Privacy policy US
PRIVACY POLICY - Information Notice pursuant to Article 13 of EU Regulation 2016/679 - GDPR - Notice Regarding the Processing of Personal Data Collected from the Data Subject
In accordance with the provisions of EU Regulation 2016/679 (European General Data Protection Regulation - GDPR) we provide you with the necessary information regarding the processing of personal data. This notice is provided pursuant to Article 13 of the GDPR and Article 130 of the Privacy Code. This notice does not apply to other websites that may be accessed via links on websites under the control of the data controller, who shall not be held liable in any way for third-party websites.
This privacy notice is also based on the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding cookies, the Guidelines on Cookies and Other Tracking Tools issued by the Italian Data Protection Authority and EDPB Guidelines 05/2020 on consent under the GDPR, adopted on May 4, 2020.
Processable personal data:
Personal data: any information relating to an identified or identifiable natural person (“data subject”); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity; (C26, C27, C30).
Browsing Data: The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow for the identification of users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment
Data Provided by the Data Subject: The optional, explicit, and voluntary sending of messages to the contact addresses listed on this site and/or the completion of data collection forms results in the subsequent collection of the sender’s email address—which is necessary to respond to requests—as well as any other personal data entered
Specific Notices: Specific notices may be provided on the website’s pages regarding particular services or the processing of the data provided (Cookies)
For more information on the cookies used by this website, see the cookie policy.
1. DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is ERREPLUS SADDLERY SRL UNIP. | Via Zona Industriale di Piana, 18, 36078, Valdagno (VI), VAT No. 03768550240, email address
2. PURPOSES OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, AND NATURE OF DATA PROVISION
Browsing the website
• LEGAL BASIS: legitimate interest under Article 6(f) and Recital 47: processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into account the reasonable expectations of the data subject based on their relationship with the data controller. Activities strictly necessary for the operation of the website and the provision of the browsing service on the platform.
• DATA RETENTION PERIOD: for the duration of the browsing session. For information on browsing, see the cookie policy
• NATURE OF DATA PROVISION: With the exception of what is specified for browsing data (which is necessary to enable navigation of the website), the user is free to provide personal data.
Filling out a contact data collection form (CONTACT AREA)
• LEGAL BASIS: based on the implementation of pre-contractual measures taken, including at the request of the data subject (C44), pursuant to Article 6(1)(b) of the GDPR.
• DATA RETENTION PERIOD: 1 year
• NATURE OF DATA PROVISION: The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with an asterisk (*) or the word “required” will make it impossible to obtain what is requested or to use the services of the data controller.
Completion of the data collection form for warranty activation (WARRANTY ACTIVATION AREA)
• LEGAL BASIS: based on the implementation of pre-contractual measures taken, including at the request of the data subject (C44), pursuant to Article 6(1)(b) of the GDPR.
• DATA RETENTION PERIOD: for the entire duration of the warranty’s validity
• NATURE OF DATA PROVISION: The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide data marked with an asterisk (*) or the word “required” will make it impossible to obtain what has been requested or to use the services of the data controller.
SPONTANEOUS SUBMISSION OF EMAILS to the addresses listed on the website: to respond to specific requests for information sent spontaneously to the email addresses listed on the website
MANAGEMENT OF REQUESTS TO EXERCISE DATA SUBJECT RIGHTS, pursuant to Art. 15 et seq. of the GDPR (data subject rights)
• LEGAL BASIS: Processing is necessary to comply with a legal obligation to which the data controller is subject (C45) Article 6(1)(c) of the GDPR
• DATA RETENTION PERIOD: The retention period is 5 years from the closure of the request, except in the case of litigation.
• NATURE OF DATA PROVISION: The provision of personal data is mandatory, as it is essential for complying with legal obligations.
3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be disclosed to recipients who will process the data in their capacity as data processors (Article 28 of EU Regulation 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Regulation 2016/679), for the purposes listed above in point 2.
Specifically, the data will be disclosed to
- entities that provide services for the website and communication networks, including email, hosting, website management, platforms, cloud services, and management software;
- for the “Work with Us” section, in addition to internal staff assigned to this task, also to entities responsible for managing recruitment activities and dedicated platforms;
- competent authorities for compliance with legal obligations and/or provisions issued by public bodies, upon request.
Entities belonging to the above categories act as Data Processors or operate independently as separate Data Controllers. The list of Data Processors is constantly updated and available by writing to
4. DATA TRANSFER OUTSIDE THE EUROPEAN UNION
Personal data will not be transferred to countries outside the EEA.
5. AUTOMATED PROCESSING
No decision-making processes based on automated processing, including profiling, are used.
6. RIGHTS OF DATA SUBJECTS
You may exercise your rights as set forth in Articles 15, 16, 17, 18, 19, 20, and 21 of EU Regulation 2016/679 by contacting
Last updated on 06/26/2025