Data Controller

The Data Controller is Walvoil S.p.A. with registered office in Via Adige 13/D – 42124 – Reggio Emilia (RE) (the "Company" or "WALVOIL"), which can be contacted at the e-mail address: privacy@walvoil.com. The Data Controller has appointed its own Data Protection Officer ("DPO") who can be contacted at the e-mail address: dpo@walvoil.com.

 

Types of data collected

Below are the categories of personal data (hereinafter also referred to as "Data") that we collect when you access our Website (the "Website").

A.    Browsing data

The Website's computer systems collect only some Personal Data, the transmission of which is implicit in the use of internet communication protocols. This data includes the type of Internet browser and operating system used, the domain names of the website from which it originated, the number of visits, the average time spent on the Website, and the pages viewed. This information is not collected to be associated with the user, however, through processing and association with data in the possession of third parties, it could only allow users to be identified if necessary in relation to any violations made against WALVOIL. 

B.    Contact details 

By using our Website, the User can voluntarily provide his/her contact details such as name, surname, contact details (e-mail), company, used to contact the Data Controller through the forms to be filled in or to request information about our products/services and activities. For the processing of personal data relating to the submission of applications, please refer to the privacy policy at the following link.

C.    Product data

By using our Website, the user has the opportunity both to directly download the material made available in the appropriate "Reserved Area" section, and to register and log in to freely access the content (information and commercial materials) published by WALVOIL on the Website.
With regard to the Personal Data provided voluntarily through the registration form on the Website and the Personal Data collected to manage the registration request, please refer to paragraph B above.

D.    Login and usage data

Once the registration procedure has been completed in the reserved area, in order to provide you the services requested, our Website will also collect additional Personal Data: the date of the login/logout/password recovery event; the download/upload pdf; other Personal Data that may be entered in the forms available on the Site. 

E.    Consent

We ask you to give your free, informed and express consent to the processing of your Personal Data to send information and promotional material of ours and of the companies that belong to the Interpump Group. 

F.    Cookie

Information on the use of cookies is available in the Cookie Policy (https://www.walvoil.com/cookies-policy).

Your Personal Data may be freely provided or, in the case of browsing data, collected automatically during the use of the Website. Where specified (i.e. Personal Data marked with an asterisk) the provision of Personal Data is necessary to provide you with the requested service: any refusal to communicate such Data could make it impossible for the Data Controller to satisfy your request. With reference to Personal Data not marked as mandatory, you may refuse to communicate them and such refusal will not have any consequence on the availability of the service or the operation of the Site.

The provision of your Personal Data for the sending of promotional communications by the Data Controller is facultative, consequently you can freely decide whether or not to give your consent or withdraw it at any time. Therefore, if you decide not to give your consent, WALVOIL will not be able to carry out the aforementioned activities.

 

Processing methods

The Data Controller adopts the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated below. 

 

Recipients or categories of recipients of Personal Data

Your Personal Data will be processed by employees of the Company, authorized by WALVOIL and adequately instructed on the correct processing methods for the purposes indicated below. Your Personal Data may be communicated to third parties appointed to carry out the activities necessary for the provision of the services offered by the Company, such as (by way of example but not limited to): third-party providers of support and consultancy services with reference to the activities of the technological, accounting, administrative, marketing, legal, insurance sectors, companies of Interpump Group, banks and credit institutions,  debt collection companies. The subjects belonging to the categories to which the data may be communicated will use them as Data Processors specifically appointed by WALVOIL pursuant to art. 28 of the GDPR or as independent Data Controllers. Finally, Personal Data may be communicated to private parties or public authorities that have access to them by virtue of legal provisions or other measures issued by competent authorities.

 

Location and Transfer of Personal Data

The Data are processed at the Data Controller's operational offices and in any other place where the parties involved in the processing are located. Should WALVOIL need to transfer Personal Data outside the European Union, to countries not considered adequate by the European Commission, WALVOIL will take the necessary measures to protect your Personal Data in compliance with legal guarantees, pursuant to applicable legislation and in particular Art. 45 and 46 of the GDPR.

