Mod.: IS – 09/2023

Information on the processing of personal data.
Articles 13 and 14 EUROPEAN REGULATION No. 679/2016
Legislative Decree 196/2003 amended by Legislative Decree 101/2018

Dear Interested Party,

This information describes the management methods of the site in relation to the processing of personal data of users who consult it, as well as the data processing practices through this site. In compliance with the articles. 13 (for data collected from the interested party) and 14 (for data not collected from the interested party) of Regulation (EU) 2016/679 (hereinafter GDPR) the following are made to the Users of this Website information, which refers exclusively to the processing carried out through said Website and not through other websites possibly visited via links from this one, for which it is suggested to read the relevant information provided by the respective Data Controllers. This Website and any services offered through the Website are reserved for individuals who are at least eighteen years of age. The Owner therefore does not process personal data relating to subjects under the age of 18. Upon request of such Users, the Owner will promptly delete all personal data involuntarily collected.

1. Data controller

Data controller KIOENE S.p.A. a Socio Unico., with headquarters in Via Caltana, 55 – 35010 Villanova di Camposampiero (PD), C.F. and P.I.V.A. 01359600283, (hereinafter “Owner”). The Data Controller reserves the right to appoint a web agency or consultant as responsible for the processing of personal data managed for the purposes of technical assistance, maintenance, technical management and similar of this Website, whose references may be communicated following a request to the addresses indicated above. The Owner and the Manager process the Users' data also thanks to their internal representatives, specially designated with instructions to those authorized to process them.

The Data Protection Officer - DPO can be contacted at the following numbers: telephone +39 348 3165267, e-mail: privacy@kioene.it

It should be noted that this Website is owned by GRUPPO TONAZZO SRL but in fact represents a WEB showcase for two other activities: KIOENE S.p.A. and COM.PA SRL who will follow up on any requests you may have. These activities are based in the same area as the undersigned.

2. Category of data processed and sources of origin

  • Navigation data (the computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. In this category of data include: IP addresses, the type of browser used, the operating system, the domain name and the addresses of websites from which access was made or exited, information on the pages visited by users within the site, access time, time spent on a single page, internal path analysis and other parameters relating to the operating system and the user's IT environment. Such technical/IT data are collected and used exclusively in aggregate and anonymous manner. These data are processed with the aim of allowing and controlling correct use of this site as well as to obtain anonymous statistical information on the use of the same, and are deleted immediately after processing)
  • Cookies, on which we invite you to read our Cookie Policy
  • Data provided voluntarily by the user, including:
  • Common data (identification, personal data, billing data and similar)
  • Only exceptionally particular data (art. 9 GDPR)
  • Only exceptionally criminal data (art. 10 GDPR)

Sources: navigation, other sites, cookies and similar; user; public sources.

We may primarily process navigation data, as well as cookies.

We may also process data provided voluntarily by the user, for example through the contact form or by sending a communication via e-mail, including common personal data (identification, personal data, billing and similar) and exceptionally particular data pursuant to the 'art. 9 GDPR or penalties pursuant to art. 10 GDPR within the strict limits in which this is made necessary by the request for information received and subject to the consent of the interested party.

The data could come from automatic sources or from voluntary sources, as well as from public sources. For example, they could come from the user's browsing, which could bring with it information relating to previous consultations of other sites, including in particular cookies and other similar technologies. The data may also be provided voluntarily by the user or by subjects related to him. Other data may come from public sources, such as those processed in the context of research and from surveys, public databases and similar.

3. Purpose of the processing

The personal data of the Users of the Website, as described above, will be processed in the ways and forms prescribed by the GDPR, for the performance of the functions of the Website, with particular, but not exclusive, reference to the navigation of the pages and the procedures described therein for data collection, contact form, possible registration process / access to the reserved area, subscription to the newsletter and similar. In particular, the personal data provided to the Data Controller will be processed for the pursuit of the following purposes:

  • to follow up on specific requests addressed to the Owner by the User through the Website and its communication tools (contact forms, information request forms and similar);
  • for communications of an informative nature relating to the Data Controller's services, following the request for information via e-mail messages or filling out the contact form and other communication tools;
  • for any registration for events organized by the Owner and other related activities (for example, verification of participation, notices relating to any updates or changes to the event, etc.);
  • for other purposes ancillary or connected to those indicated above and in any case falling within the scope of the activities of the Website;

