Privacy Policy of www.chmitaly.com

www.chmitaly.com is an informational website. It has no contact forms, registration areas, user accounts, e-commerce or comments, and it does not ask Users to provide Personal Data. Limited technical data may nevertheless be processed when the website is visited, as described below.

Owner And Data Controller

Chm Italy srl
Via Pasquale Demuro 87
07021 Arzachena (OT)
VAT No.: 02599820905

Owner contact email: info@chmitaly.com

Types Of Data Processed

Technical logs. Like any website, the server hosting www.chmitaly.com automatically records technical information needed to deliver the pages and keep the service secure, such as the IP address, the date and time of the request, the requested address (URL), the response status, and the browser and operating system in use.
Usage Data collected through Google Analytics, only if the User has given consent through the cookie banner: pages visited, time spent, approximate location (derived from the IP address, which is not logged or stored by Google Analytics 4), device, browser and operating system type, referring page, and an online identifier stored in cookies.
Emails sent to the Owner. If the User writes to info@chmitaly.com, the Owner receives the email address, the content of the message and any other information the User chooses to include.
Record of the cookie choice. The choice made in the cookie banner (accepted or rejected, and its date) is stored in the User’s browser only. It is not sent to the Owner or to third parties.

The Owner does not collect special categories of Personal Data and does not carry out profiling or automated decision-making. The website does not use advertising, remarketing or social media tracking tools, and does not embed maps or other third-party content.

Purposes And Legal Basis Of Processing

Statistical analysis of website traffic (Google Analytics). Legal basis: the User’s consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Personal Data Protection Code, Legislative Decree 196/2003). Consent is optional, is requested through the cookie banner before any analytics cookie is installed, and can be refused or withdrawn at any time without consequences for the use of the website.
Operation and security of the website (technical logs). Legal basis: the Owner’s legitimate interest in keeping the website working and protected from abuse (Art. 6(1)(f) GDPR).
Replying to emails and enquiries. Legal basis: steps taken at the User’s request prior to entering into a contract and the Owner’s legitimate interest in answering the messages received (Art. 6(1)(b) and (f) GDPR).
Compliance with legal obligations and defence of legal claims. Legal basis: Art. 6(1)(c) and (f) GDPR.

Detailed Information On The Tools Used

Analytics

Google Analytics 4 (Google Ireland Limited / Google LLC)

Google Analytics 4 is a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for Users in the European Economic Area, and by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The Owner uses it to measure and analyze the use of www.chmitaly.com and to prepare reports on its activities.

Google Analytics is loaded only after the User has accepted analytics in the cookie banner. Until then, the website makes no request to Google Analytics and installs no analytics cookie. The Owner has switched off Google signals and advertising personalization: Google Analytics data is not used for advertising purposes.

In Google Analytics 4, IP addresses are not logged or stored. Data is processed for the Owner as part of an agreement under which Google acts as Data Processor; Google may also process some data as an independent controller for the purposes described in its own privacy policy.

Personal Data processed: Cookies and Usage Data.

Retention: Google Analytics cookies last up to 2 years (see the Cookie Policy). According to the retention settings of the Owner’s Google Analytics property, event data is kept for 2 months and user-level data (identifiers linked to cookies) for up to 14 months; aggregated reports that do not identify Users may be kept longer.

Place of processing: European Union and United States. Transfers of data to Google LLC in the United States rely on the adequacy decision for the EU-U.S. Data Privacy Framework, where Google LLC is certified, and/or on the Standard Contractual Clauses adopted by the European Commission.

More information: Google Privacy Policy – Google Analytics opt-out browser add-on.

Other services

Google Search Console. The Owner uses Google Search Console, a free Google tool, to monitor how www.chmitaly.com appears in Google Search. It provides the Owner with aggregated statistics about searches and technical issues. Google Search Console does not install cookies on Users’ browsers and does not collect Personal Data of Users while they browse www.chmitaly.com.

Hosting (Aruba S.p.A.). www.chmitaly.com is hosted on a Linux hosting service provided by Aruba S.p.A. (Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy), appointed as Data Processor. Aruba stores the website files and the technical logs of the web server described above, and processes them only to provide the hosting service.

External links. The website contains links to third-party websites (for example LinkedIn). No data is shared with these sites unless the User clicks the link; from that moment, the privacy policy of the third-party site applies.

Mode And Place Of Processing The Data

Methods Of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, the Data may be accessible to external parties appointed, if necessary, as Data Processors by the Owner, such as technical service providers, hosting providers and the website maintenance agency. The updated list of these parties may be requested from the Owner at any time.

Place

The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located. Where Data is transferred outside the European Economic Area (see Google Analytics above), the transfer takes place only in compliance with Chapter V of the GDPR.

Retention Time

Technical logs: kept by the hosting provider for the time strictly necessary for the operation and security of the service, in accordance with the provider’s own policy and with legal obligations, and then deleted or anonymized.
Analytics data: as described in the Google Analytics section above, until the User withdraws consent or the retention period ends.
Emails: kept for as long as needed to reply and to handle the related relationship, and afterwards for the period required by law or to protect the Owner’s rights.
Record of the cookie choice: kept in the User’s browser for 6 months, after which the choice is requested again.

Once the retention period expires, Personal Data is deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

The Rights Of Users

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following:

Withdraw their consent at any time. Consent to analytics can be withdrawn at any time by clicking “Cookie preferences” in the footer of the website and choosing “Reject” (or switching analytics off under “Customize”). Withdrawal does not affect the lawfulness of processing carried out before it.
Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on the basis of the Owner’s legitimate interest, by providing a ground related to their particular situation.
Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance, where the processing is based on consent or on a contract and is carried out by automated means.
Lodge a complaint. Users have the right to bring a claim before their competent data protection authority. In Italy this is the Garante per la protezione dei dati personali.

How To Exercise These Rights

Any requests to exercise User rights can be sent to info@chmitaly.com. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

Cookie Policy

www.chmitaly.com uses cookies only for the purposes described in the Cookie Policy, which also explains how to change or withdraw the cookie choice at any time.

Additional Information

Legal Action

The User’s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of www.chmitaly.com. The Owner may be required to reveal Personal Data upon request of public authorities.

How “Do Not Track” Requests Are Handled

www.chmitaly.com does not support “Do Not Track” requests. The only tracking tool in use, Google Analytics, is activated exclusively after the User’s explicit consent.

Changes To This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Owner has about Users.

Definitions and legal references

Personal Data (or Data): Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
Usage Data: Information collected automatically through www.chmitaly.com (or third-party services employed in www.chmitaly.com), which can include: the IP addresses or domain names of the computers utilized by the Users who use www.chmitaly.com, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit and the details about the path followed within the website, with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.
User: The individual using www.chmitaly.com who, unless otherwise specified, coincides with the Data Subject.
Data Subject: The natural person to whom the Personal Data refers.
Data Processor (or Data Supervisor): The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.
Data Controller (or Owner): The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of www.chmitaly.com. The Data Controller, unless otherwise specified, is Chm Italy srl.
www.chmitaly.com (or this website): The means by which the Personal Data of the User is collected and processed.
European Union (or EU): Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.
Cookies: Small sets of data stored in the User’s device.

Legal information

This privacy statement has been prepared in accordance with Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation), Art. 122 of Legislative Decree 196/2003 (Italian Personal Data Protection Code) and the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools of 10 June 2021.

This privacy policy relates solely to www.chmitaly.com, if not stated otherwise within this document.

Last updated: 26 October 2026