CLIENT PRIVACY NOTICE

Notice on the processing of personal data
pursuant to Articles 13 and 14 of EU Regulation 2016/679

1. INTRODUCTION

With this notice, VENT MOTO S.r.l., with registered office in Lecco (LC), Via Balicco no. 61, acting as data controller, informs its clients and prospective clients that their personal data will be processed in compliance with EU Regulation 2016/679 (“GDPR”), Legislative Decree no. 196/2003 as amended by Legislative Decree no. 101/2018, and any other applicable personal data protection legislation.

This notice describes how the Company collects, uses, retains and protects personal data processed in the context of commercial, contractual, promotional relationships and customer satisfaction activities.

2. DATA CONTROLLER

The data controller is VENT MOTO S.r.l., with registered office in Lecco (LC), Via Balicco no. 61.

The Controller may be contacted:

by certified email (PEC) at ventmotosrl@pec.it
by registered letter to the address above
or by ordinary email at: vent@ventmoto.it

3. CATEGORIES OF PERSONAL DATA PROCESSED

The Company may process the following categories of personal data:

Category of data	Examples
Identification data	First name, surname, tax code, personal details.
Contact data	Address, telephone number, email address.
Contractual data	Data relating to purchases, orders, quotes, contracts, products or services requested.
Administrative and fiscal data	Data required for invoicing, accounting, payments and tax compliance.
Commercial preference data	Consents given and preferences regarding promotional communications, events or initiatives.
Customer satisfaction data	Responses to questionnaires, assessments of product or service quality, satisfaction ratings.

As a rule, the Company does not process special categories of personal data under Article 9 GDPR, nor data relating to criminal convictions or offences under Article 10 GDPR, unless strictly necessary in specific cases and within the limits permitted by law.

4. PURPOSES AND LEGAL BASES FOR PROCESSING

4.1 Contractual and pre-contractual purposes

Personal data are processed to handle requests for information, quotes or orders; to enter into, perform and manage sales or service contracts; to manage operational communications, after-sales support, deliveries, payments, collections and administrative activities related to the contractual relationship.

The legal basis is the performance of a contract or the taking of pre-contractual steps at the request of the data subject, pursuant to Article 6(1)(b) GDPR.

4.2 Legal, administrative, fiscal and accounting purposes

Personal data are processed to fulfil obligations under applicable law, including fiscal, accounting, administrative and civil obligations, as well as any obligations under anti-money laundering, anti-mafia or other applicable legislation.

The legal basis is compliance with a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) GDPR.

5. NATURE OF DATA PROVISION

Providing personal data for contractual, pre-contractual, administrative, fiscal and legal purposes is mandatory. Failure to provide data may prevent the Company from processing the data subject’s requests, concluding the contract or correctly fulfilling the requested services.

Providing data for customer satisfaction purposes is optional. Withholding consent will have no consequence on the ability to establish or continue a contractual relationship with the Company.

6. PROCESSING METHODS

Processing is carried out using paper-based, IT, electronic and telematic tools, according to logic consistent with the stated purposes. The Company adopts appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data.

Personal data are not subject to automated decision-making, including profiling, pursuant to Article 22 GDPR.

7. RETENTION PERIOD

Purpose	Retention period
Contractual and pre-contractual purposes	For the entire duration of the contractual relationship and, thereafter, for the period necessary to protect the Controller’s rights.
Administrative, fiscal and accounting purposes	As a rule, up to 6 years from registration or from the end of the relationship, unless further retention is required by law or for the protection of rights.
Customer satisfaction	Until consent is withdrawn and, in any event, for a maximum period of 24 months from data collection or from the last relevant contact.

Upon expiry of the retention periods, data will be deleted, anonymised or aggregated, unless further retention is necessary to comply with legal obligations or to establish, exercise or defend a right in legal proceedings.

8. RECIPIENTS OF PERSONAL DATA

Personal data may be communicated, to the extent necessary, to:

employees, collaborators and authorised personnel of the Company;
legal, tax, administrative and accounting advisors;
banks and payment service providers;
providers of IT, cloud, management, hosting and IT maintenance services;
suppliers and partners involved in order management, deliveries, events or commercial activities;
parties responsible for sending promotional communications, where applicable and subject to consent;
public authorities, judicial authorities, supervisory authorities or other public bodies, where required by law.

Parties that process personal data on behalf of the Company are appointed, where necessary, as data processors pursuant to Article 28 GDPR.

9. TRANSFERS TO COUNTRIES OUTSIDE THE EEA

Personal data will not be transferred to countries outside the European Economic Area. Should it become necessary in the future to transfer personal data to third countries or international organisations, the Controller will ensure that such transfers comply with Articles 44 et seq. GDPR.

10. DATA SUBJECT RIGHTS

The data subject may exercise, within the limits and conditions set out by the GDPR, the following rights:

right of access to their personal data;
right to rectification of inaccurate or incomplete data;
right to erasure (“right to be forgotten”);
right to restriction of processing;
right to object to processing;
right to data portability, where applicable;
right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures set out on the website www.garanteprivacy.it.

11. CONTROLLER CONTACT DETAILS

For any request regarding the processing of personal data or the exercise of rights, the data subject may contact:

VENT MOTO S.r.l.
Via Balicco no. 61, 23900 Lecco (LC)
PEC: ventmotosrl@pec.it
Email: vent@ventmoto.it

12. SUMMARY TABLE

Type of data	Purpose	Legal basis	Retention	Recipients	Transfer outside EEA
Identification and contact data	Handling requests, quotes, orders and contractual relationships	Art. 6(1)(b) GDPR – contract or pre-contractual measures	Duration of relationship and thereafter within necessary limits	Authorised personnel, advisors, IT providers, operational partners	No
Contractual data	Performance and management of the contract, support, operational communications	Art. 6(1)(b) GDPR	Duration of relationship and thereafter within necessary limits	Authorised personnel, advisors, banks, suppliers, operational partners	No
Administrative, fiscal and accounting data	Tax, accounting, administrative compliance and legal obligations	Art. 6(1)(c) GDPR – legal obligation	As a rule up to 10 years, subject to further retention required by law	Tax and accounting advisors, banks, public authorities, competent authorities	No
Contact and feedback data	Customer satisfaction and quality surveys	Art. 6(1)(a) GDPR – consent	Until withdrawal and in any event maximum 24 months	Authorised personnel, IT providers, any appointed providers	No

This notice is also available in printable format: download the PDF.

Last updated: 8 June 2026

Privacy Policy