INFORMATION ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of Regulation (EU) 2016/679

Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”), the following information is provided regarding the processing of the personal data of users who browse and use this website.

Data Controller

The Data Controller is SCP Rapid Prototyping, Tax Code/VAT No. 03710290366, with registered office at Via della Pace, 65 – 41051 Castelnuovo Rangone (MO), Italy, certified email address (PEC) scpspinellisrl@pec.it.

For any information concerning the processing of personal data and for the exercise of the rights provided for by the Regulation, the data subject may contact the Data Controller at the contact details indicated above.

Categories of personal data processed

The following categories of personal data may be processed through the website:

• browsing data and technical data connected with the use of the website, such as IP address, information on the browser and device used, operating system, date and time of the request, pages visited and other technical information generated during browsing;
• identification and contact data that may be voluntarily provided by the user through the contact form, such as name, email address and any other data entered in the message;
• any data contained in documents or files voluntarily transmitted by the user;
• data relating to the preferences expressed by the user regarding cookies and tracking tools;
• data collected through analytics and measurement tools, in the cases and in the manner indicated in the Cookie Policy.

The website also retrieves editorial content and news from a WordPress platform managed by the Data Controller. According to the technical configuration described, this connection is used exclusively as the source of the news feed and does not involve the processing of personal data of users of the public website.

Purposes of processing and legal basis

Cookies and tracking tools other than those strictly necessary shall not be used before the user’s consent has been obtained, as more fully specified in the Cookie Policy.

Nature of the provision of data

The provision of data through the contact form is optional.

However, failure to provide the necessary data may make it impossible for the Data Controller to receive, handle or respond to the data subject’s request.

The provision of consent to the use of analytical cookies or other non-technical tracking tools is optional. Failure to consent does not affect the possibility of using the essential functionalities of the website.

Methods of processing

Personal data are processed by means of IT and telematic tools in compliance with the principles of lawfulness, fairness, transparency, minimisation, accuracy, integrity and confidentiality.

The Data Controller adopts technical and organisational measures appropriate to the risk in order to prevent the loss, destruction, alteration, disclosure of, or unauthorised access to, personal data.

Personal data are not subject to solely automated decision-making capable of producing legal effects concerning the data subject or similarly significantly affecting them.

Recipients of personal data

Personal data may be processed by personnel, collaborators and persons authorised by the Data Controller pursuant to Article 29 GDPR and Article 2-quaterdecies of Legislative Decree No. 196/2003.

In relation to the specific functionalities of the website, data may also be processed by IT and technology service providers.

Based on the technical information available, the website uses in particular:

• Vercel Inc., for hosting and Content Delivery Network services;
• Resend Inc., for the technical management of the sending of communications originating from the contact form;
• Google LLC, in relation to Google Tag Manager and Google Analytics 4;
• Microsoft Corporation, in relation to the Microsoft Clarity service;
• CookieYes, for the management of preferences relating to cookies and tracking tools.

Depending on the characteristics of the service provided and the applicable agreements, such parties may act as Data Processors pursuant to Article 28 GDPR or as independent Data Controllers.

Data may also be disclosed, in the cases provided for by law, to administrative, judicial or public security Authorities.

Personal data shall not be disseminated.

Transfer of personal data to third countries

The use of certain technology providers may involve the transfer or processing of personal data in countries located outside the European Economic Area, in particular the United States of America.

Any such transfers shall be carried out in compliance with Articles 44 et seq. GDPR, on the basis of the instruments provided for by the applicable legislation, such as adequacy decisions, Standard Contractual Clauses or other appropriate safeguards.

The data subject may request further information from the Data Controller regarding the safeguards applicable to specific transfers.

Retention period

Personal data are retained for a period not exceeding that necessary for the purposes for which they were collected.

In particular:

• technical and browsing data shall be retained for the time strictly necessary for the operation and security of the website; according to the configuration indicated, technical logs are retained for a period not exceeding 7 days, save for requirements connected with the establishment of unlawful acts or the protection of the Data Controller’s rights;
• data transmitted through the contact form shall be retained for the time necessary to handle and respond to the request;
• where a contractual relationship arises from the request, the data shall subsequently be retained for the period provided for by the applicable civil, tax and accounting legislation;
• where the request does not give rise to any contractual relationship, the data shall be erased or anonymised once the needs connected with the request have been fulfilled, without prejudice to any further periods necessary for the establishment, exercise or defence of a legal claim;
• data relating to cookie preferences shall be retained for the period necessary to document the choices expressed by the data subject;
• the duration of individual cookies and tracking tools is indicated in the Cookie Policy.

Rights of the data subject

In the cases provided for by the Regulation, the data subject may exercise the rights recognised by Articles 15 et seq. GDPR and, in particular:

• obtain confirmation as to whether or not personal data concerning them are being processed and obtain access to the data;
• obtain the rectification of inaccurate personal data and the completion of incomplete data;
• obtain the erasure of data in the cases provided for by Article 17 GDPR;
• obtain the restriction of processing in the cases provided for by Article 18 GDPR;
• obtain data portability, where applicable;
• object to processing in the cases provided for by Article 21 GDPR;
• withdraw at any time any consent given, without affecting the lawfulness of processing carried out before such withdrawal.

Rights may be exercised by contacting the Data Controller at the PEC address scpspinellisrl@pec.it.

Right to lodge a complaint

Where the data subject considers that the processing of their personal data infringes the Regulation, they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) pursuant to Article 77 GDPR or to bring proceedings before the competent courts.

Updates to this notice

This notice may be updated as a result of legislative, organisational or technical changes relating to the website and the services used.

Last updated: 1 October 2026