This policy describes how Apparire srl processes the personal data of those who visit and use the website apparire.it (the “Website”), pursuant to Art. 13 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Italian Privacy Code”), as amended by Legislative Decree 101/2018. This policy applies exclusively to the Website and not to third-party websites reachable through links.

1. Data Controller

Apparire srl — Via Baldassarre Peruzzi 26, 41012 Carpi (MO), Italy — VAT no. IT02298310364
Email for requests concerning personal data: Link

2. Data processed
  • Browsing data. IP address, date and time of the request, requested page, server response code, referring page (referrer), browser type and operating system. These are collected automatically by the systems that run the Website.
  • Data provided by the user. First and last name, company, email address, phone number and the content of messages sent through the form or by email; for orders and rentals, billing and shipping details as well.
  • Data collected through cookies and similar technologies. Online identifiers and data on interaction with the pages, collected only with the user’s consent, except for the technical cookies required for the Website to function.

The Website does not request special categories of data (Art. 9 GDPR). Users are asked not to include any in their messages.

3. Purposes, legal bases and services used
3.1 Operation and security of the Website

Browsing data are recorded in the server logs to keep the Website running, diagnose malfunctions and protect it from automated access, bulk content extraction (scraping) and abuse attempts, including by blocking individual IP addresses or entire networks.

Legal basis: the Controller’s legitimate interest in the security and continuity of the service (Art. 6(1)(f) and Recital 49 GDPR).

Hosting: Register S.p.A. (team.blue group), acting as data processor, with servers located in the European Union (Benelux). Privacy Policy

3.2 Contact and quote requests

Data sent through the contact form, by email or by phone are used to reply to requests and, where requested, to prepare a quote.

Legal basis: pre-contractual measures taken at the data subject’s request (Art. 6(1)(b)) or legitimate interest in following up on the request received (Art. 6(1)(f)).

Spam protection. The form is protected by Google reCAPTCHA (Google Ireland Limited), which analyzes technical data about the device and the interaction with the page to tell real users apart from automated programs. Legal basis: the Controller’s legitimate interest in protecting the Website from spam and abuse (Art. 6(1)(f)). Privacy Policy

3.3 Orders, equipment rental and user accounts

Orders, rentals and user accounts are managed through WooCommerce, installed on the Website: the data remain on the Controller’s servers. Payments by PayPal or card are handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, which processes payment data as an independent controller. The Website does not store PayPal credentials or card details. Privacy Policy

Legal basis: performance of a contract (Art. 6(1)(b)); compliance with accounting and tax obligations (Art. 6(1)(c)).

3.4 Usage statistics — Google Analytics 4

The Website uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and managed through Google Tag Manager, to measure page usage in aggregate form and improve its content. Privacy Policy – Opt Out

Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), given through the cookie banner.

The Website uses Google Consent Mode v2: until the user gives consent, no analytics cookies are set. Without consent, Google may receive technical signals that contain no cookies or persistent identifiers, used only for aggregate statistical modeling.

Google Analytics 4 does not log or store the IP addresses of users in the European Union.

Server-side tracking. Part of the measurement passes through an intermediate server (server-side Google Tag Manager) provided by Stape, Inc. (USA) on servers located in the European Union (Belgium), acting as data processor. The intermediate server lets the Controller control and reduce the data sent to third parties; it does not replace consent, which remains required. Privacy Policy

3.5 Advertising and remarketing

The Website uses the following tools, managed through Google Tag Manager, to measure the results of its search and social media communication and show ads to people who have already visited the Website.

  • Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): conversion measurement for Google ads and remarketing, including through audiences built in Google Analytics 4. With Google Consent Mode v2, no advertising cookies are set without consent; Google may receive technical signals that contain no cookies or persistent identifiers, used only for statistical conversion modeling. Privacy Policy – Ad settings
  • Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland): measurement of visits coming from Facebook and Instagram and of actions taken on the Website, and creation of audiences for remarketing. The same events may also be sent to Meta from the intermediate server described in section 3.4 (Conversions API), always and only with the user’s consent. For the collection and transmission of the data, the Controller and Meta are joint controllers (CJEU, C-40/17, Fashion ID); for subsequent processing Meta acts as an independent controller. Privacy Policy
  • LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Dublin, Ireland): conversion measurement for LinkedIn campaigns, aggregate demographic statistics on visitors, and remarketing. Privacy Policy

Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Without consent, these tools are not activated.

3.6 Content from external platforms

Some pages embed content hosted by third parties. These services may collect browsing data even if the user does not interact with the content.

Legal basis: consent, given through the cookie banner.

Fonts. The Website uses the device’s system fonts and fonts hosted on its own server: displaying text involves no data transmission to external services.

3.7 Legal obligations and protection of rights

Data may be processed to comply with legal obligations or requests from authorities (Art. 6(1)(c)) and to establish, exercise or defend legal claims (Art. 6(1)(f)).

4. Recipients

Data are processed by the Controller’s authorized and instructed staff (Art. 29 GDPR) and by providers acting as data processors under a contract pursuant to Art. 28 GDPR: hosting, measurement services, technical support. They may be disclosed to parties acting as independent controllers, such as payment institutions, couriers, tax and legal advisors, and public authorities. Data are not publicly disseminated. The up-to-date list of processors is available on request.

5. Transfers outside the European Economic Area

Some providers (including Google, Meta, LinkedIn, Stape and Vimeo) may process data in the United States. For certified providers, the transfer is based on the European Commission’s adequacy decision of July 10, 2023 on the EU-U.S. Data Privacy Framework (Art. 45 GDPR); in other cases, on the standard contractual clauses adopted by the Commission (Art. 46(2)(c) GDPR). A copy of the safeguards in place can be requested from the Controller.

6. Retention period
  • System and security logs: 30 days, unless needed to investigate abuse or unlawful activity.
  • Contact and quote requests: 24 months from the last exchange, if no contractual relationship follows.
  • Orders, rentals and accounting records: duration of the relationship and, for tax documents, 10 years (Art. 2220 of the Italian Civil Code).
  • User accounts: until the account is deleted, which can be requested at any time.
  • Google Analytics 4: 2 months for event-level data, 14 months for user-level data.
  • Cookies and tracking technologies: durations listed in the Cookie Policy.

When the period expires, data are deleted or anonymized. They may be kept longer only where necessary to comply with a legal obligation or to protect a right in court.

7. Provision of data

Providing data is optional. However, without the data marked as required in the forms, it is not possible to reply to requests or process orders and rentals. Refusing non-technical cookies does not limit browsing of the Website.

8. Data subject rights

Data subjects may at any time ask the Controller for access to their data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and portability of the data they provided (Art. 20). They may object to processing based on legitimate interest (Art. 21) and, without giving reasons, to processing for direct marketing purposes. They may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)).

Requests should be sent to dpo@apparire.it. Responses are free of charge and are provided within one month, extendable by two further months in complex cases (Art. 12(3)).

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the Member State where they live or work.

9. Automated decision-making

The Controller does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject (Art. 22 GDPR).

10. Minors

The Website is intended for businesses and professionals. The Controller does not knowingly collect data from children under 14 (Art. 2-quinquies of the Italian Privacy Code).

11. Cookies

Detailed information on cookies and tracking technologies is provided in the Cookie Policy. Preferences can be changed at any time through the cookie banner.

12. Changes

The Controller may update this policy. Changes are published on this page together with the date of the update.

Last updated: September 25, 2026

apparire.it
apparire.it

©2026 IT02298310364 All rights reserved