Privacy Policy | Prodige English Site

PRIVACY POLICY – WEBSITE

Information document pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)

WHY THIS INFORMATION?

Pursuant to Regulation (EU) 2016/679 (hereinafter the "GDPR"), this page describes the methods used to process personal data. This information is provided pursuant to Article 13 of the GDPR. This information notice does not apply to other third-party websites that may be accessed through links on this website, for which we assume no responsibility.

PERSONAL DATA PROCESSED

Personal Data: any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier or to one or more elements specific to their physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR).

CONTRACTING PARTIES/USERS' DATA

Browsing data: the IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

Data provided voluntarily: the optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the completion of data collection forms entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered.

SPECIFIC INFORMATION NOTICES

Specific information notices may be provided on the Website pages in relation to particular services or data processing activities.

COOKIES AND OTHER TRACKING SYSTEMS. WHAT ARE THEY? WHAT ARE THEY USED FOR?

For information on Cookies and other tracking systems, please refer to the Cookie Policy available in the website footer and at the following link: https://www.prodige-heating.com/ww/en/cookie-policy

1. WHO IS THE DATA CONTROLLER? HOW CAN YOU CONTACT THEM?

The Data Controller is FONDITAL S.p.A, with registered office in Vobarno (BS), Via Cerreto, 40, represented by its pro tempore Legal Representative, who may be contacted for any information by telephone: 0365 878 31, or by e-mail: privacy@fondital.it

2. PURPOSES OF THE PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, NATURE OF THE PROVISION OF DATA

```

PURPOSE OF THE PROCESSING	LEGAL BASIS	DATA RETENTION PERIOD	NATURE OF THE PROVISION OF DATA
Browsing this website. ``` The data necessary to use the web services are also processed for the purpose of: obtaining statistical information on the use of the services (most visited pages, number of visitors by hourly or daily time slot, geographical areas of origin, etc.); checking the correct functioning of the services offered.	The processing is necessary for the purposes of the legitimate interest pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, taking into account the reasonable expectations of the data subject and activities strictly necessary for the operation of the website and browsing itself. (Art. 6, para. 1, letter f and C47 of the GDPR)	The browsing data will be retained for the duration of the browsing session.	The provision of data is necessary for browsing the website.
Use of cookies and equivalent technologies. Please refer to the Cookie Policy in the website footer.	For non-technical necessary cookies and equivalent technologies, the processing is based on consent to the processing of personal data (Art. 6 para. 1 letter a and C42, C43 of the GDPR). Consent is provided through the website banner and Cookie Policy.	Please refer to the Cookie Policy in the website footer.	Please refer to the Cookie Policy in the website footer.

PURPOSE OF THE PROCESSING

LEGAL BASIS

DATA RETENTION PERIOD

NATURE OF THE PROVISION OF DATA

Browsing this website.

```

The data necessary to use the web services are also processed for the purpose of:

obtaining statistical information on the use of the services (most visited pages, number of visitors by hourly or daily time slot, geographical areas of origin, etc.);
checking the correct functioning of the services offered.

The processing is necessary for the purposes of the legitimate interest pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, taking into account the reasonable expectations of the data subject and activities strictly necessary for the operation of the website and browsing itself.

(Art. 6, para. 1, letter f and C47 of the GDPR)

The browsing data will be retained for the duration of the browsing session.

The provision of data is necessary for browsing the website.

Use of cookies and equivalent technologies.

Please refer to the Cookie Policy in the website footer.

For non-technical necessary cookies and equivalent technologies, the processing is based on consent to the processing of personal data (Art. 6 para. 1 letter a and C42, C43 of the GDPR).

Consent is provided through the website banner and Cookie Policy.

Please refer to the Cookie Policy in the website footer.

