Privacy Policy

Ultimo aggiornamento: 15 August 2026

This is an English translation provided for convenience. The Italian version is the legally binding one; in the event of any discrepancy, the Italian text prevails.

1. Who processes your data

The data controller is Diva Infissi Srl, registered office at Via dell'Industria 10, 64014 Martinsicuro (TE), Italy, Italian VAT number 01725480675.

You can contact us about anything to do with your data by writing to info@divainfissi.it or calling +39 328 329 5757.

We have not appointed a Data Protection Officer because the cases set out in Article 37 GDPR do not apply.

2. What data we collect

Data you give us

When you fill in the quote form you provide us with: first and last name, phone number, email address, the town where the work is to be done, your answers to the questions about the type of job and, if you wish, a free-text message and one or more photographs of the windows to be replaced.

The form is made up of several steps. From the third step onwards we also save partial answers, that is, those given before reaching the end, so that a request interrupted by mistake is not lost. If you do not reach the contact screen, those answers remain without any direct identifying data.

Data collected automatically

The server records, as any web server does, the IP address, the date and time of the request, the page requested and the type of browser. This data is used for security and for diagnosing faults.

Together with the form we save the IP address, the browser, the page the request started from and any referring site. This is used to defend against automated submissions and to understand which pages generate enquiries.

Statistical data

Only if you give consent through the banner do we use Google Analytics 4 with anonymised IP to count visits and understand which content is useful. Without your consent this tool is not loaded.

3. Why we process it and on what legal basis

Purpose	Legal basis
Replying to your request for a quote, sending you the confirmation email with a summary of what you wrote, arranging the site visit, sending you the offer	Pre-contractual measures requested by the data subject, Article 6.1.b GDPR
Managing the contractual relationship, the supply, the installation and after-sales support	Performance of a contract, Article 6.1.b
Complying with tax, accounting and warranty obligations	Legal obligation, Article 6.1.c
Site security, defence against automated submissions and abuse	Legitimate interest, Article 6.1.f
Statistics on the use of the site	Consent, Article 6.1.a, withdrawable at any time

Providing your contact details is optional, but without a name, a phone number and an email we cannot call you back or prepare a quote. Photographs are always optional.

4. Who it may be disclosed to

Data is not sold, transferred or disseminated. It may be processed, for the purposes indicated above only, by:

• our staff and the fitters assigned to the job, authorised to process it;
• the hosting provider for the site and the email, acting as a processor on servers located in the European Union;
• the content delivery network provider, which filters traffic and protects the site from attacks;
• the accountant and the advisers who handle tax and accounting obligations;
• Google Ireland Limited for statistics and for measuring Google Ads campaigns, only if you have given the relevant consents.

5. Transfers outside the European Union

Form data stays on servers in the European Union. Statistical data and advertising campaign measurement data collected by Google may also be processed in the United States: the transfer takes place on the basis of the European Commission adequacy decision of 10 July 2023 concerning the EU-US Data Privacy Framework. If you do not consent to statistics, this transfer does not take place.

6. How long we keep it

• Quote requests with no follow-up: 24 months from the last contact, then deleted.
• Partial requests, interrupted halfway: 12 months.
• Attached photographs: 24 months, or until the job is completed if it becomes an order.
• Contractual, tax and accounting data: 10 years, as required by law.
• Server logs: no longer than 12 months.

7. Your rights

You may ask us at any time to:

• access the data concerning you and obtain a copy of it (Article 15);
• correct it if it is wrong or incomplete (Article 16);
• erase it (Article 17);
• restrict its processing (Article 18);
• receive it in machine-readable format or have it transferred to another controller (Article 20);
• object to processing based on our legitimate interest (Article 21);
• withdraw consent to statistics, without affecting the lawfulness of processing carried out before.

To exercise these rights, write to info@divainfissi.it. We reply within one month. If you believe the processing infringes the GDPR you may contact the Italian Data Protection Authority or the courts.

8. Automated decision-making

We do not take decisions based solely on automated processing and we do not carry out profiling. The answers you give on the form are used only to prepare the phone call better, not to sort you into categories.

9. Minors

The site is aimed at adults. We do not knowingly collect data from anyone under 14.

10. Security

The site runs over an encrypted HTTPS connection. Form data is kept in a store that is not reachable from the web and is accessible only with personal credentials. Uploaded photographs are checked for format and size and are not reachable from a public address.

11. If you write to us on WhatsApp

The site contains links that open a conversation on WhatsApp. From that moment the service is run by WhatsApp Ireland Limited under its own terms and privacy notice, over which we have no control. We treat the content of the conversation like any other request for a quote, with the purposes and retention periods described above.

12. Changes

If we change the way we process data we will update this page and change the date shown at the top. We invite you to read it again from time to time.