According to Reg. (UE) 2016/679 ("GDPR")

This website collects the Personal data of its Users.

Data Controller

Sales Srl - Via Giotto,26 20100 Milano - Italia
Andrea Grimoldi

Types of Data collected

The Personal data collected by the website, either autonomously or from third parties, include: Name, Surname, Email, Phone, Usage data and Cookies.
This privacy notice or the information notices visualised prior to Data collection specify the type of Data collected.
Personal data may be freely provided by Users or, in case of Usage Data, they may be collected automatically.
Unless stated otherwise, all the Data requested by the website are required. If the User refuses to supply Data, it might be impossible to provide the Service for which such Data are collected.
If the Data requested are optional, Users can freely choose whether or not to supply them, with no effects on the availability of the Service or its operation.
In case of doubts about which Data are required, Users can contact the Data Controller.
Unless stated otherwise, the use of Cookies, if any, or other tracking tools by this Website or the owners of third party services used by the website, is intended to provide the Service requested by the User and for other purposes described in this document and in the Cookie Policy, where available.
Users are accountable for third party Personal data that are obtained, published or shared via this Website and guarantee they are entitled to communicate or disseminate them, exempting the Data Controller from any liability toward third parties.

Method and place of Data processing

Method of processing
The Data Controller adopts appropriate security measures to avoid the unauthorised access, disclosure, modification or destruction of Personal data.

We adopt appropriate technical and organisational measures to protect Users' personal data against accidental or unlawful destruction, loss, modification or damage.

Data are processed using IT and/or electronic means, with organisational methods and logics that are strictly connected with the aforesaid purposes. In addition to the Data Controller, Data may be accessed in some cases also by other persons involved in the company's organisation and its collaborators (administrative/sales/marketing/legal staff, system administrators, third-party providers of technical services, mail service providers, hosting providers, IT companies, communication agencies) who may also be appointed by the Data Controller, where necessary, as Processors. The updated list of Processors may always be requested to the Data Controller.

Legal basis of processing

The Data Controller processes Personal data concerning Users if and to the extent that at least one of the following applies:
- the User has given consent to the processing for one or more specific purposes;
- processing is necessary for the performance of a contract to which the User is party or in order to take steps prior to entering into a contract;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
Users may always ask the Data Controller to specify whether processing is based on the law, a contract or whether it is necessary to enter into a contract.


Data are processed at the Data Controller's operating headquarters and at the facilities of the parties involved in processing. Information (including personal information) may be stored locally on Users' devices by using cookies and other filing systems of applications and browsers.
The User's Personal data may be transferred to a country other than his/her own. To obtain information on the place of processing, Users can check the section containing details about the processing of Personal Data.
Users may obtain information on the legal basis of any transfer of Data outside the European Union and on the security measures adopted by the Data Controller to protect Data.
For further information, please contact the Data Controller.
Should any of the above transfers take place, the User may refer to the respective sections of this document or ask the Data Controller for information, contacting the latter by using the details indicated above.

Storage period

Data are processed and stored for the time necessary to fulfil the purposes for which they were collected.
- Personal data collected for purposes connected to the performance of a contract between the Data Controller and the User, will be kept until the contract is fully executed.
- Personal data collected for purposes connected to a legitimate interest of the Data Controller, will be kept until such interest is satisfied. The User may obtain further information on the legitimate interest pursued by the Data Controller in the corresponding sections of this document or by contacting the Data Controller.

If data processing is based on the User's consent, the Data Controller may keep the latter's Personal data until such consent is withdrawn. In addition, the Data Controller may be required to keep specific Personal data for a longer period to fulfil a statutory obligation or an Authority's order.
At the end of the storage period, the Personal data will be cancelled and the User may no longer enforce his/her right of access, erasure, rectification and portability of such Data.

Purposes of Data processing

The User's Data are collected to enable the Data Controller to provide its Services and for the following purposes: To contact the User, to Interact with social networks and external platforms, for Statistical purposes and to Visualise the content of external platforms.
For further detailed information on the purposes of processing and on the Personal Data that are actually relevant to each purpose, the User may refer to the corresponding sections of this document.

Links to third-party websites

Our website may contain links to or from third-party websites. Please note that these websites have their own privacy policies and we assume no liability or obligation in relation to the said policies. Please check these policies before sending personal information to the said websites.

Details on Personal Data processing

Personal Data are collected for the following purposes and using the following services:

Contact form
The User, entering his Data in the form, consents to its use in response regarding the matter of the form the User has completed to the request sent by the same.
Place of processing: Italy
Personal Data collected:
Name, Surname, Email, Phone

Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. that uses Personal Data collected to track and examine the use of the Site, to fill in reports and share them with other services developed by Google.
Google may use Personal Data to contextualise and personalize its advertisements.
Personal Data collected: Cookies and Data Usage
Place of processing: United States

Google Maps widget (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows this application to integrate such contents within its pages.
It coud occur that, even if the Users do not use the service, Google may collect Traffic Data related to the pages in which it is installed.
Personal Data collected: Cookies and Data Usage
Place of processing: United States

User's rights

In relation to Data processed by the Data Controller, Users may:
withdraw their consent at any time
object to Data processing if processing has a legal basis other than consent
access their Data and receive a copy of the Data processed
check and ask for their Data to be updated/rectified
restrict processing to storage purposes only. Should Data be processed for direct marketing purposes, the User may object to processing without giving reasons.
obtain erasure or cancellation of their Personal data
receive their Data or have them transferred to another data controller. This provision is applicable when Data are processed with automated methods and processing is based on the User's consent, on a contract which the User is a party to or on contractual measures connected therewith.
lodge a complaint with the competent Data Protection Supervisory Authority or take legal action.
Details on the right to object

When Personal data are processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, the User may object to processing on grounds relating to the User's particular situation.
Should the User's Data be processed for direct marketing purposes, the User may object to processing without giving reasons. To understand whether the Data Controller processes Data for direct marketing purposes, the User may refer to the relevant sections of the Privacy notice.

How the User's rights can be enforced

To enforce his/her rights, the User may send a request to the Data Controller, which will be fulfilled as soon as possible (within and no later than 30 days).

System logs and maintenance

For reasons connected to its operation and maintenance, this Website and any third-party services used by the same may collect system Logs, namely files that record interactions and that may contain also Personal data such as the User's IP address.

This Website does not support Do Not Track requests.

Changes to this Privacy notice

The Data Controller may change this document at any time, giving notice to Users on this page and, where possible, on this Website and, where technically and legally feasible, by sending a notice to Users using the contact details held by the Data Controller. Therefore, please check this page regularly.
Should the said changes concern processing operations whose legal basis is consent, the Data Controller may collect the User's consent again, where necessary.
Additional information on Personal data processing may be requested at any time to the Data Controller.

The User declares s/he is aware that the Data Controller may be required to disclose Data pursuant to orders issued by public authorities.

Pagina ospitata da