This page describes how this website is managed with regard to the processing of the personal data of users who visit it. The data processing is carried out in compliance with the criteria set out by the European regulation on the protection of personal data, Reg. 2016/679/EU, and by Legislative Decree. The data processing is carried out in compliance with the criteria set out by the European regulation on the protection of personal data, Reg. 2016/679/EU, and by Legislative Decree. 196/03, as amended by Legislative Decree. 101/18 and any other provision or authorisation issued by the competent Authority in connection with it. According to the legislation referred to above, processing must be based on the principles of fairness, lawfulness and transparency, and on the protection of your privacy and rights. The notice is provided only for this website and not for any other websites that the user may visit through links.

THE DATA CONTROLLER

Following consultation of this website, data relating to identified or identifiable persons may be processed. The Data Controller is Afidamp Servizi S.r.l., in the person of its legal representative pro tempore, with registered office at Via Felice Casati, 32 – 20124 Milan, tel.: +39 02 6744581, fax: +39 02 66712299, e-mail: privacy@afidamp.it. ​

DATA PROCESSING LOCATION and COMMUNICATION

The processing operations connected to the web services of this website take place at the aforementioned registered office of the Company and are carried out by the Company’s staff and/or by duly appointed external parties responsible for maintenance and update operations. No data deriving from the web service is communicated or disseminated. The personal data provided by users who submit requests for services, assistance or information are used solely for the purpose of providing the requested service or assistance, or the requested information, and are disclosed to duly appointed third parties only where this is necessary for that purpose.

PROCESSED DATA TYPES

Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the website, the URI addresses — Uniform Resource Identifier — of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server response — successful, error, etc. — and other parameters relating to the user’s operating system and IT environment.
On this website, these data are used solely to obtain anonymous statistical information on the use of the website and to check its proper functioning. The data may be used to ascertain liability in the event of hypothetical computer crimes against the website.
For these data, and limited to the aforementioned purpose, consent is not required.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on this website, or the completion of forms in the specific sections with mandatory and optional fields, entails the subsequent acquisition of the information and of the sender’s address, which is necessary to respond to requests for services and/or information.
For these data, and limited to the aforementioned purpose, consent is not required.
Cookies
The cookie policy is indicated in the specific cookie policy available on this website.

OPTIONAL PROVISION OF DATA

Apart from what has been specified for navigation data, the user is free to provide personal data for user registration and for requesting services and/or information. Failure to provide them will make it impossible to obtain what has been requested. Only the data necessary to provide the service will be required as mandatory within the registration section.

PROCESSING METHODS

Personal data are processed by the Data Controller and by duly appointed processors for the proper fulfilment of the stated purposes, using electronic tools and paper archives, as well as security measures designed to ensure the confidentiality of personal data and to prevent unauthorised access. The Data Controller does not use automated processes, including profiling, to achieve the purposes set out in this notice. Pursuant to Article 22 of Regulation (EU) 2016/679, you may refuse to give consent to being subject to profiling activities or subsequently withdraw any consent previously given by exercising your rights as the data subject in accordance with the methods indicated below.

PROCESSING TERMS

The Data Controller will process personal data for the time necessary to fulfil the purposes set out above and, in any case, for no longer than 2 years from the acquisition of the data or from the cancellation of the registration for processing purposes. In the event of cancellation of the registration, the data will be fully deleted or anonymised and therefore, in any case, will no longer be attributable to the individual user.

DATA SUBJECTS’ RIGHTS

Pursuant to Articles 15–22 of the GDPR, the data subject has the right to request from the Data Controller access to their personal data, as well as the rectification or erasure of such data, or the restriction of processing concerning them. The data subject also has the right to object to the processing of their data, as well as the right to request data portability. The request may be made by email, fax or registered letter with the subject line: “request by the data subject”, specifying in the request the right that the data subject wishes to exercise — erasure, rectification, portability, right to be forgotten — together with a valid email/PEC address to which the response should be sent. The Data Controller or anyone appointed by the same shall proceed to satisfy the request within 30 days from the date of receipt. If the response is complex, the timeframe may be extended by an additional 30 days, subject to timely notification to the data subject. If you consider it appropriate to exercise your rights, you may lodge a complaint with the competent supervisory authority, namely the Italian Data Protection Authority, with registered office at Palazzo Monte Citorio 121, Rome, e-mail: garante@gpdp.it.

Update date, 09 April 2026