In addition to browsing, personal data will be processed for the following purposes:

```

PURPOSE OF THE PROCESSING	LEGAL BASIS	DATA RETENTION PERIOD	NATURE OF THE PROVISION OF DATA
A) CONTACTS, sending requests for contact and information.	The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (C44). Art. 6 para. 1 letter b) of the GDPR.	Maximum 12 months.	The provision of data is necessary. The failure to provide the necessary data will make it impossible to contact the data subject and provide the requested information.
B) DIRECT MARKETING, for the sending of advertising, commercial and promotional communications, newsletters, by automated means (e-mail, SMS, instant messaging apps). ``` Communications may contain promotional activities and/or logos of third-party partners and companies belonging to the Group. Personal data will not be transferred or sold. For the complete list of Group companies and partners, data subjects may write to privacy@fondital.it.	The processing is based on consent to the processing of personal data (C42, C43). Art. 6 para. 1 letter a) of the GDPR.	Up to 24 months.	The provision of data is optional. The failure to provide the necessary data will make it impossible to receive direct marketing communications.
C) DIRECT MARKETING, AUTOMATED "SOFT-SPAM" VIA E-MAIL: the data controller will use, for the purpose of sending promotional material, the e-mail address provided by the data subject in the context of the sale of a service, without requiring the data subject's consent, for promotional and commercial communications and newsletters concerning services similar to those covered by the sale, provided that the data subject, having been duly informed, does not object to such use, initially or on the occasion of subsequent communications. At the time of data collection and each time a communication is sent for the purposes referred to in this paragraph, the data subject is informed of the possibility of objecting to the processing at any time, easily and free of charge.	Legitimate interest: The processing is necessary for the purposes of the legitimate interest pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data (C47-C50). Art. 6 para. 1 letter f) GDPR and Art. 130, paragraph 4 of Legislative Decree 196/2003.	Until objection (opt-out).	The provision of data is optional. The failure to provide the necessary data will make it impossible to receive direct marketing communications via e-mail (soft-spam).
D) MANAGEMENT OF DATA SUBJECT REQUESTS pursuant to Articles 15 et seq. of the GDPR (data subject rights).	The processing is necessary for compliance with a legal obligation to which the data controller is subject (C45). Art. 6 para. 1 letter c) of the GDPR.	5 years from the closure of the request, unless there are disputes.	The provision of personal data is mandatory, as it is essential to comply with legal obligations.

3. TO WHOM WILL PERSONAL DATA BE DISCLOSED? DATA RECIPIENTS

Personal data will be disclosed to entities that will process the data as independent Data Controllers or Data Processors (Art. 28 GDPR), and processed by natural persons (Art. 29 GDPR) acting under the authority of the Data Controller and Data Processors on the basis of specific instructions regarding the purposes and methods of processing. The data will be disclosed to recipients belonging to the following categories:

Entities based in Italy that provide services for the website and communication networks, including e-mail, hosting and website management (including Group companies, affiliated companies and subsidiaries);
Entities based in Italy with which the Data Controller has entered into agreements and, where required, subject to consent;
For direct marketing, subject to consent, entities responsible for managing direct marketing activities;
Competent authorities for compliance with legal obligations and/or provisions issued by public bodies, upon request.

The list of Data Processors pursuant to Art. 28 is available by writing to privacy@fondital.it or using the other contact details indicated above.

4. WILL THE DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EEA?

Personal data will not be transferred to countries outside the EEA. In particular, it is specified that data will be stored within the EEA for website hosting, management, development and maintenance services. For third-party cookies and the allocation of countries within and outside the EEA, please refer to the cookie list available in the website footer or at the link indicated above.

5. IS THERE AN AUTOMATED PROCESSING SYSTEM?

Personal data will be processed manually, electronically and through automated systems. It is specified that no fully automated decision-making processes are carried out.

6. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

Data subjects may exercise their rights as provided for by Articles 15 et seq. of the GDPR by contacting the Data Controller at the following e-mail address: privacy@fondital.it or by writing to the contact details indicated above.

The Data Controller guarantees data subjects the possibility of requesting, at any time, access to their personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), and restriction of processing (Art. 18). The Data Controller shall communicate (Art. 19) to each recipient to whom the personal data have been disclosed any rectification, erasure or restriction of processing carried out. The Data Controller shall inform data subjects who request it of such recipients.

The Data Controller guarantees the right to data portability (Art. 20) and, in the event of requests pursuant to Art. 20, shall provide data subjects with their data in a structured, commonly used and machine-readable format.

Data subjects have the right to object (Art. 21), at any time, to processing based on legitimate interest by writing to the contact details indicated above with the subject line "objection". In the event of exercising the right to object to processing based on legitimate interest, the Data Controller acknowledges the data subject's right to obtain, upon request, information on the balancing test carried out.

If data subjects believe that the processing of their personal data by the Data Controller violates the provisions of Regulation (EU) 2016/679, they are entitled to lodge a complaint with the national supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement (Italian Data Protection Authority – Garante Privacy https://www.garanteprivacy.it/), or to bring appropriate legal proceedings.

7. CHANGES TO THE PRIVACY POLICY

The Data Controller may change, modify, add or remove any part of this Privacy Policy. In order to facilitate the verification of any changes, the Privacy Policy will include the date on which it was last updated.

Last update: 8/26/2026 9:32:53 AM