The processing of data provided in a generic manner will be carried out, also following automatic collection during navigation, for the sole purpose of verifying and controlling access to the Website. This also applies to technical cookies, to be understood as session cookies, of functionality or analytics that meet the requirements specified by the Guarantor. In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where these are created and used directly by the Website. In any case, for these analytics cookies, the Website, also in compliance with the clarifications of the Guarantor, provided for the anonymization of IP addresses and the amendment of data processing; the collection and use of the aforementioned navigation data (without prejudice to the anonymization of IP addresses) allow the monitoring of the performance of the Website and allow us to improve the service offered, offering the User a better browsing experience. Please refer to the specific cookie information for further information.

4.Legal basis

The processing of personal data is based on the fulfillment of the contractual or pre-contractual obligations inherent to the request made by the User (for example requests for information regarding the services carried out by the Owner, requests for quotes, etc.), as well as, where necessary, on consent through the free and conscious compilation of the appropriate information fields in the form dedicated to the collection and provision of data and the ticking of the appropriate checkbox where applicable.

It is specified that the completion of specific fields provided in the form for the request for information is inherent to the request itself and that therefore this involves the fulfillment of a pre-contractual or contractual obligation, depending on the context. Consent may be requested subsequently for the processing of further data.

A specific privacy information will be present wherever necessary (information different from this one).

In any case, the processing is also based on legitimate interest, including the right to information, for which reference is made to the following paragraph.

5. Legitimate interest of the Data Controller

The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of their rights in the context of the information society, the execution of the contractual service and the implementation of direct marketing operations (in the ways, with the means and within the times required by law).

6. Mandatory provision

The provision of data relating to navigation by Users, for the above purposes, depends on the level of privacy that the User has enabled or disabled through their browser. In some cases, disabling it could jeopardize navigation on this Website. For certain modules of this Website, the provision of navigation data and/or the use of technical cookies is mandatory for the correct functioning of the Website itself.

The provision of some personal data is in any case necessary for the structure of the Website and its procedures. Any request for other optional data will instead be preceded by a specific approval check. The provision of all other data is optional, in accordance with the type of information that the User wishes to provide to the Website.

Without prejudice to the above, for example, the provision of the e-mail account is necessary to be able to respond to the request made via the contact form, as well as the other mandatory data indicated therein with an asterisk. The other data is optional.

Failure to provide the data necessary for the requested action (for example, of the e-mail account via the form for requesting information by this means) makes it impossible for the Data Controller to process the request.


In any case, even where the interested party has given consent to authorize the Data Controller to pursue all the purposes mentioned in the points above, he or she will remain free to revoke it at any time.

We inform you specifically and separately, as required by the art. 21 of the Regulation, that the interested party has the right to object at any time to the processing of personal data concerning him/her carried out for the aforementioned purposes and that, if the interested party objects to the processing, the personal data can no longer be object of processing for these purposes.

7. Any recipients of personal data

The data may be communicated to companies connected, connected or controlled by the Data Controller, as well as to consultants, or even to third parties who operate, also in the name and on behalf of the Data Controller, for the provision of services related to the purposes indicated in this information, both within the EU and outside the EU (in the latter case, it will exclusively concern subjects adhering to the regulations in force).

Navigation data and similar (for which reference is made to the above), as well as profiling cookies, including those of third parties (for which reference is made to the Cookie Policy of this Website), which will be communicated to the respective interested third parties, where these do not manage them directly as data controllers.

In any case, the data may be communicated to data controllers, as well as to persons authorized to process and duly trained, always within the scope of the purposes of the processing.

For brevity, the detailed list of these figures is available at our office.

8. Retention period

The data provided voluntarily by the interested party will be retained until express revocation by the interested party, including through action on their browser, cleaning of cookies, express request or expressed in any other way. The navigation data will be stored, in compliance with the principle of proportionality, in a form that allows the identification of the interested party for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed.

