Close
Close

Privacy Policy

1. Introduction

Your privacy is important to CESILAB S.r.l. For this reason, we have adopted this Privacy Policy to explain how we collect, use, store and protect the personal data of users who visit our website.

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679, hereinafter referred to as the “GDPR”, and describes how personal data collected through the website www.cesilab.com (hereinafter the “Website”) are processed.

For any request concerning the processing of personal data, the Data Controller may be contacted using the details provided at the end of this Privacy Policy.

2. Types of Data Processed

2.1 Data Collected Automatically

When users browse the Website, the IT systems and software procedures used for its operation automatically collect certain personal data, the transmission of which is inherent in the use of Internet communication protocols.

These data may include, by way of example:

  • IP address;

  • domain name of the device used;

  • operating system;

  • browser used;

  • device model;

  • telephone operator;

  • URI addresses of the requested resources;

  • date and time of the request;

  • method used to submit the request;

  • size of the file received;

  • server response status code;

  • other parameters relating to the user’s operating system and IT environment.

These data are used exclusively to obtain statistical information regarding the use of the Website, verify its proper operation, identify any anomalies and protect the security of the IT systems.

Browsing data may also be used to establish liability in the event of suspected cybercrime against the Website or CESILAB S.r.l.

2.2 Data Voluntarily Provided by the User

The voluntary sending of communications by email or through any forms available on the Website entails the collection of the personal data required to respond to the user’s request.

These data may include:

  • first name and surname;

  • email address;

  • company or organisation;

  • professional role;

  • telephone number;

  • content of the request;

  • any attached documents;

  • any other information voluntarily provided by the user.

The user guarantees that the data provided are accurate, complete and up to date and that they are authorised to disclose them.

Users are advised not to submit unnecessary personal data, highly confidential information or special categories of personal data through contact forms or by email, unless strictly necessary in relation to the request submitted.

3. Purposes of the Processing

Personal data collected through the Website are processed for the following purposes:

  • enabling browsing and ensuring the proper operation of the Website;

  • verifying the security and stability of the IT systems;

  • responding to requests submitted through the contact details or forms available on the Website;

  • providing information regarding the requested services;

  • preparing quotations or commercial proposals requested by the data subject;

  • managing pre-contractual and contractual relationships;

  • managing unsolicited job applications, where this option is available on the Website;

  • complying with administrative, accounting, tax and regulatory obligations;

  • preventing unlawful or fraudulent use of the Website;

  • establishing, exercising or defending the rights of the Data Controller in judicial or out-of-court proceedings;

  • complying with requests from the competent authorities.

Specific privacy notices may be provided for particular services or activities available through the Website.

4. Legal Basis for the Processing

Depending on the purposes pursued, the processing of personal data is based on:

  • the performance of pre-contractual measures taken at the request of the data subject;

  • the performance of a contract to which the data subject is a party;

  • compliance with legal obligations to which the Data Controller is subject;

  • the legitimate interest of the Data Controller in managing and securing the Website, preventing unlawful use and protecting its rights;

  • the consent of the data subject, where required by applicable legislation;

  • the need to establish, exercise or defend a legal claim in judicial or out-of-court proceedings.

Where processing is based on consent, the data subject may withdraw their consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

5. Nature of the Provision of Data

The provision of data marked as mandatory in the forms available on the Website is necessary to enable CESILAB S.r.l. to receive and process the user’s request.

Failure to provide the required data may make it impossible to respond to the request, prepare a quotation, provide the requested information or establish a pre-contractual or contractual relationship.

The provision of any additional data not marked as mandatory is optional.

6. Processing Methods

Personal data are processed using electronic, digital and, where necessary, paper-based tools, adopting appropriate technical and organisational measures to ensure their security, integrity, availability and confidentiality.

The processing is carried out in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, purpose limitation and storage limitation established by Regulation (EU) 2016/679.

CESILAB S.r.l. adopts reasonable measures to prevent data loss, unauthorised access, unlawful or improper use and unauthorised disclosure.

Personal data are not subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject, unless expressly stated in a specific privacy notice.

7. Data Retention

Personal data are retained for the period strictly necessary to fulfil the purposes for which they were collected.

In particular:

  • data relating to information or contact requests are retained for the period necessary to process and complete the request;

  • data relating to pre-contractual or contractual relationships are retained for the duration of the relationship and subsequently for the period required under applicable legislation;

  • data required to comply with administrative, accounting and tax obligations are retained for the periods established by law;

  • data required to protect the rights of the Data Controller are retained for the period necessary to exercise or defend those rights;

  • technical and browsing data are retained for the period strictly necessary to ensure the operation and security of the Website, unless they are required to investigate possible unlawful activities.

