Privacy Policy

Data controller

Scarpati & Ruggiero S.r.l., with registered office at Via Terragneta, 40 — 80058 Torre Annunziata (NA), Italy, VAT no./tax code 06500851214, REA no. NA - 819404 (hereinafter, the "Controller"). For any request concerning the processing of your data, you can contact the Controller at scarpati@scarpati.eu, by certified email (PEC) at scarpatiruggiero@pec.it or by phone at +39 081 861 6341.

Data collected

Through the forms on the site we collect the data you provide directly:

• Name, email address and, optionally, phone number
• If you create an account: first name, last name, email, password (stored encrypted, never in plain text), account type (private/business) and, if you save them, billing and shipping addresses
• For orders paid online: billing address (street, postcode, city, province/region) and tax code or VAT number
• Content of messages sent through the contact forms
• Files uploaded for a quote request (DXF/STEP/IGES drawings) or for welding/coating requests (PDF attachments, images)
• Technical quote data (material, thickness, quantity, notes)

We do not collect data through profiling cookies: for details on cookies, see the Cookie Policy.

Purposes and legal basis of processing

Data are processed to respond to contact requests, prepare the quotes requested through the online calculator, handle welding and coating requests, create and manage the registered customer account (including access by our authorised staff to answer your requests without asking you again for data you have already provided) and fulfil orders. The legal basis is the performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR) and, for general communications, the consent given by submitting the form.

Processing methods and third-party providers

Data are processed electronically and stored through the following providers, which act as data processors or independent controllers under their respective terms of service:

• Netlify — website hosting, contact form handling (Netlify Forms) and order storage (Netlify Blobs)
• Cloudinary — storage of files attached to quote orders
• Resend — sending of order notification emails
• Stripe — recording of the payment method and handling of charges for accepted orders

Some of these providers may be based or have servers outside the European Economic Area; in that case the transfer takes place on the basis of appropriate safeguards provided for by the GDPR (e.g. standard contractual clauses).

Retention period

Data are kept for as long as needed to handle the request or order and, where there is a contractual relationship, for the period required by law (e.g. tax and accounting regulations).

Rights of the data subject

At any time you can exercise the rights under Articles 15-22 GDPR against the Controller: access, rectification, erasure, restriction, data portability and objection to processing. You can exercise these rights by writing to scarpati@scarpati.eu.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of your country of residence if you believe that the processing of your data breaches applicable law.

Changes to this notice

This Privacy Policy may be updated from time to time. We invite you to check it periodically to stay informed of any changes.