Cases in which it is necessary to retain the data for a further period of time to defend or assert a right or to fulfill any legal obligations or orders from the Authorities are excluded from the terms set out above.

9. Rights of the interested party

Each interested party has the right of access, rectification, cancellation (oblivion), limitation, receipt of notification in the event of rectification, cancellation or limitation, portability, opposition and not to be the subject of an individual automated decision, including profiling, pursuant to articles. from 15 to 22 of the GDPR. These rights can be exercised in the forms and terms referred to in the art. 12 GDPR, by written communication sent to the Data Controller (see point 10).

The Data Controller will provide an adequate response as soon as possible and in any case within 1 month of receiving the request.

10. Right to withdraw consent (Method of exercising rights)

You can revoke your consent, where applicable, at any time and/or exercise your rights by sending:

  • a registered letter with return receipt to the undersigned with express request (see the address indicated on the headed paper);
  • an e-mail to info@kioene.com; PEC: kioenespa@pec.it

11. Complaints

Each interested party has the right to lodge a complaint pursuant to art. 77 and following of the GDPR to a supervisory authority, which for the Italian State is identified as the Guarantor for the protection of personal data. The forms, methods and deadlines for filing complaints are provided for and regulated by current national legislation. The complaint is without prejudice to administrative and jurisdictional actions, which for the Italian State can be brought alternatively to the same Guarantor or to the competent Court.

12. Profiling

The personal data provided through browsing this website and completing the forms published therein may be subject to profiling by third-party providers via third-party cookies.

Profiling allows these third-party providers, independent data controllers of the respective processing of personal data for profiling purposes, other than the owner of this website, to evaluate certain personal aspects of the interested party relating in particular to his preferences, his interests, his tastes with reference to the pages consulted and the activities carried out, in order to allow these independent and different Data Controllers to offer the interested party a more specific service aimed at his needs.

For further information, the User is invited to read the cookie information.

13. Owner, D.P.O. (R.P.D.), Appointed/Authorised, Data Processors

Below we provide you with some information that you need to bring to your attention, not only to comply with legal obligations, but also because transparency and fairness towards interested parties is a fundamental part of our activity. Data controller. The Data Controller of your personal data is KIOENE S.p.A. a Socio Unico., responsible towards you for the legitimate and correct use of your personal data and who you can contact for any information or request at the following addresses: telephone +39 049 922 2311, e-mail: info@kioene.com; PEC: kioenespa@pec.it.

D.P.O. (Data Protection Officer) – R.P.D. (Data Protection Officer). You may also contact the Data Protection Officer for information and to make requests regarding your data or to report disruptions or any problems encountered. The Data Controller has appointed Mr. Nicola Ghinello as Data Protection Officer who can be contacted at the following numbers: telephone +39 348 3165267, e-mail: privacy@kioene.it

Appointed/Authorised. The updated list of persons in charge/Authorised for processing is kept at the headquarters of the Data Controller.

Data controllers.
For brevity, the detailed list of these figures is available at our office.

14. Social Media Plugins

This site may contain plug-ins from some social media (e.g. Facebook). Social plug-ins are special tools that allow the functionality of social networks to be incorporated directly into the site (e.g. the Facebook "like" function) and are marked with the logo of the respective social platform. When you visit a page of this site and interact with the plug-in (e.g. by clicking the "like" button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform ( in this case Facebook) and stored there. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as the methods through which to exercise your rights, please consult the privacy policy of the social network .

15. Links to third party sites

From this site it is possible to connect via special links to other third-party websites. The Data Controller declines any responsibility regarding the possible management of personal data by third party sites and regarding the management of authentication credentials provided by third parties.

16. Cookies

Cookies are packets of information sent by a web server (e.g. the site) to the user's Internet browser, automatically stored by the latter on the computer and automatically sent back to the server at each subsequent access to the site. For any information on the characteristics, types, methods of use and the possibilities for removing, deleting or disabling the cookies present on the website, please read what is indicated in the specific Cookie Policy.

The Data Controller


To contact us

KIOENE S.p.A. a Socio Unico welcomes your comments regarding this privacy policy.

We invite you to contact us at the following address: info@kioene.com; PEC: kioenespa@pec.it.