1. Data controller

The Data Controller for the processing of personal data is:

Exim Mate S.r.l.
Strada di Settimo 401
10156 Torino (TO) – Italy
VAT number: 12313690013
Email: info@eximmate.com

2. Types of Data Collected

(a) Navigation Data

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Such data include:

  • IP addresses;
  • Domain names of computers used by users connecting to the site;
  • URI (Uniform Resource Identifier) of the requested resources;
  • Time of application;
  • Method used in submitting the request to the server;
  • Size of the file obtained in response;
  • Numeric code indicating the status of the response given by the server (successful, error, etc.);
  • Other parameters related to the user’s operating system and computing environment.

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

(b) Data Voluntarily Provided by the User.

The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site implies the acquisition of the sender’s contact data, necessary to respond, as well as any personal data included in the communications.

Specifically, through the contact form on the site, the following data are collected:

  • First and Last Name;
  • Email address;
  • Telephone number (if provided);
  • Other personal data that may be provided in the message.

(c) Cookies and Other Tracking Tools.

The site uses technical cookies and, subject to user consent, profiling and third-party cookies. For more information on the use of cookies, please see the Cookie Policy.

3. Purpose and Legal Basis of the Treatment

Personal data collected are processed for the following purposes:

  • Browsing on the website: enabling the proper functioning of the website and the enjoyment of its contents. Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
  • Handling of requests sent via the contact form: responding to requests for information, quotes or other. Legal basis: execution of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
  • Fulfillment of legal obligations: fulfilling obligations under laws, regulations or EU regulations. Legal basis: fulfillment of a legal obligation (Art. 6(1)(c) GDPR).
  • Defense in court: if necessary, to establish, exercise or defend a right in court. Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).

4. Mode of Treatment

The processing of personal data is carried out by means of manual, computerized and telematic tools, with logic strictly related to the purposes indicated above and, in any case, in such a way as to ensure the security and confidentiality of the data.

5. Recipients of the Data

Personal data may be disclosed to:

  • Authorized personnel of the Data Controller;
  • Third party technical service providers (e.g. hosting providers, IT companies) appointed, if necessary, as Data Processors pursuant to Art. 28 GDPR;
  • Judicial or administrative authorities, for the fulfillment of legal obligations.

The data will not be disseminated.

6. Transfer of Data Abroad

The Controller does not transfer personal data outside the European Economic Area (EEA). Should this become necessary, the Controller ensures that such transfer will take place in accordance with applicable legal provisions, adopting the appropriate safeguards provided by the GDPR.

7. Data Retention Period.

Personal data will be kept for as long as is strictly necessary to achieve the purposes for which it was collected. Specifically:

  • Data collected for browsing purposes will be retained for the duration of the session and thereafter for as long as necessary to ensure the security of the system;
  • Data provided through the contact form will be kept for as long as necessary to handle the request and for up to 12 months thereafter.

8. Rights of the Interested Party

The data subject has the right to:

  • Access to your personal data (Art. 15 GDPR);
  • Obtain rectification of inaccurate data or supplementation of incomplete data (Art. 16 GDPR);
  • Obtain the deletion of personal data in the cases provided (Art. 17 GDPR);
  • Obtain restriction of processing in the cases provided for (Art. 18 GDPR);
  • Oppose the processing of personal data in the cases provided (Article 21 GDPR);
  • To receive the personal data provided to the Controller in a structured, commonly used, machine-readable format and to transmit it to another data controller (Art. 20 GDPR).

To exercise these rights, the data subject may send a request to the Data Controller at the contact details above.

9. Right of Complaint

A data subject who believes that the processing of personal data relating to him/her is taking place in violation of the provisions of the GDPR has the right to lodge a complaint with the Guarantor Authority for the Protection of Personal Data, based in Piazza Venezia, 11 – 00187 Rome, email: protocollo@gpdp.it, PEC: protocollo@pec.gpdp.it.

10. Amendments to this Notice

The Owner reserves the right to make changes to this policy at any time, giving notice to users on this page. Therefore, please consult this page regularly, taking as reference the date of last modification indicated at the bottom.

Last modified May 16, 2025