversa 1, 105 a/b, 25017 Lonato del Garda (BS), Italy · VAT no. IT02011390982 · Business register (REA) BS-403782 · Share capital €90,000.00 · email info@stagnoli.com · tel. +39 030 9139511

For any question about your data you can write to info@stagnoli.com.

2. What data we process and why

2.1 Browsing the website

• Data: IP address, date and time, requested page, browser and operating system type, outcome of the request (technical logs); technical cookies described in the cookie policy.
• Purpose: to display the website, protect it from abuse and attacks and solve technical problems.
• Legal basis: legitimate interest in offering a secure and working website (Art. 6(1)(f) GDPR).
• Retention: the hosting's technical logs are kept for a maximum of 12 months.

2.2 Requests from the contact form

• Data: first and last name, email, phone, company, customer type or role, type of request, products of interest and message. Required fields are marked with *. Only the choices made in the form (not your personal data) are kept in your browser so you don't have to repeat them.
• Purpose: to answer your request (information, quotation, dealers) and manage any resulting business relationship. The request is recorded in our CRM with the website language and, if you accepted marketing cookies, the origin of the visit (see 2.7).
• Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Retention: requests from non-customers, together with the records of our communications in our CRM, are kept for up to 5 years from the last contact. If you are a customer, they follow the retention period for customer data: at least 10 years (civil-law and tax obligations).
• Recipients: authorised staff of Stagnoli T.G. S.r.l. and platform providers (see section 4). Depending on the request, the data may be communicated to the agents and distributors of the Stagnoli sales network responsible for the area or product, in order to follow up on the request.

2.3 Technical support (open a ticket)

• Data: first and last name, email, phone, company, product, description of the problem and any attachments (photos or files) you choose to send. A ticket number is assigned to the request.
• Purpose: to handle the support request and, where needed, the product warranty. The request is recorded in our CRM.
• Legal basis: performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR).
• Retention: tickets from non-customers, with their attachments and the records of our communications in our CRM, are kept for up to 5 years from the last contact. If you are a customer, they follow the retention period for customer data: at least 10 years (civil-law and tax obligations).

2.4 Downloading catalogues and documents

• Data: first and last name, email and, depending on the document, company, phone, role and country; the requested document, the page you request it from and the language.
• Purpose: to let you download the document; the request is recorded in our CRM. If you request a document again with the same email within 24 hours, the request is added to the existing one. Documents are downloaded through a temporary link valid for 24 hours and tied to your session. If we consider it appropriate we may contact you again for commercial purposes regarding your request, based on our legitimate interest (Art. 6(1)(f) GDPR): you can object at any time by writing to info@stagnoli.com.
• Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR). To download you must confirm that you have read this notice.
• Retention: requests from non-customers, together with the records of our communications in our CRM, are kept for up to 5 years from the last contact. If you are a customer, they follow the retention period for customer data: at least 10 years (civil-law and tax obligations).

2.5 Commercial communications

The download form has an optional, unticked box to receive news and offers from Stagnoli. Only if you tick it do we use your contact details to send you these communications by email or by phone, based on your consent (Art. 6(1)(a) GDPR); the consent is recorded on the request in the CRM. You can withdraw it at any time by writing to info@stagnoli.com or using the unsubscribe link in every email, with no effect on the download. Retention: until withdrawal.

2.6 Statistics (only with your consent)

• Service: Google Analytics 4 by Google Ireland Limited. It uses cookies and identifiers only if you accept the “Statistics” category in the cookie banner.
• Before you choose (Google Consent Mode v2): Google tags are loaded with consent denied. In this state they do not set or read cookies and send Google only anonymous signals without identifiers (for example the type of event, the consent status and technical information about the browser), which Google uses in aggregate form to estimate (model) statistics and conversions. If you accept “Statistics” (Google Analytics) or “Marketing” (Google Ads), the related tags work normally; if you refuse, they stay with consent denied. You can change your choice at any time from “Cookie preferences” at the bottom of every page.
• Data: online identifiers and usage data (pages visited, device, origin, estimated country) and some events: sending a request, downloading documents, clicks on phone or email (only the type, never the number or address). We do not send Google Analytics your name, email or phone.
• Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 122 Italian Privacy Code), which you can withdraw at any time from “Cookie preferences” at the bottom of every page.
• Retention: cookies for the durations stated in the cookie policy; data in Google Analytics for 14 months (retention period set in the account).

2.7 Advertising and campaign measurement (only with your consent)

• Service: Google Ads by Google Ireland Limited (measurement of ad conversions). It uses cookies and identifiers only if you accept the “Marketing” category; before you choose, what is described in 2.6 applies (Consent Mode v2).
• Request attribution: if you arrive from an ad or a campaign link and you have accepted, the website stores in the swt_ft cookie the click identifier (gclid, gbraid, wbraid), the landing page, the referring site and the date, and in the odoo_utm_* cookies the campaign origin. When you send a form these data are linked to your request in the CRM. To measure the sales generated by ads we may upload to Google Ads the click identifier of successful requests, without any other personal data.
• Enhanced conversions: only if you have accepted the “Marketing” category, when you send a website form (contact, ticket, download) your email address and, if you provide it, your phone number are turned in your browser into an irreversible encrypted code (SHA-256 hash) and sent to Google to attribute the conversion to the ad. Google uses these codes to match them with Google accounts and deletes them according to its own terms; for this processing it acts as a processor under the Google Ads Data Processing Terms. Legal basis: your consent (Art. 6(1)(a) GDPR). Without “Marketing” consent nothing is sent.
• Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 122 Italian Privacy Code), which you can withdraw at any time.
• Retention: cookies for the durations stated in the cookie policy; attribution data together with the request.