At the end of the applicable retention period, the data will be deleted, anonymised or destroyed, subject to the technical backup and data retention procedures used by the systems.

8. Recipients of the Data

Personal data may be processed by CESILAB S.r.l. personnel and collaborators who have been expressly authorised and appropriately instructed.

The data may also be disclosed to external parties providing services necessary for the operation of the Website or the performance of the company’s activities, including, by way of example:

  • hosting service providers;

  • IT maintenance companies;

  • cloud service providers;

  • email service providers;

  • parties responsible for developing or maintaining the Website;

  • providers of platforms used to manage contact forms;

  • professional advisers;

  • technical support companies;

  • parties providing administrative, accounting or legal services;

  • public authorities and supervisory bodies, where required by law.

Depending on the circumstances, these parties process the data as Data Processors pursuant to Article 28 of the GDPR or as independent Data Controllers.

Personal data may also be shared with companies belonging to the ViridiusLAB Group, exclusively where necessary for administrative, organisational or management purposes or for the proper handling of the data subject’s request, in compliance with applicable legislation and on the basis of an appropriate legal basis.

An up-to-date list of any Data Processors is available upon request.

9. Transfers of Data Outside the European Economic Area

The use of certain IT, cloud, statistical or communication service providers may involve the transfer of personal data to countries outside the European Economic Area.

In such cases, the transfer will be carried out in accordance with Articles 44 and following of Regulation (EU) 2016/679, on the basis of an adequacy decision adopted by the European Commission, the Standard Contractual Clauses approved by the European Commission or another instrument provided for under applicable legislation.

Further information regarding any international data transfers may be requested from the Data Controller.

10. Cookies and Tracking Technologies

The Website uses technical cookies that are necessary for its operation and, subject to the user’s consent where required, may use statistical, functional or marketing cookies and other tracking technologies.

When first accessing the Website, users may accept, reject or customise the use of non-essential cookies through the relevant banner.

The preferences expressed may be changed or withdrawn at any time through the consent management panel available on the Website.

Further information about the cookies used, third-party services and consent management procedures is available in the Website’s Cookie Policy.

11. Links to External Websites

The Website may contain links to websites, platforms or services operated by third parties.

CESILAB S.r.l. does not control these websites and is not responsible for the way in which third parties process users’ personal data.

Before providing personal data through external websites or services, users are advised to read the relevant privacy policies.

12. Rights of the Data Subject

The data subject may exercise the rights provided for under Articles 15 to 22 of Regulation (EU) 2016/679 at any time.

In particular, the data subject has the right to:

  • obtain confirmation as to whether or not personal data concerning them are being processed;

  • obtain access to their personal data;

  • request the rectification of inaccurate data or the completion of incomplete data;

  • request the erasure of personal data, where permitted by law;

  • request the restriction of processing;

  • object to processing based on the legitimate interest of the Data Controller;

  • receive their personal data in a structured, commonly used and machine-readable format, where the conditions established by law are met;

  • request the transfer of their data to another Data Controller, where technically feasible;

  • withdraw previously given consent at any time;

  • not be subject to a decision based solely on automated processing, in the circumstances provided for under Article 22 of the GDPR.

Requests may be submitted using the Data Controller’s contact details provided in this Privacy Policy.

Before responding to a request, CESILAB S.r.l. may ask the data subject to provide the information necessary to verify their identity.

The exercise of these rights is free of charge, except in the case of manifestly unfounded or excessive requests, as provided for under applicable legislation.

13. Complaint to the Supervisory Authority

Data subjects who believe that the processing of their personal data infringes Regulation (EU) 2016/679 have the right to lodge a complaint with the Italian Data Protection Authority, pursuant to Article 77 of the GDPR.

This is without prejudice to the data subject’s right to seek a judicial remedy before the competent courts.

14. Data Controller

CESILAB S.r.l.

Via 9 Novembre 1989, 9
20029 Turbigo (MI), Italy

Tax Code / VAT Number: IT06369470965

REA Economic and Administrative Index: MI-1888018

Telephone: +39 0331 876289

Email: stefanofischi@cesilab.com

Website: www.cesilab.com

To exercise their rights or request information regarding the processing of personal data, data subjects may contact the Data Controller using the details provided above.

15. Updates to this Privacy Policy

This Privacy Policy may be amended or updated at any time to reflect regulatory changes, modifications to the services available on the Website or changes to the way personal data are processed.

Users are encouraged to consult this page periodically to check for any updates.

Last updated: August 2026.