Privacy Policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

---

1. Data Controller

Chinucci Legnami Srl
Via Cassia Cimina, km. 29,000 – Località XXX Miglia
01037 – Ronciglione (Viterbo), Italy
VAT / Tax Code: IT01583820566 – REA VT-114158

Email: info@chinuccilegnami.com
Phone: +39 0761 65 91 20

---

2. Types of Personal Data Processed

The Data Controller processes the following categories of personal data:

• Data provided directly by the user via the contact form: first name, last name, company name, phone number, email address, county/province, and any other information freely entered in the message.
• Usage data collected automatically during browsing: IP address, browser type, operating system, pages visited, access times, session duration, and other technical parameters.
• Data collected through tracking tools (cookies and similar technologies): please refer to the Cookie Policy on this website for full details.

The user is responsible for any third-party personal data they may communicate to the Data Controller through this website.

---

3. Purposes and Legal Bases for Processing

Purpose	Legal basis (Art. 6 GDPR)
Handling contact requests, information enquiries and quotes	Performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b))
Web traffic statistical analysis (Google Analytics 4)	Consent of the data subject (Art. 6(1)(a))
Remarketing and behavioural targeting (Google Ads, Facebook)	Consent of the data subject (Art. 6(1)(a))
Centralised tag management (Google Tag Manager)	Legitimate interest of the Controller and/or consent (Art. 6(1)(f) / (a))
Display of fonts from external platforms (Google Fonts)	Legitimate interest of the Controller (Art. 6(1)(f))
Compliance with legal obligations	Legal obligation (Art. 6(1)(c))
Defence in legal proceedings	Legitimate interest of the Controller (Art. 6(1)(f))

---

4. Details of Third-Party Services Used

4.1 Contact Form

Data entered by the user in the contact form is used solely to respond to the submitted request (information, quotes, or other enquiries). Data is not shared with third parties for commercial purposes.

4.2 Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google Tag Manager is a tool that allows centralised management of scripts and tags on the website. The service itself does not directly collect personal data, but enables the loading of other third-party services that may collect data.
Privacy Policy: https://business.safety.google/privacy/

4.3 Google Analytics 4

Provider: Google Ireland Limited (for EU users) / Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google Analytics 4 is a web traffic analysis service. IP addresses are anonymised before being recorded on Google’s servers. Google may use aggregated data to contextualise its advertising services.
Privacy Policy: https://business.safety.google/privacy/
Opt-out: https://tools.google.com/dlpage/gaoptout

4.4 Remarketing with Google Analytics

Provider: Google LLC / Google Ireland Limited
This service links browsing data collected by Google Analytics with the Google Ads advertising network and the DoubleClick cookie, in order to display personalised ads to users who have previously visited the website.
Privacy Policy: https://business.safety.google/privacy/
Opt-out: https://adssettings.google.com/authenticated

4.5 Google Ads Remarketing

Provider: Google Ireland Limited
Allows personalised ads to be shown to users who have previously visited the website, via the Google Ads network and the DoubleClick cookie.
Privacy Policy: https://business.safety.google/privacy/
Opt-out: https://adssettings.google.com/authenticated

4.6 Google Ads Similar Audiences

Provider: Google Ireland Limited
This service uses remarketing data to show ads to users whose behaviour is similar to that of visitors already included in remarketing lists.
Privacy Policy: https://business.safety.google/privacy/
Opt-out: https://adssettings.google.com/authenticated

4.7 Facebook Remarketing

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Facebook Remarketing connects the website’s activity with Meta’s advertising network (Facebook/Instagram) for the display of personalised ads.
Privacy Policy: https://www.facebook.com/privacy/policy/
Opt-out: https://www.facebook.com/help/247395082112892

4.8 Google Fonts

Provider: Google Ireland Limited
Google Fonts is a service for displaying typefaces hosted by Google. Loading fonts may result in the user’s IP address being transmitted to Google’s servers.
Privacy Policy: https://business.safety.google/privacy/

---

5. Transfer of Data Outside the European Union

Some of the third-party providers listed above (in particular Google LLC for Google Analytics 4 and Remarketing with Google Analytics) are based in the United States. Data transfers to such parties take place in compliance with the safeguards required by the GDPR, in particular through Standard Contractual Clauses approved by the European Commission or pursuant to applicable adequacy decisions. Users may request further information on the measures adopted by contacting info@chinuccilegnami.com.

---

6. Processing Methods

Personal data is processed using IT and electronic tools, with appropriate technical and organisational security measures in place to prevent unauthorised access, disclosure, modification, or destruction. Data may be accessible, within the limits of their respective roles, to employees and collaborators of the Data Controller acting as data processors, as well as to external service providers (hosting, IT support, legal counsel) operating as Data Processors pursuant to Art. 28 GDPR. An updated list of Data Processors is available upon request.

---

7. Data Retention Period

Personal data is retained for the period strictly necessary to fulfil the purpose for which it was collected:

• Contact form data: retained for the time needed to handle the request and, where applicable, for the period required by law (generally up to 10 years for fiscal/accounting obligations).
• Usage and statistical data: retained according to the terms set by the respective providers (typically 14 months for Google Analytics 4).
• Data processed on the basis of consent (remarketing, profiling): retained until consent is withdrawn or the purpose is fulfilled, subject to any legal obligations.

Upon expiry of the retention period, data is permanently deleted or anonymised.

---

8. Rights of the Data Subject

As a data subject, the user has the right to:

• Access (Art. 15 GDPR): obtain confirmation of processing and receive a copy of their personal data.
• Rectification (Art. 16 GDPR): request the correction of inaccurate data or the completion of incomplete data.
• Erasure (“right to be forgotten”) (Art. 17 GDPR): request the deletion of personal data where the conditions set out in the regulation are met.
• Restriction of processing (Art. 18 GDPR): request that data be stored without being further processed.
• Data portability (Art. 20 GDPR): receive personal data in a structured, commonly used and machine-readable format, where technically feasible.
• Objection (Art. 21 GDPR): object to processing carried out on the basis of legitimate interest or for direct marketing purposes, at any time and free of charge.
• Withdrawal of consent (Art. 7 GDPR): withdraw consent previously given at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Complaint (Art. 77 GDPR): lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it) or with any other competent supervisory authority.

To exercise any of the above rights, users may send a written request to:

Chinucci Legnami Srl
Email: info@chinuccilegnami.com
Via Cassia Cimina, km. 29,000 – 01037 Ronciglione (Viterbo), Italy

The Data Controller will respond within 30 days of receiving the request, as required by Art. 12 GDPR. In the case of particularly complex requests, this period may be extended by a further 60 days, with prior notice to the user.

---

9. Cookie Policy

This website uses cookies and tracking tools. For detailed information on the types of cookies used, their purposes, the third parties involved, and how to manage or disable them, please refer to the Cookie Policy available on this website.

To opt out of interest-based advertising, users may use the following tools:

• YourOnlineChoices (EU): https://www.youronlinechoices.com/
• Network Advertising Initiative: https://optout.networkadvertising.org/
• Digital Advertising Alliance: https://optout.aboutads.info/

---

10. Changes to This Privacy Policy

The Data Controller reserves the right to update this privacy policy at any time, to reflect changes in applicable law or in the services provided. Updates will be published on this page with the date of the latest revision. For processing based on consent, the Data Controller will obtain new consent where required.

---

Last updated: March 2026