O.V.S. VILLELLA S.r.l. Website Privacy Notice
Updated on 17 February 2026 
This privacy notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018.

1. Data Controller 
The Data Controller is: 
O.V.S. VILLELLA S.r.l.
VAT No.: IT02065160125
REA VA-227408
Registered office: Via dello Sport 26/28, 21018 Sesto Calende (VA), Italy 
Certified Email (PEC): ovsvillella@certimprese.it
Privacy email: The company is not subject to the obligation to appoint a Data Protection Officer (DPO) pursuant to Article 37 GDPR.

2. Categories of Personal Data Processed 
We process the following categories of data: Browsing data IP address Browser type Operating system Technical access information These data are automatically collected by IT systems. Data voluntarily provided by the user Name Email address Phone number Any information entered in contact forms We do not process special categories of personal data (e.g., health, political, or religious data).
 
3. Purpose and Legal Basis of Processing 
Personal data are processed for the following purposes: 

a) Website operation and security Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller).
Legitimate interest pursued: ensuring IT security, preventing unauthorized access, and guaranteeing proper website operation. 

b) Responding to requests submitted via forms or email Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at the data subject’s request). 

c) Sending newsletters or promotional communications Legal basis: Art. 6(1)(a) GDPR (explicit consent of the user).
Consent may be withdrawn at any time. d) Compliance with legal obligations Legal basis: Art. 6(1)(c) GDPR.
   
4. Processing Methods 
Processing is carried out using electronic tools and appropriate technical and organizational measures to ensure data security, confidentiality, and protection. Access to personal data is allowed only to authorized personnel or to service providers appointed as Data Processors pursuant to Article 28 GDPR.

5. Data Retention 
Period Personal data are retained only for the time strictly necessary to achieve the purposes described above: Browsing logs: up to 7 days, unless required for investigation of crimes Contact request data: maximum 24 months from the last communication Marketing data: maximum 24 months from consent Upon expiration, data will be deleted or anonymized.

6. Data Disclosure and Transfers 
Personal data are not disclosed to the public. They may be shared with: IT and hosting service providers Email service providers Technical or legal consultants If data are transferred outside the European Economic Area (EEA), such transfer will occur in compliance with Articles 44 et seq. GDPR, through adequacy decisions or Standard Contractual Clauses approved by the European Commission. Data subjects may request a copy of the safeguards adopted by contacting the Data Controller.
 
7. Cookies The website uses: Technical cookies necessary for operation Anonymized analytics cookies Marketing cookies only with prior consent Further details are available in the dedicated Cookie Policy. Users may modify or withdraw consent at any time via the cookie banner.
   
8. Data Subject Rights 
Users may exercise at any time the rights provided under Articles 15–22 GDPR: 
Right of access 
Right to rectification 
Right to erasure 
Right to restriction of processing 
Right to data portability 
Right to object to processing 
Right to withdraw consent 
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. 
Requests may be sent to: The Data Controller will respond within 30 days. 
Data subjects also have the right to lodge a complaint with the competent Data Protection Authority.
  
9. Automated 
Decision-Making and Profiling The website does not carry out automated decision-making processes or profiling activities pursuant to Article 22 GDPR.

   
10. Changes to this Privacy Notice 
This privacy notice may be updated over time. Any changes will be published on this page, indicating the date of the update.