Privacy Policy – Website

Why this information?

In accordance with Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes how personal data are processed. This notice is provided pursuant to Article 13 GDPR and Articles 122 and 130 of the Italian Privacy Code. It does not apply to third-party websites that may be reached through links on this website, for which no responsibility is accepted.

1. Who is the data controller? How can you contact them?

The data controller is Angelo Cappellini & C. S.r.l. a socio unico (sole-shareholder company), represented by its legal representative pro tempore, who can be contacted by e-mail for any information.

• Company nameAngelo Cappellini & C. S.r.l. a socio unico
• Registered officeVia B. Buozzi, 30 – 22060 Cabiate (CO), Italy
• Represented byLegal representative pro tempore
• Privacy e-mailprivacy@acluxurygroup.com

2. Personal data that may be processed

Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Recitals 26, 27 and 30 GDPR).

Data of contracting parties/users.

Browsing data

The IT systems and software procedures that operate this website collect, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category includes the IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.

Data provided voluntarily

The optional, explicit and voluntary sending of messages to the contact addresses shown on this website and/or the completion of data-collection forms entails the acquisition of the sender’s address, which is needed to reply to requests, as well as any other personal data entered.

Cookies and other tracking systems

For cookies and other tracking systems used on the website, please see the Cookie Policy linked in the website footer.

Other tracking tools: tracking pixels in e-mails

Our e-mails contain tracking technologies known as tracking pixels. These are small images, usually transparent and not visible to the user, embedded in the message and loaded from an external server when the e-mail is opened. Loading the pixel may allow the sender to obtain certain information about the receipt and use of the message, for example whether and when the e-mail was opened, the number of times it was opened, the device or program used to view it and, in some cases, the IP address.

Tracking pixels may be used for various purposes, including checking that communications are received correctly, preventing spam, phishing or other security events, providing services requested by the user or producing statistics on the effectiveness of communications.

Where tracking is used for direct marketing purposes and makes it possible to monitor the behaviour of the individual recipient, the processing is based on consent pursuant to Article 6(1)(a) GDPR. Consent to tracking may be collected together with consent to marketing communications, without prejudice to the right to withdraw it at any time, including separately where technically possible.

Consent is not required where the use of the tracking pixel falls within the cases provided for by applicable law, for example where it is necessary to transmit the communication, to provide a service requested by the user, or for specific security, authentication or fraud-prevention purposes, or to produce aggregated and anonymous statistics. In such cases, any personal data collected through the pixel will be processed on the different legal basis applicable to the specific purpose, such as the performance of a contract, the pursuit of a legitimate interest or compliance with a legal obligation.

Information on the processing of personal data through social media platforms

For the processing of personal data carried out by the operators of the social media platforms used by the Controller, please refer to the information they provide in their respective privacy policies. The Controller processes the personal data provided by users through its dedicated social media pages in order to manage interactions with users (comments, public posts, etc.) and in compliance with applicable law.

Specific notices

Specific notices may be provided on individual pages of the website in relation to particular services or processing of the data provided.

3. Purposes of processing, legal basis, retention period and nature of the provision of data

In addition to browsing, personal data will be processed for the following purposes:

4. Who will the personal data be disclosed to? Recipients of the data

Personal data will be disclosed to parties who will process them as independent controllers or as processors (Article 28 GDPR), and will be processed by natural persons (Article 29 GDPR) acting under the authority of the Controller and of the processors on the basis of specific instructions regarding the purposes and methods of processing. The data will be disclosed to recipients in the following categories:

• parties based in Italy that provide services for the website and communication networks, including e-mail, hosting and website management;
• parties based in Italy with which the Controller has entered into agreements, subject to consent where required;
• for direct marketing, subject to consent, parties managing direct marketing activities;
• competent authorities, on request, for compliance with legal obligations and/or orders of public bodies.

The list of processors under Article 28 GDPR is available by writing to privacy@acluxurygroup.com or to the other contact details given above.

5. Will the data be transferred to countries outside the EEA?

Your personal data will be processed mainly in Italy and within the European Economic Area (“EEA”). When certain suppliers or technology services are used, personal data may be transferred to countries outside the EEA. In such cases, the Controller ensures that the transfer takes place in compliance with Articles 44 et seq. GDPR. Specifically, data will only be transferred under Article 45 GDPR to third countries or international organisations covered by an adequacy decision of the European Commission: Switzerland, for website hosting, management, development and maintenance services.

For information on the safeguards relating to transfers of data outside the EEA, please write to privacy@acluxurygroup.com.

6. Is there any automated processing?

Personal data will be processed manually, electronically and by automated means. No fully automated decision-making takes place. Any profiling, carried out only with the data subject’s express consent as indicated in the purposes, will involve an operator who will build the data subject’s profile and analyse their habits and purchasing choices in order to improve the Controller’s commercial offer and services (non-automated profiling).

7. What are your rights? How can you exercise them?

Data subjects may exercise their rights under Articles 15 et seq. GDPR by contacting the Controller at privacy@acluxurygroup.com or at the contact details given above.

• Access · Art. 15
• Rectification · Art. 16
• Erasure · Art. 17
• Restriction · Art. 18
• Notification to recipients · Art. 19
• Portability · Art. 20
• Objection · Art. 21
• Withdrawal of consent · at any time

The Controller guarantees data subjects the right to request, at any time, access to their personal data (Art. 15), rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18). The Controller communicates (Art. 19) any rectification, erasure or restriction of processing to each recipient to whom the personal data have been disclosed, and informs data subjects about those recipients if they so request. The Controller guarantees the right to data portability (Art. 20) and, in the event of requests under Article 20, will provide the data in a structured, commonly used and machine-readable format.

Data subjects have the right to object (Art. 21), at any time, to processing based on legitimate interest, by writing to the contacts above with the subject “opposizione” (objection). When this right is exercised, data subjects may obtain, on request, information on the balancing test carried out. Data subjects have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

How to write to us

Send an e-mail to privacy@acluxurygroup.com with the subject shown below.

Complaints

If data subjects believe that the processing of their personal data by the Controller infringes Regulation (EU) 2016/679, they may lodge a complaint with a national supervisory authority, in particular in the Member State of their habitual residence or place of work, or of the place where the alleged infringement occurred (in Italy, the Garante Privacy), or take legal action.

8. Changes to this privacy notice

The Controller may change, modify, add or remove any part of this privacy notice. To make it easier to check for changes, the notice will always state the date on which it was last updated.

Last updated: 27/10/2026