GDPR · Regulation (EU) 2016/679
Privacy Policy
Information provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018. Last updated: 28 August 2026.
1. Data Controller
TSL GROUP S.R.L.
Piazza Gian Lorenzo Bernini, 2 — 48124 Ravenna (RA), Italy
VAT No.: IT02784140390
Email: info@tslgroupsrl.com
2. Data Protection Officer (DPO)
No Data Protection Officer has been appointed: the company does not fall within the cases set out in Article 37 of Regulation (EU) 2016/679 (GDPR), as it does not process data on a large scale or special categories of data. For any matter relating to the processing of personal data, you may contact the Controller at the contacts listed in Section 1.
3. Personal Data Processed
Data provided voluntarily through the contact form: company name, city, phone number, email address and message.
Browsing data: the website does not use profiling cookies or traffic analysis tools. Technical server logs (IP address, date and time, pages visited) are kept exclusively for security and diagnostic purposes.
4. Purposes and Legal Basis of Processing
a) Responding to requests submitted through the contact form and managing related quotation requests — legal basis: performance of pre-contractual measures taken at the data subject's request (Article 6(1)(b) GDPR) and the Controller's legitimate interest (Article 6(1)(f) GDPR).
b) Compliance with legal, tax and accounting obligations — legal basis: legal obligation (Article 6(1)(c) GDPR).
c) Security and proper operation of the website (technical logs) — legal basis: the Controller's legitimate interest (Article 6(1)(f) GDPR).
5. Processing Methods
Data are processed using computer and telematic tools, with procedures strictly related to the purposes indicated and adopting adequate technical and organisational security measures pursuant to Article 32 GDPR.
6. Recipients of the Data
Data may be disclosed to:
— Web3Forms, provider of the contact form management service, appointed as data processor pursuant to Article 28 GDPR;
— the website hosting provider, also appointed as data processor;
— public authorities and supervisory bodies, where required by law.
Data are not disseminated.
7. Transfers to Third Countries
The Web3Forms service may process data outside the European Economic Area. In such case, the transfer is based on the standard contractual clauses approved by the European Commission (Article 46 GDPR) or on other adequate safeguards provided for by the GDPR.
8. Retention Period
Contact requests not converted into business relationships: 24 months from receipt.
Business relationships: duration of the relationship and, thereafter, for the period required by tax and accounting obligations (10 years).
Technical browsing logs: 6 months.
Data processed to comply with legal obligations: for the period required by applicable law.
9. Data Subject Rights
The data subject has the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20) and objection (Article 21 GDPR), as well as the right to withdraw consent at any time where processing is based on consent.
Rights may be exercised by writing to the Controller at info@tslgroupsrl.com. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).
10. Nature of the Provision of Data
Providing data in the contact form is voluntary but necessary to respond to the request: refusal to provide data prevents the request from being handled.
11. Updates
This privacy policy may be subject to updates. The updated version will be published on this page with the relevant date of last update.