2.8 Videos and maps (third-party content)

Some pages show YouTube videos (in “privacy-enhanced mode”, youtube-nocookie.com) and the Google Maps map, services of Google Ireland Limited. They are loaded only if you accept the “Third-party content” category: before that you see a preview with a notice and a button to accept. Once loaded, Google receives your IP address and the technical data of your browser and may use cookies or similar tools according to its own privacy policy. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

2.9 Protection of forms against spam and abuse (Cloudflare Turnstile)

• Data: when you open a form (contact, support ticket, download), the Cloudflare Turnstile service of Cloudflare, Inc. (USA) receives your IP address and some technical characteristics of your browser and device (for example browser type and version, language, signals of interaction with the page) to check that the submission comes from a person and not from an automated program. The website also records when the form was opened, to discard submissions that are too fast.
• Purpose: website security and protection of forms against spam, automated submissions and abuse. Turnstile does not use profiling or advertising cookies and works without consent to optional cookies; the check is usually invisible and only if in doubt asks you to tick a box. If the check fails, the form is not sent.
• Legal basis: legitimate interest in protecting the website and its forms from abuse and spam (Art. 6(1)(f) GDPR).
• Recipients: Cloudflare, Inc., which for this check processes the data on our behalf as a data processor and, to improve bot detection, as an independent controller according to its own Turnstile privacy notice (see sections 4 and 5).

2.10 Legal obligations and defence of rights

We may process data to comply with legal obligations, for example tax and accounting obligations when a business relationship arises (Art. 6(1)(c) GDPR), and to defend our rights in court (Art. 6(1)(f) GDPR).

3. Required data and automated decisions

Providing data is optional, but without the required data of a form we cannot answer the request or let you download the document. We do not take decisions based solely on automated processing that produce legal effects on you. The website is aimed at professionals and companies and is not intended for minors.

4. Who we share data with

Data are processed by the authorised staff of Stagnoli T.G. S.r.l. (sales, support, administration) and by these providers, appointed as data processors (Art. 28 GDPR):

• Odoo S.A. (Belgium): website and CRM platform and hosting (Odoo.sh) in the European Union, in the Odoo.sh Europe zone (Google Cloud data centre in Saint-Ghislain, Belgium). Backup copies are kept by Odoo S.A. in at least 3 different data centres (see section 5 and the Odoo privacy policy).
• Google Ireland Limited (Ireland): business email we use to answer requests and, only with your consent, Google Analytics, Google Ads, YouTube and Google Maps.
• Cloudflare, Inc. (United States): Cloudflare Turnstile service to protect forms against spam and automated submissions (see 2.9).

Data are neither sold nor disclosed to the public. They may be communicated to the authorities when required by law. Depending on the request, the data may be communicated to the agents and distributors of the Stagnoli sales network responsible for the area or product, in order to follow up on the request.

5. Transfers outside the European Union

Google may also process data in the United States through Google LLC. The transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, to which Google LLC is certified, and on the standard contractual clauses.

Cloudflare, Inc. (Turnstile, see 2.9) processes data in the United States and in its global network. The transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, to which Cloudflare, Inc. is certified, and on the standard contractual clauses.

The website and the CRM are hosted in the European Union (Belgium). According to the Odoo S.A. privacy policy, backup copies may also be kept outside the EU (for example in Canada, a country covered by an adequacy decision of the European Commission), with the safeguards provided by Odoo S.A. (data processing agreement and standard contractual clauses, see theOdoo privacy policy).

6. Your rights

You can at any time ask for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR). You can withdraw a consent already given without affecting the lawfulness of prior processing.

To exercise your rights write to info@stagnoli.com or to our postal address: we answer within one month. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

7. Cookies

Which cookies the website uses, what for and for how long is explained in the cookie policy. You can review your choice from “Cookie preferences” at the bottom of every page.

8. Changes

We may update this notice, for example if the website services change. The version in force is always the one published on this page, with the date and version shown at the top.

9. Legal notice

Stagnoli T.G. S.r.l. · Via Mantova traversa 1, 105 a/b, 25017 Lonato del Garda (BS), Italy · VAT no. IT02011390982 · Business register (REA) BS-403782 · Share capital €90,000.00 · email info@stagnoli.com · tel. +39 030 9139511

The website contents (texts, images, technical drawings, videos) belong to Stagnoli T.G. S.r.l. or are used under licence; they may not be reproduced without permission.