Privacy Policy
Privacy Notice on the Processing of Personal Data
This Privacy Notice is provided to users who visit the website www.tecnolabeu.com, pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”).
1. Data Controller
The Data Controller is:
Tecnolab Europe S.r.l.
Via dell’Industria 20
28924 Verbania (VB)
Italy VAT No. and Tax Code 02858800036
Certified Email (PEC): tecnolabeurope@legalmail.it
2. Types of Data Processed Through the Website
The following personal data may be processed through the website:
- Identification and contact details (first name, last name, company, email address, telephone number);
- Data voluntarily provided by users through:
- Contact forms;
- Requests for technical or commercial information;
- Requests for quotations or testing, measurement and research services;
- Data relating to customers, prospective customers, suppliers and professional partners;
- Technical browsing data (IP address, access logs, browser type), strictly necessary for the proper functioning of the website.
The website does not provide user registration systems, does not conduct e-commerce activities and does not carry out profiling.
The processing of special categories of personal data within the meaning of Article 9 of the GDPR is excluded, except as specifically provided for in the “Careers” section.
3. Purposes of Processing
Personal data are processed exclusively for the following purposes:
- Responding to requests submitted through the website;
- Assessing and managing technical and commercial enquiries relating to laboratory services;
- Establishing and managing pre-contractual and contractual relationships;
- Complying with administrative, accounting, tax and regulatory obligations;
- Providing technical support and after-sales services;
- Protecting the Data Controller’s rights in judicial or extrajudicial proceedings;
- Sending commercial communications relating to services similar to those previously requested or purchased (soft spam), within the limits permitted by applicable law.
4. Legal Basis for Processing
The processing of personal data is lawful pursuant to Article 6 of the GDPR, as it is based on:
- The performance of pre-contractual measures or contractual obligations requested by the data subject;
- Compliance with legal obligations to which the Data Controller is subject;
- The legitimate interests of the Data Controller;
- The data subject’s consent, where required.
5. Methods of Processing
Personal data are processed using IT and electronic systems, as well as manual methods, in compliance with the principles of lawfulness, fairness, transparency and data minimisation.
The Data Controller implements appropriate technical and organisational security measures pursuant to Article 32 of the GDPR.
6. Provision of Data
The provision of personal data is necessary to enable the Data Controller to respond to users’ requests and, where applicable, to establish contractual relationships.
Failure to provide the requested data may make it impossible to provide the requested services.
7. Recipients of Personal Data
Personal data may be disclosed exclusively to:
- Internal personnel expressly authorised to process such data;
- Legal, tax, accounting and IT consultants;
- Banking institutions for payment processing purposes;
- Public bodies and competent authorities in cases provided for by law;
- External entities appointed as Data Processors.
Personal data will not be disseminated or made publicly available.
8. Data Retention Period
Personal data will be retained:
- For the duration of the contractual relationship;
- For the duration of the contractual relationship;
Thereafter, for the periods required by applicable law (e.g. 10 years for tax and civil law obligations); - In the event of litigation, for the entire duration of the proceedings.
At the end of the applicable retention periods, the data will be deleted or anonymised.
9. Transfers of Data to Countries Outside the EU
Personal data are not transferred to countries outside the EU.
Any such transfers will take place exclusively in compliance with Articles 44 et seq. of the GDPR.
10. Automated Decision-Making
The Data Controller does not use automated decision-making processes or profiling systems within the meaning of Article 22 of the GDPR.
11. Data Subject Rights
The data subject may exercise the rights provided for under Articles 15–22 of the GDPR at any time, including the right to:
- Obtain confirmation as to whether personal data concerning them are being processed;
- Access their personal data and request their rectification or erasure;
- Obtain restriction of processing;
- Object to processing;
- Receive their data in a structured, commonly used and machine-readable format (data portability);
- Withdraw consent, where given;
- Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Requests may be sent to the contact details provided in Section 1.
12. Data Processing – “Careers” Section
Personal data submitted through the “Careers” section, including information contained in CVs and personal statements, are processed exclusively for the purposes of recruitment and personnel selection and the potential establishment of an employment or collaboration relationship.
The legal basis for processing is the implementation of pre-contractual measures at the data subject’s request, pursuant to Article 6(1)(b) of the GDPR.
The provision of data is partly optional and partly mandatory, but is necessary to enable the application to be assessed.
The data will be processed exclusively by authorised internal personnel and will not be disseminated.
Data relating to unsuccessful applicants will be retained for a maximum period of 12 months from receipt, unless the data subject requests otherwise.
The provision of special categories of personal data within the meaning of Article 9 of the GDPR is not required. Applicants are therefore advised not to include such information in their CVs.
Last updated: April 2026
