Privacy Policy

This Privacy Policy is made pursuant to art. 13 of the European Regulation n. 679/2016 and applies exclusively to all data collected through the website This Privacy Policy is subject to updates which will be published promptly on the Website. This Privacy Policy establishes the basis on which the User’s Personal Data will be processed.

Data Controller

The Data Controller of the data collected from this website is Exté co. Di Rota Eugenio with registered office in via cesare Cantù n.44, Novedrate (CO) VAT number 02349300133, email:

Methods of Processing Personal Data

The Personal Data provided or acquired will be subject to processing based on principles of correctness, lawfulness, transparency and protection of confidentiality pursuant to current regulations. The Data Controller processes Users’ Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

Purpose of the processing of personal data and legal basis

Personal data can be collected independently by the owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of the Users, of a technical-IT nature (eg the IP address, the type of browser used, the operating system, the name domain names and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent in the normal functioning of the internet. These data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and / or to check its correct functioning and will be deleted immediately after processing.

The Data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following purposes:

  1. a) to fulfill the obligations deriving from the contract stipulated between the User and the Owner for the sale of the Products on the Website and to provide the information requested by the User. This treatment is mandatory for the execution of the contract of which the User is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject;
  2. b) for any registration procedure aimed at purchasing the Products and for the purchase procedure in which to enter personal data and billing or similar tax profiles. In this case, the Data are processed to execute the Contract stipulated, to contact the User in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract. same. This treatment is mandatory for the execution of the contract of which the User is a party;
  3. c) to fulfill any type of obligation contemplated and envisaged by current laws, regulations, related regulations, commercial uses and in tax / fiscal matters. This treatment is mandatory to fulfill a legal obligation to which the Data Controller is subject;
  4. d) for other ancillary purposes or related to those indicated above and in any case falling within the scope of the Website’s activities;
  5. e) to follow up on the specific requests addressed to the Owner by the User for communications of an informative nature relating to the Services of the same Owner, via e-mail messages or by filling in the contact form and other communication tools such as telephone or instant messaging WhatsApp Business / Live Messenger etc. This processing is optional and based on the User’s consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Data Controller;
  6. f) for softspam purposes to allow the Owner to send promotional communications by e-mail to the User concerning Products and / or Services purchased without the need for the User’s express and prior consent, as required by art. 130, paragraph 4, of the Privacy Code, and on condition that the user does not exercise the right of opposition; This treatment is based on art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree n.101 of 2018;
  7. g) to perform statistical analysis on aggregate and anonymous data to analyze the behavior of the User to improve the products and services provided by the Data Controller as well as to satisfy the User’s expectations;

Category of Personal Data processed

Among the Personal Data processed by this Website, either independently or through third parties, there are: Cookies, Usage data, Email and Name. Personal data can be collected independently by the owner or through third parties. The Personal Data may be provided voluntarily by the User when using the Website, during the registration / access procedures to the reserved area, by filling in the contact form, during the purchase procedure, similar and similar operations, when communicating with the Data Controller via mail, by phone / WhatsApp / Messenger Live etc. Among these data there could be the VAT number, company name, tax code and indication of the information useful for the purchase. The optional, explicit and voluntary sending of e-mails through the Contact Form or by means of the addresses indicated on this Website, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the email. . The consent to the provision of Data by the User is necessary to be entered in the Data Controller’s database and for the purposes of establishing and correctly carrying out what is offered by the same to its Users, as well as to third parties for the fulfillment of the single activity requested. . Failure to provide, therefore, prevents registration in the Data Controller’s databases, the completion of any contracts, as well as the execution of the same and any other possible activity.

Data communication

In addition to the Data Controller, in some cases, they may have access to the Data:

  1. a) categories of specially trained persons involved in the organization of the website (administrative, commercial, marketing, legal, system administrators);
  2. b) external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller;
  3. c) public or private subjects who can access the Data in compliance with legal obligations;
  4. d) subjects who perform ancillary and instrumental tasks with respect to the activity of the Data Controller;

Processing times

As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are kept for the time necessary to process them in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:

– The data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;

– The Data collected for fiscal / administrative obligations or contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;

– The Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied; The User can obtain further information regarding the legitimate interest pursued by the Data Controller by contacting the Data Controller.

– The Data collected on the basis of the User’s consent may be kept until such consent is revoked;

The Data may be kept by the Data Controller for a longer period in compliance with legal obligations or by order of an authority.

