1. DATA CONTROLLER

The Data Controller is:

AEC Europe S.r.l.

• Registered office: Italy
• VAT and Tax Code: 13265950157
• Share Capital: €50,000 fully paid
• REA: 1634996
• Email: info@aeceurope.it
• Phone: +39 039 879816
• PEC: aeceuropesrl@legalmail.it

2. DATA PROTECTION OFFICER (DPO)

For any information regarding the processing of personal data, you can contact the Data Controller at the following:

• Email: info@aeceurope.it

3. PURPOSE AND LEGAL BASIS OF PROCESSING

Personal data collected through the company website is processed for the following purposes:

3.1 Management of contact requests and commercial information

Purpose: To respond to information requests submitted through contact forms on the website and manage commercial communications.

Legal basis: Processing is based on the data subject’s consent (Art. 6, par. 1, lett. a) of GDPR) and on the execution of pre-contractual measures taken at the data subject’s request (Art. 6, par. 1, lett. b) of GDPR).

Data processed: First name, last name, email address, phone number, company name (for businesses), message, and any other information voluntarily provided in contact forms.

3.2 Website functionality

Purpose: To ensure proper functioning of the website and improve the user’s browsing experience.

Legal basis: Legitimate interest of the Data Controller (Art. 6, par. 1, lett. f) of GDPR) to ensure the security and proper functioning of the site.

Data processed: Browsing data (IP address, browser used, operating system, pages visited, date and time of access) automatically collected by IT systems.

4. DATA PROCESSING AND RETENTION METHODS

Personal data is processed using electronic and manual tools, with logic strictly related to the purposes indicated above and, in any case, in a manner that ensures the security and confidentiality of the data itself.

Data will be retained for the time strictly necessary to achieve the purposes for which it was collected and, in any case:

• Contact data: retained for the time necessary to manage the request and for any subsequent commercial communications, unless consent is revoked by the data subject.
• Browsing data: retained for the time strictly necessary for the functioning of the site and for security purposes, in compliance with applicable regulations.

5. DATA RECIPIENTS

Personal data collected is processed exclusively by:

• Internal staff of AEC Europe S.r.l., duly authorized and trained.
• Technical and IT service providers acting as Data Processors, limited to activities necessary to ensure the functioning of the website.

Data is not shared with third parties for commercial or marketing purposes without the prior consent of the data subject.

6. INTERNATIONAL DATA TRANSFERS

Some services used by the website (listed in section 8) may involve the transfer of personal data to countries located outside the European Economic Area (EEA).

Should such transfer occur, AEC Europe S.r.l. ensures that all necessary measures are adopted to ensure an adequate level of protection, in compliance with Articles 44 and following of GDPR, through:

• Adoption of Standard Contractual Clauses approved by the European Commission;
• Verification of the adequacy of the level of protection recognized by the European Commission;
• Other appropriate safeguards provided by current legislation.

7. DATA SUBJECT RIGHTS

In accordance with Articles 15-22 of GDPR, the data subject has the right to:

• Access (Art. 15): obtain confirmation that personal data processing is taking place and, if so, access the data and receive information about the processing.
• Rectification (Art. 16): obtain rectification of inaccurate data or completion of incomplete data.
• Erasure (Art. 17): obtain erasure of personal data in cases provided by legislation.
• Restriction (Art. 18): obtain restriction of processing when one of the circumstances provided by legislation occurs.
• Data portability (Art. 20): receive personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
• Objection (Art. 21): object to the processing of personal data for legitimate reasons.
• Withdrawal of consent: withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before withdrawal.
• Complaint: lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, the data subject can contact the Data Controller at the addresses indicated in section 1.

8. THIRD-PARTY SERVICES USED BY THE WEBSITE

The AEC Europe website uses the following third-party services and plugins, which may involve the collection and processing of personal data:

8.1 WordPress and Elementor

The site is built with WordPress and Elementor, platforms for web content management. These tools may collect browsing data to ensure proper functioning of the site.

8.2 Google Fonts

The site uses Google Fonts for displaying fonts. Google may collect browsing data, including IP addresses, to provide the service. Google Privacy Policy: https://policies.google.com/privacy

8.3 Font Awesome

Font Awesome is used to display icons on the site. The service may collect browsing data to improve its performance. Privacy Policy: https://fontawesome.com/privacy

8.4 Independent Analytics

The site uses Independent Analytics to analyze usage statistics in a privacy-friendly manner, without the use of invasive cookies. Aggregated and anonymized data relating to visits and user behavior is collected.

8.5 Google Maps

The site integrates Google Maps to display maps and geographical directions. Google may collect browsing data, including IP address and geographical location, when users interact with maps. Google Privacy Policy: https://policies.google.com/privacy

8.6 LinkedIn

The site may integrate LinkedIn features, such as sharing buttons or company widgets. LinkedIn may collect browsing data and information about users who interact with these elements. LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy

8.7 Elementor Ally

Elementor Ally is a plugin used to improve website accessibility. The service does not collect personally identifiable data.

8.8 WP Rocket

WP Rocket is a performance optimization plugin that manages site caching. The service operates locally on the server and does not transmit personal data to third parties.

Important note: The use of these third-party services may involve the transfer of personal data to servers located outside the European Union. Please refer to the respective privacy policies for further details.

9. COOKIES AND SIMILAR TECHNOLOGIES

The website may use technical cookies necessary for site operation and to ensure secure browsing. For further information on the use of cookies, please refer to the Cookie Policy available on the site.

10. DATA SECURITY

AEC Europe S.r.l. adopts adequate technical and organizational measures to ensure the security of personal data and prevent unauthorized access, loss, destruction, or accidental disclosure. Such measures include:

• Protection of IT systems through firewalls and antivirus software;
• Encryption of sensitive data during transmission (HTTPS protocol);
• Limiting data access to authorized personnel only;
• Periodic backups to prevent data loss.

11. CHANGES TO THE PRIVACY POLICY

AEC Europe S.r.l. reserves the right to modify or update this policy at any time to adapt it to regulatory developments or changes in services offered. Changes will be published on the website and will take effect immediately from the publication date.

We recommend consulting this page periodically to stay informed about how personal data is processed.

Last updated: December 2025