Privacy policy EN
PRIVACY POLICY – Information notice pursuant to Article 13 of EU Regulation 2016/679 – GDPR – Information notice regarding the processing of personal data collected from the data subject
In accordance with the provisions of EU Regulation 2016/679 (European General Data Protection Regulation – GDPR) We hereby provide you with the necessary information regarding the processing of personal data. This notice is provided pursuant to Article 13 of the GDPR and Article 130 of the Privacy Code. This notice shall not be deemed valid for other websites that may be accessed via links on websites under the control of the data controller, who shall not be held liable in any way for third-party websites.
This privacy notice is also based on the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, concerning cookies, the Guidelines on cookies and other tracking tools issued by the Italian Data Protection Authority and EDPB Guidelines 05/2020 on consent under the GDPR, adopted on 4 May 2020.
Personal data that may be processed:
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity; (C26, C27, C30).
Browsing data: The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, enable users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment
Data provided by the data subject: The optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the completion of data collection forms entails the subsequent collection of the sender’s address, which is necessary to reply to enquiries, as well as any other personal data entered
Specific notices: Specific notices may be provided on the website’s pages in relation to particular services or the processing of the data provided (Cookies)
For further information on the cookies used by this website, please see the cookie policy.
1. DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is ERREPLUS SADDLERY SRL UNIP. | Via Zona Industriale di Piana, 18, 36078, Valdagno (VI), VAT No. 03768550240, email address
2. PURPOSES OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD AND NATURE OF DATA PROVISION
Browsing the website
• LEGAL BASIS: legitimate interest under Article 6(f) and Recital 47: the processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into account the reasonable expectations of the data subject based on their relationship with the data controller. Activities strictly necessary for the functioning of the website and the provision of the browsing service on the platform.
• DATA RETENTION PERIOD: for the duration of the browsing session. For information on browsing, see the cookie policy
• NATURE OF DATA PROVISION: with the exception of what is specified for browsing data (which is necessary to enable navigation of the website), the user is free to provide personal data.
Completion of any contact data collection forms (CONTACTS SECTION)
• LEGAL BASIS: based on the implementation of pre-contractual measures taken, including at the request of the data subject (C44), Article 6(1)(b) of the GDPR.
• DATA RETENTION PERIOD: 1 year
• NATURE OF DATA PROVISION: the provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with an asterisk (*) or the word ‘required’ will make it impossible to obtain what has been requested or to use the services provided by the data controller.
Completion of the data collection form for warranty activation (WARRANTY ACTIVATION AREA)
• LEGAL BASIS: based on the implementation of pre-contractual measures taken, including at the request of the data subject (C44), Article 6(1)(b) of the GDPR.
• DATA RETENTION PERIOD: for the entire duration of the warranty’s validity
• NATURE OF DATA PROVISION: the provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with an asterisk (*) or the word ‘required’ will make it impossible to obtain what has been requested or to use the services provided by the data controller.
SPONTANEOUS SENDING OF E-MAILS to the addresses listed on the website: to respond to specific requests for information sent spontaneously to the e-mail addresses listed on the website
HANDLING OF REQUESTS TO EXERCISE THE RIGHTS OF DATA SUBJECTS, pursuant to Article 15 et seq. of the GDPR (rights of the data subject)
• LEGAL BASIS: The processing is necessary to comply with a legal obligation to which the data controller is subject (C45) Article 6(1)(c) of the GDPR
• DATA RETENTION PERIOD: The retention period is 5 years from the closure of the request, except in the event of litigation.
• NATURE OF THE PROVISION OF DATA: The provision of personal data is mandatory, as it is essential for the fulfilment of legal obligations.
3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be disclosed to recipients who will process the data in their capacity as data processors (Article 28 of EU Regulation 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Regulation 2016/679), for the purposes listed above in point 2.
Specifically, the data will be disclosed to
- entities providing services for the website and communication networks, including email, hosting, website management, platforms and cloud services, and management systems;
- for the ‘Work with us’ section, in addition to internal staff assigned to this task, also to parties responsible for managing recruitment activities and dedicated platforms;
- competent authorities for the fulfilment of legal obligations and/or provisions issued by public bodies, upon request.
Entities belonging to the above categories act as Data Processors, or operate entirely independently as separate Data Controllers. The list of Data Processors is constantly updated and available by writing to
4. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
Personal data will not be transferred to countries outside the EEA.
5. AUTOMATED PROCESSING
No decision-making processes based on automated processing, including profiling, are used.
6. RIGHTS OF DATA SUBJECTS
You may exercise your rights as set out in Articles 15, 16, 17, 18, 19, 20 and 21 of EU Regulation 2016/679 by contacting
Last updated 26/06/2025