Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)
Last updated: November 2, 2026
This Privacy Policy explains how personal data are processed when you visit www.airvacs.net (the “Website”) or contact us through the forms, the WhatsApp button, the telephone number or the email address shown on the Website.
1. Data Controller
AirVacs Latam S.r.l.
Registered office: [TO BE COMPLETED: registered office address]
VAT No. (P.IVA) 12637930012
Phone: +39 333 9129 715
Email: famati@airvacslatam.net
The Controller has not appointed a Data Protection Officer (DPO). For any question about your personal data you can write to the email address above.
2. Personal data we process
Browsing data
The systems that run the Website automatically collect some data whose transmission is implicit in the use of Internet protocols, such as IP address, browser type and operating system, date and time of the request, pages visited and server response code. These data are used only to ensure that the Website works properly and securely.
Data you provide
When you fill in one of our contact or quote request forms we collect the data you enter: first name and last name, email address, telephone number, company name, company VAT number and the content of your message (the fields actually requested depend on the form). We also process the data you send us by email, by telephone or via WhatsApp.
Please do not include in your message any sensitive data (e.g. health data) or personal data of other people that are not necessary to handle your request.
Cookies and similar technologies
The Website does not use profiling or advertising cookies and does not use analytics tools. The only cookies and similar technologies used are those strictly necessary for its operation and security, including those set by Google reCAPTCHA (see section 6). Under Italian and EU law these technologies do not require your consent. You can delete or block cookies at any time through your browser settings, but some features (such as the contact forms) may then not work properly.
3. Purposes and legal basis of the processing
- Responding to your requests for information, assistance, orders or quotes and taking steps before entering into a contract: the processing is necessary to act on your request (Art. 6(1)(b) GDPR).
- Managing the business relationship with customers and prospects, including follow-up on quotes you requested: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
- Ensuring the operation and security of the Website and protecting the forms from spam and abuse: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
- Complying with legal obligations (e.g. tax and accounting obligations, if a contract follows) and, where necessary, establishing, exercising or defending legal claims: legal obligation and legitimate interest of the Controller (Art. 6(1)(c) and (f) GDPR).
Your data will not be used to send newsletters or marketing communications without your prior consent, and are not subject to automated decision-making or profiling.
4. Provision of data
Providing your data is voluntary. However, the fields marked as required in the forms are necessary to answer you: if they are not provided, we will not be able to handle your request.
5. How we process your data
Data are processed electronically by authorized persons, using appropriate technical and organizational measures to protect them against unauthorized access, loss or disclosure. The Website uses an encrypted connection (HTTPS).
6. Recipients of the data
Your data are not disseminated. They may be processed, on behalf of the Controller and only for the purposes described above, by:
- staff of AirVacs Latam S.r.l. authorized to process personal data;
- Teseo Informatica S.r.l. (Turin, Italy), for the technical management and maintenance of the Website, acting as data processor;
- Google (Google Ireland Limited / Google LLC), for the reCAPTCHA service that protects the forms from spam and automated abuse, and for the delivery of the fonts used by the Website (Google Fonts), which involves the transmission of your IP address to Google;
- WhatsApp (WhatsApp Ireland Limited / Meta Platforms), only if you choose to contact us using the WhatsApp button: in that case your conversation is also governed by WhatsApp’s own privacy policy;
- partners involved in the service you requested (for example the equipment manufacturer), only where strictly necessary to handle your request;
- public authorities, where required by law.
An up-to-date list of data processors is available on request from the Controller.
7. Transfers outside the European Union
Some services provided by Google and Meta may involve the transfer of data to the United States. Google LLC and Meta Platforms, Inc. participate in the EU-U.S. Data Privacy Framework, recognized as adequate by the European Commission (Decision (EU) 2023/1795); transfers are also covered by the Standard Contractual Clauses approved by the European Commission.
If you are located outside the European Union (for example in Central or North America), your data will be transferred to and processed in Italy, where the Controller is established, and protected under the GDPR. When we need to send information to you or to our local operators in order to provide the service you requested, the transfer is based on Art. 49(1)(b) GDPR (necessity for pre-contractual measures or the performance of a contract) or on other safeguards provided by the GDPR.
8. Data retention
- Requests sent through the forms, by email, telephone or WhatsApp: for the time needed to handle the request and in any case no longer than 24 months from the last contact. If a contract follows, data will be kept for the duration of the contract and for the following 10 years, as required by Italian tax and accounting rules.
- Browsing data (server logs): 14 months, unless needed to investigate computer crimes.
9. Your rights
At any time you can ask the Controller to:
- access your personal data and obtain a copy (Art. 15 GDPR);
- rectify or complete them (Art. 16);
- erase them (Art. 17);
- restrict their processing (Art. 18);
- receive them in a structured, machine-readable format and transmit them to another controller (data portability, Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw any consent you have given, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7).
To exercise your rights, write to famati@airvacslatam.net. We will reply without undue delay and in any case within one month of receiving your request.
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali – www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.
10. Changes to this Privacy Policy
The Controller may update this Privacy Policy, for example following changes to the law or to the Website. The current version is always published on this page, with the date of the last update shown at the top.