 

Purpose of the processing	Legal basis	Retention period
a. Allow Users to browse the Website	The processing is necessary for the execution of pre-contractual measures adopted at the request of the data subject (Art. 6, para. 1, lit. b GDPR)	For a period equal to the duration of the provision of the requested services and for 10 years thereafter (limitation period for any contractual liability)
b. Provide customer support, including managing requests for quotes and order processing via the "Contact Us" form	The processing is necessary for the performance of a contract or for the execution of pre-contractual measures taken at the request of the data subject (Art. 6 (1) (b) GDPR)	The Personal Data provided for requests for information/quotations on our products/services or for requests for assistance will be kept for the period of time strictly necessary to respond to the request and to implement the related assistance or provision
c. To comply with obligations arising from national or European Union regulations or regulations (e.g., tax and accounting obligations) or to handle or respond to requests from judicial or administrative and tax authorities	The processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR)	Personal Data will be kept for as long as necessary to comply with the requests of the authority
d. Obtain the information necessary to detect anomalies, fraudulent activities and/or abuses in the use of the website or to exercise the Company's rights	Legitimate interest of the controller in the proper functioning of the website, the prevention of unlawful conduct and the exercise of its rights (Art. 6, para. 1, lit. f GDPR)	Personal Data will be kept for the period necessary to conclude any disputes or to respond to requests from the competent authorities
e. Conduct analysis and research (in an anonymised or aggregated form) in relation to the products and services we provide to improve and develop our products and services and for statistical and internal reporting purposes, including in the context of intra-group information flows	Legitimate interest of the data controller to improve its core business and economic strategies (Art. 6, para. 1, lit. f GDPR)	For as long as necessary to carry out the activities in question, in any case no later than 36 months from the last registration
f. Send marketing communications and updates on the Company's activities	Consent of the data subject (Art. 6 (1) (a) GDPR)	The Personal Data provided for the sending of marketing communications will be kept for 7 years from the day on which they were collected, except in the case of withdrawal of consent or renewal of consent before such expiry
g. To transmit information and promotional communications relating to products and services marketed by other companies belonging to the IP group	Consent of the data subject (Art. 6 (1) (a) GDPR)	The Personal Data provided for the sending of marketing communications will be kept for 7 years from the day on which they were collected, except in the case of withdrawal of consent or renewal of consent before such expiry

 

Rights of the data subject

With regard to the Data Controller, with reference to your Personal Data, you may, at any time, exercise the following rights:

a.    Right to access and obtain a copy of your personal data (Art. 15 GDPR)

You may obtain confirmation as to whether or not data concerning you is subject to processing activity, also in order to have knowledge of the processing itself and to verify its lawfulness as well as its correctness and up to date situation. In this case, you may obtain access to your Personal Data and information, in particular information on the purposes of the processing, the categories of Personal Data concerned, the recipients or categories of recipients to whom the personal data is or will be disclosed, the retention period, etc.

b.    Right to rectification of personal data (Art. 16 GDPR)

You may obtain, without undue delay, the rectification of inaccurate Personal Data concerning you or the integration of the same Personal Data, if incomplete.

c.    Right to erasure of personal data (Art. 17 GDPR)

You may obtain, without undue delay, the erasure of Personal Data concerning you, if the data is no longer necessary to fulfill the purposes it was collected for. Please note that cancellation shall be justified by valid reasons.

d.    Right to restriction of processing of personal data (Article 18 GDPR)

You can obtain the restriction of the processing of Personal Data concerning you or the marking of the Personal Data used to restrict its processing in the future.

e.    Right to data portability (Art. 20 GDPR)

In the case of automated processing carried out on the basis of consent or in performance of a contract, you have the right to receive data concerning you from the Data Controller in a structured, commonly used and machine-readable format and to transmit them to another Data Controller.

f.    Right to object to processing (Article 21 GDPR)

You have the right to object to the processing of Personal Data concerning you, unless there are reasons of legitimate interest of the Data Controller that justify the continuation of the processing.

g.    Right to withdraw freely given consent (Art. 7 GDPR)

You have the right to withdraw your consent at any time without prejudice to the lawfulness of processing based on consent given before its withdrawal, only for the purposes whose legal basis is the consent.

You may exercise your rights by sending a specific request to the Data Controller by e-mail at: dpo@walvoil.com

Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within 30 days of receipt of the request.

In any case, you always have the right to submit a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR if you believe that the processing of your data is contrary to current data protection legislation. For Italy, the supervisory authority is the Italian Data Protection Authority, which can be contacted following the indication of the link: https://www.garanteprivacy.it/home/footer/contatti.

 

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

 

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, if technically and legally feasible, by sending a notification to Users through one of the contact details in its possession.

Version updated to 15 May, 2025