Privacy Policy

Home / Privacy Policy

Privacy Policy

Last updated: April 23, 2026 

01 Who we are

This Privacy Policy applies to the website schiavolift.com (the “Website”), operated by Schiavo Srl. (“we”, “us”, or “our”), an Italian company specialising in lift systems and vertical mobility solutions.

Data Controller: Schiavo Srl.
Website: schiavolift.com
Country: Italy (EU)
Contact: privacy@schiavolift.com

We are committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR – Regulation 2016/679) and Italian Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018.

02 Data we collect

We collect two categories of data depending on how you interact with the Website:

Category

Data Points

Source

Contact Form

First name, last name, email address, phone number (optional), message content

Provided directly by you

User Account

Name, email address, password (hashed), account preferences, login timestamps

Provided directly by you upon registration

Technical / Browsing

IP address, browser type, OS, pages visited, session duration, referring URL

Automatically via server logs and analytics

We do not collect sensitive personal data (health, religion, political opinions, etc.) and we do not process payment card information directly.

03 Legal Bases for Processing

We process your personal data only where we have a valid legal basis under Article 6 GDPR:

  • Consent (Art. 6(1)(a)): For optional marketing communications and non-essential cookies.
  • Contract (Art. 6(1)(b)): To manage your user account and respond to service enquiries.
  • Legal obligation (Art. 6(1)(c)): Where required to retain data by law (e.g., tax and accounting obligations).
  • Legitimate interest (Art. 6(1)(f)): For website security, fraud prevention, and internal analytics.

04 How We Use Your Data

  • Responding to enquiries submitted through the contact form.
  • Creating and managing your user account and providing access to reserved areas.
  • Sending service-related communications (e.g., account confirmations, password resets).
  • Sending marketing or promotional communications, only with your prior consent.
  • Analysing Website usage to improve performance, content, and user experience.
  • Complying with applicable legal and regulatory obligations.

05 Data Sharing

We do not sell your personal data. We may share data only with:

  • Service providers acting as data processors on our behalf (e.g., web hosting, email delivery, analytics), bound by data processing agreements.
  • Public authorities where required by law or court order.

Where data is transferred outside the EEA, we ensure adequate safeguards (Standard Contractual Clauses or equivalent).

06 Data Sharing

Data Type

Retention Period

Contact form enquiries

24 months from last interaction

User account data

Duration of account + 12 months after deletion request

Marketing preferences

Until consent is withdrawn

Server / access logs

12 months

Legal / tax records

10 years (as required by Italian law)

07 Your Rights (GDPR)

As a data subject under GDPR, you have the following rights, exercisable free of charge:

  • Access (Art. 15): Obtain a copy of the personal data we hold about you.
  • Rectification (Art. 16): Request correction of inaccurate or incomplete data.
  • Erasure (Art. 17): Request deletion (“right to be forgotten”), subject to legal retention obligations.
  • Restriction (Art. 18): Request limitation of processing in certain circumstances.
  • Portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Objection (Art. 21): Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: At any time, without affecting lawfulness of prior processing.


To exercise any right, contact us at privacy@schiavolift.com. We will respond within 30 days. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali: garanteprivacy.it.

08 Security

We implement appropriate technical and organisational security measures including encrypted connections (HTTPS/TLS), access controls, and regular security reviews. In the event of a data breach posing a risk to your rights, we will notify you and the relevant supervisory authority in accordance with GDPR.

09 Contact

Schiavo Srl — Privacy Office
Email: privacy@schiavolift.com
Website: schiavolift.com