Privacy Policy

Privacy notice pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
Last updated: 28 October 2026

1. Data Controller

Fabris & Co S.r.l.
Via Francesco di Manzano 8/A – 33100 Udine (UD), Italy
VAT No. IT02080640309
Email: info@fabrisandco.com

The Controller has not appointed a Data Protection Officer (DPO).

2. Data processed

The website www.fabrisandco.com may process:

• Browsing data, such as IP addresses, browser and device information, requested pages, and access dates and times, needed for website operation and security.
• Statistical data about page views, referral sources and clicks, used to assess interest in the content. The internal system does not use cookies, visitor identifiers or fingerprinting and does not reconstruct individual browsing journeys. IP addresses are used temporarily to exclude company traffic and estimate the country using a local database; they are not stored in statistics tables or sent to external geolocation services. Country counts are kept separate from other statistics.
• Voluntarily provided data, sent by email or communicated by telephone, such as names, contact details, company information and message content. The website does not use data collection forms.

3. Purposes and legal bases

Data are processed to:

• ensure website operation and security and produce statistics to improve its content and usability, based on the Controller’s legitimate interests (Article 6(1)(f) GDPR);
• respond to communications and manage business enquiries, based on pre-contractual steps requested by the individual or the legitimate interest in handling enquiries, as applicable (Article 6(1)(b) and (f));
• comply with legal obligations (Article 6(1)(c)).

Reliance on legitimate interests requires an assessment balancing those interests against individuals’ rights and freedoms. No individual profiling is carried out.

4. Processing and security

Data are processed electronically using appropriate technical and organisational measures to protect them against loss, disclosure and unauthorised access.

5. Recipients

Data may be accessed by authorised staff and hosting, email and technical support providers, appointed as Data Processors where required. Data may be disclosed to public authorities where required by law.

6. Hosting and international transfers

The website is hosted by BlueiTech on a server located in Paris, France, within the European Economic Area.

Any transfers outside the European Economic Area associated with other services are carried out in accordance with Chapter V GDPR. The internal statistics system does not use external web analytics services.

7. Retention

Voluntarily provided data are retained to handle enquiries, subsequent relationships and legal obligations. Technical logs follow the retention periods applicable to the hosting service.

Daily statistical counts are retained for 400 days. Commercial event details, without IP addresses or visitor identifiers, are retained for 90 days and deleted through scheduled maintenance. Historical aggregate commercial counts are also maintained.

8. Provision of data

Browsing involves the processing of the technical data described above. Providing data by email or telephone is optional, but the information needed to respond must be supplied.

9. Rights and complaints

Where applicable under the GDPR, individuals may request access, rectification, erasure, restriction of processing and data portability.

They may also object to processing based on legitimate interests on grounds relating to their particular situation, under Article 21 GDPR.

Requests may be sent to info@fabrisandco.com. Individuals may lodge a complaint with the Italian Data Protection Authority.

10. Cookies and updates

For information about cookies, please consult the website’s Cookie Policy.

This notice may be updated following changes to legislation, technology or the services used.