If you are reading this policy, it means you have landed on our website. We provide you with this information so that you know how we process your personal data when you browse our website.

1. WHO IS THE DATA CONTROLLER?

The Data Controller of the data collected through this website is Endura S.p.a., with registered office at Via del Faggiolo 1/11 F, 40132 Bologna (BO), VAT No. 02156320372 (hereinafter also the “Controller”).
You can contact the Controller at the following e‑mail address: privacy@endura.it, or by sending a written communication to our postal address.

2. WHY DO WE PROCESS YOUR DATA AND WHEN DO WE COLLECT IT? 

BROWSING DATA

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server’s response status (successful, error, etc.), and other parameters related to the user's operating system and computer environment.

Can we do this without your consent?
Yes, because such data is necessary for Internet communication and to allow you to use the site (Art. 6, letter f, GDPR).

How long do we keep this data?
Browsing data does not persist for more than seven days (unless required for crime detection by judicial authorities).

DATA RELATED TO COOKIES

As Data Controller, while you browse our website, we collect certain data for analysis and processing of information regarding your preferences and browsing experience. To carry out this activity, we use technologies such as cookies (our own or third‑party cookies).

Can we do this without your consent?
Partially.
The collection of data via technical cookies—necessary for the website’s correct operation and security—is based on our legitimate interest (Art. 6, letter f, GDPR).
The collection of personal data through non‑essential cookies, whether first‑party or third‑party, occurs only with your explicit consent (Art. 6, letter a, GDPR). You are informed of this via the cookie banner that appears when you first access the site, where you may choose which cookies you wish to enable.
For more information on what cookies are and their function, you can read our cookie policy.

How long do we keep this data?
The retention period is indicated in the cookie banner or in the settings menu available in the footer of each web page.

NEWSLETTER SUBSCRIPTION DATA

On our website, you may subscribe to our newsletter through the designated form. If you decide to subscribe, we will process the personal contact details requested in the form.

Can we do this without your consent?
Yes, because by requesting to subscribe, Article 6, letter b, GDPR applies, allowing processing on the basis of contract performance, even if the service is free.

How long do we keep this data?
We retain your data for sending our informational newsletters for 12 months from your last interaction with us. You may unsubscribe at any time by clicking the link at the bottom of each email you receive.

3. HOW DO WE PROCESS YOUR DATA?

Your data is processed using tools and procedures designed to ensure its security and confidentiality. Processing may take place through our website, or other electronic systems (e.g., internal software), and occasionally using paper‑based supports.

In addition to the Controller, certain parties involved in the operation of the Website (administrative, commercial, system administrators, etc.) may have access to the data, as well as external parties (technical service providers, hosting providers, IT companies, communication agencies, data entry agencies), appointed—where required—as Data Processors.
You can obtain the complete list of Data Processors by writing to privacy@endura.it.

4. WHERE IS YOUR DATA STORED? 

Processing of your personal data takes place within the European territory. We have chosen partners that allow us to keep data within the EU in accordance with GDPR.

Your browsing data (IP address), however, may be transferred outside the EU, particularly to the United States, through cookie installation (e.g., Google).

If you subscribe to our newsletter, related data may also be transferred outside the EU because the communication‑sending software we use is provided by a U.S. partner.
Such transfer is performed securely, as the provider adheres to the Data Privacy Framework.

5. WHO CAN ACCESS YOUR DATA?

Your data may be made accessible to employees and collaborators of the Controller, acting as data‑handling personnel and/or system administrators, and to external parties (e.g., professional firms, consultants, software houses) that perform outsourced activities on our behalf, acting as external Data Processors. We do not disclose your data in any way.

6. WHAT ARE YOUR RIGHTS? 

As a data subject, you have multiple rights, for example, the right to access, rectify, erase, restrict processing, or object to processing of your personal data (see Articles 15 et seq. GDPR).
To exercise your rights, you may contact us via the details provided at the beginning of this notice.

7. RIGHT TO LODGE A COMPLAINT

If you believe your rights have been violated, you may lodge a complaint with the Italian Data Protection Authority by following the instructions on www.garanteprivacy.it.
A complaint form is available here:
https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524

8. PROTECTION OF CHILDREN'S PRIVACY

This website is intended for a general audience; however, its services are designed for individuals aged 18 or older. We do not request, collect, use, or disclose personal data from individuals under 18.
If we discover that we have collected personal data from a minor, we will delete it immediately.