At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, cancellation, rectification and portability of the Data will no longer be exercised.


This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social network functions and analyze traffic. Cookie Policy

Place of processing and transfer of data abroad

The Data are processed at the Data Controller’s operational headquarters. For more information, you can contact the Data Controller. The Data may be processed by natural persons and / or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the event that the Data are transferred outside the EEA, the Data Controller will adopt all suitable contractual measures to ensure adequate protection of the Data.

Tools used for the processing of personal data


By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through Contact Form: Email, Name and Surname

Contact Form 7 (Rock Lobster LLC)

is a form creation and management service that allows this website to integrate such contents within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the Privacy Policy of the service. Place of processing: Japan – Privacy Policy (link to be activated )


WhatsApp Business

WhatsApp Business is an instant messaging service provided by WhatsApp Ireland Limited. For the purposes of the processing methods, the Terms for the processing of WhatsApp Business data are also referred to, available at the following link: . The User’s data will pass through the WhatsApp Business services according to the terms that WhatsApp reports in the document “WhatsApp Business Terms of Service” at the following link: . Personal data collected: telephone number, email address, usage data, cookies. Place of processing: Ireland – Privacy Policy (link to be activated )

Facebook Messenger live chat

This service offered by Facebook Ireland Ltd allows visitors to this Website, after having opted-in with their Facebook account, to communicate with the Controller in real time through a plugin. Place of processing: Ireland – Privacy Policy (link to be activated


These services analyze the traffic of this Website, potentially containing Users’ Personal Data, in order to filter it from parts of traffic, messages and contents recognized as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc. Personal Data collected: Various types of Data as specified in the privacy policy of the service. Place of processing: USA – Privacy Policy (link to be activated


This website has an SSL certificate and uses the HTTPS protocol to make sure the moment in which Personal Data is entered. With the use of this protocol, the transactions and data that are transmitted on the websites take place with the utmost security and the content of the communication is not read or manipulated in any way by third parties.


This Website uses reCAPTCHA which is a service subject to the privacy policy (link to be activated

and the terms and conditions (link to be activated

of use by Google.


With the registration service, the User allows the Site to identify him and to give him access to dedicated services. The user registers directly on the site by filling out the form and providing their data.


The statistical services only allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. This website uses the following services:

Google Analytics (Google Ireland Limited)

Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of evaluating the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Google may also transfer this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google. The IP address anonymization function is active on this site. The IP address transmitted by the browser for the purposes connected to Google Analytics will not be incorporated into other data already held by Google.

At the following link the browser add-on for deactivating Google Analytics is made available by Google. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated )


These services allow interaction with social networks directly from the pages of this website. The interactions and information acquired from this Website are in any case subject to the User’s privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

  1. Facebook (Facebook Ireland Ltd.)

The Facebook buttons are services for interacting with the Facebook social network, provided by Facebook Ireland Ltd. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated

  1. Instagram (Facebook Ireland Ltd.)

The Instagram buttons are services of interaction with the Instagram social network, provided by Facebook. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy (link to be activated )


The payment management services allow this Website to process payments by credit card, bank transfer or other tools. The data used for the payment are acquired directly by the manager of the payment service requested without being processed in any way by this site. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment. This website uses the following services:

PayPal (Paypal Europe S.à.rl et Cie, SCA Inc.)

PayPal is a payment service provided by PayPal Europe S.à.rl et Cie, SCA Inc., which allows the User to make online payments using their PayPal credentials. Personal data collected: Cookies and various types of data as specified in the privacy policy of the service. Place of processing: Luxembourg – Privacy Policy (link to be activated )

Exercise of the rights of the interested party

The interested party has the right to exercise the faculties provided for in art. 7, 15-22 of Reg. European 679/2016. In particular, he has the right to withdraw his consent at any time and, upon simple request to the Data Controller, he may request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain the updating, the limitation of the treatment, the rectification of the Data and the cancellation of those treated in deviation from the current legislation. He has the right, for legitimate reasons, to oppose the processing of personal data concerning him and the processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data. The interested party may exercise his rights by contacting the Data Controller by email at the address:

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this Website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that time. The Owner is not responsible for updating all links that can be viewed in this Privacy Policy, therefore whenever a link is not functional and / or updated, Users acknowledge and accept that they must always refer to the document and / or section of the sites. internet accessed from this link.

Privacy Policy updated in July 2021