Privacy & Cookie Policy

Website notification in terms of art. 13 of European Regulation 679/2016 (GDPR)

Reg. 679/2016 UE (GDPR), art. 4 – Definitions

  • “Personal data”: means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified directly or indirectly.
  • “Processing”: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means […]
  • “Controller”: means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data […]
  • “Processor”: means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller […]
  • “Consent of the data subject”: means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.


Carbofin S.p.A. handles the personal details of users of this website in conformity to the principles of legitimacy, correctness, and transparency, as well as the other general principles to be respected in terms of the GDPR. They ensure adequate security of your personal data and protection against unauthorised or illicit processing, as well as the loss, destruction or accidental damaging of the same, by adopting suitable technical and organisational measures.


This notification is not valid for any other websites you may consult using our links, for which Carbofin S.p.A. is not responsible in any way.

Data Controller

Data Controller  Carbofin S.p.A.

Address Via G.D’Annunzio, 2/108
16121 Genova (Italy)
Telephone  +39 010 57221
Fax +39 010 5722267
PEC [Certified e-mail]
Legal Representative Dott. Enrico Telesio

Purpose of processing

The personal data provided by users is used by Carbofin S.p.A. only to activate and/or provide the service requested, and is not communicated to third parties, unless such communication is imposed by law or strictly necessary to fulfil the requests made by the user.

Limitation of processing

The computer programs, databases, and computer systems used by Carbofin S.p.A. are configured to reduce the use of users’ personal information and data to a minimum, while remaining adequate, pertinent, and limited to what is necessary in terms of the purposes for which they were gathered and processed.

Communication of data

Carbofin S.p.A. does not disseminate your data, and does not communicate it to third parties, unless such communication is imposed by law or strictly necessary to fulfil your requests, and for the purpose of pursuing the purposes laid down in point 2 above.

Processing place

Your personal data connected with the services offered by Carbofin S.p.A. via this website, is processed at the head office of Carbofin S.p.A. in its capacity as Data Controller, and is processed exclusively by Carbofin S.p.A. employees and collaborators, expressly appointed and authorised to process it, as internal Data Processors.

Duration of processing

Your personal data is kept by Carbofin S.p.A. for a period of time necessary for pursuing the purposes for which it was gathered and processed, normally not more than 4 years, or for a time of not more than 10 years from termination of provision of the service requested by the user, unless specifically provided for otherwise by current laws or norms.

Type of data processed

When operating normally, this website acquires some browsing data for users, transmission of which is implicit in using Internet communication protocols.
This data category includes IP addresses or domain names of computers of terminals used by the users, and other parameters related to the user’s operating system or computer environment.


This information, necessary for using the website’s services, is not gathered by Carbofin S.p.A. to gather and associate it with identified or identifiable persons, but is processed in order to:


  • Obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.).
  • Checking correct functioning of the services offered.


Browsing data is not kept for more than 180 days, after which it is automatically deleted (unless the judicial authority needs to check it for crime investigation purposes).
The user can always ask for the cookies to be deactivated, by changing their browser settings, but such deactivation may slow down or impede access to some parts of the site.

The Data Subject’s (hereinafter “User’s”) rights

We wish to remind you that, as a user of this site, you may exercise your rights in terms of the GDPR at any time, that is:


  1. To obtain:
    – Access to your data and information as to the purpose of processing, categories of personal data processed, recipients and/or categories of recipients to whom the data has been and/or will be communicated, and the period for which the data will be kept.
    – Correction of inaccurate data related to you and/or the addition of incomplete data, also by providing an additional declaration.
    – Deletion of your personal data, in the cases provided for by the GDPR.
    – Limitation of processing, in the cases provided for by the GDPR.
    – Transferral of data related to you or direct transmission of your data to another Data Controller.
    – Opposition to processing of personal data related to you.
  2. Lodging of a complaint with the Watchdog Authority for the Protection of Personal Data, in terms of art 77 of the GDPR, should you believe that processing of your data does not conform to the GDPR.
    To exercise your rights, you may follow the indications made available to you, by sending an e-mail to the e-mail address  and attaching a copy of a valid identity document to your request.