Privacy Policy

1. Data Controller

The Data Controller is Nuova Sabi S.R.L., with registered office at Via Ca' Brusà, 42, 36063 Marostica (VI), Tax Code and VAT number 03356200240. For information regarding the processing of personal data or to exercise your rights, you may contact the Data Controller at info@sabi.it.

2. Types of Data Processed and Third-Party Services

The Website is primarily intended to provide information and present the company’s activities. During normal use of the Website, the following categories of data may be processed:

• Data voluntarily provided by the user: personal data contained in communications voluntarily sent to the email addresses shown on the Website, such as first name, surname, email address, contact details and any other information voluntarily included by the data subject in the message.
• Technical and browsing data: during the normal operation of the IT systems and software procedures used to run the Website, certain technical data may be acquired, such as IP address, browser type, operating system, date and time of the request and other information necessary for operation, security and correct delivery of the service.
• Third-party services:
  • Google Maps (Google Ireland Limited): the Website uses Google Maps to allow users to view the company’s location. The service is loaded only after the user makes an affirmative choice. Once the map is activated, Google may receive technical data relating to the user’s device and connection and may use cookies or other tools in accordance with its own terms and privacy notices.

3. Purposes of Processing

Personal data may be processed solely for purposes related to the operation of the Website and relations with users, in particular to:

• respond to requests for information, contact, assistance or quotations voluntarily sent by the user by email;
• manage any pre-contractual relations arising from a request by the data subject;
• ensure the proper operation, security and technical maintenance of the Website;
• allow the use of external services such as Google Maps only following the user’s choice where required;
• comply with any obligations imposed by law, regulations or measures issued by the competent authorities.

Data received through contact requests are not used to send promotional or marketing communications without a specific and appropriate legal basis.

4. Legal Basis for Processing

Depending on the purposes pursued, the processing of personal data is based on the following legal grounds:

• performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) GDPR, when the user contacts Nuova Sabi S.R.L. to request information, assistance, availability of products or services, offers or quotations;
• legitimate interest of the Data Controller, pursuant to Article 6(1)(f) GDPR, limited to activities necessary for the security, protection and proper technical management of the Website, while respecting the fundamental rights and freedoms of data subjects;
• compliance with legal obligations, pursuant to Article 6(1)(c) GDPR, where processing is necessary to comply with obligations under applicable law;
• consent of the data subject, pursuant to Article 6(1)(a) GDPR, where required for the activation of services or tools that are not strictly necessary, as provided by applicable law.

Simply sending a request by email is not considered consent to the use of data for promotional or marketing purposes.

5. Processing Methods and Data Retention

Data are processed using IT and telematic tools and, where necessary, appropriate organisational measures, in accordance with the principles of lawfulness, fairness, transparency, minimisation and security. Appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, loss, destruction, disclosure or unlawful use.

Data contained in communications received are retained for the period necessary to handle the request and any resulting relationship. Where the request gives rise to a contractual, administrative or commercial relationship, the data may be retained for any additional periods required by applicable law and for the protection of the Data Controller’s rights.

Data that are no longer necessary for the purposes for which they were collected will be deleted or anonymised, unless further retention is necessary to comply with legal obligations.

6. Recipients and Data Transfers

Personal data are not sold or disseminated. They may be processed by authorised personnel of the Data Controller and, where necessary, by external parties providing technical, IT, hosting, email or Website maintenance services, within the limits necessary to carry out their respective activities.

Some third-party services used by the Website, including Google Maps referred to in this notice, may involve the processing of personal data by entities belonging to international organisations or established outside the European Economic Area. In such cases, any data transfers take place in compliance with the conditions and safeguards set out in Chapter V of the GDPR and applicable law.

7. Rights of the Data Subject

Where provided for by applicable law, the data subject may exercise the rights recognised by Articles 15–22 GDPR by sending a request to info@sabi.it.

• obtain confirmation as to whether or not personal data concerning them are being processed and access such data;
• obtain rectification of inaccurate data or completion of incomplete data;
• request deletion of personal data where applicable;
• request restriction of processing;
• object to processing in the cases provided for by Article 21 GDPR;
• receive personal data in a structured, commonly used and machine-readable format where the conditions for the right to data portability are met;
• withdraw any consent given at any time, without affecting the lawfulness of processing carried out before withdrawal.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority, if they believe that the processing of their personal data infringes applicable law.

8. Updates

This Privacy Policy was last updated on 30 August 2026. The Data Controller may update it if changes occur in the processing carried out, the services used on the Website or applicable law.