Newsletter Privacy Notice
Tecnica Industriale S.r.l. Last revision: 27/04/2026
1. Data Controller
TECNICA INDUSTRIALE S.R.L.
Registered office: S.P. 231 Km 1,110 - 70026 Modugno (BA), Italy
VAT: 00324840727
Italian Business Registry No. (REA): BA - 104972
Sole Director: Antonio Gianinetto
Phone: +39 080 5367090
Email: info@tecnicaindustriale.shop
Certified email (PEC): amministrazione@pec.tecnicaindustriale.it
2. Categories of personal data collected
For the purpose of sending the newsletter, we collect and process the following data:
- Email address (mandatory)
- First and last name (optional)
- Company (optional)
- Industry sector (optional)
- Preferred language (auto-detected from email domain)
- Newsletter tracking data: open timestamps, link clicks, anonymized IP at /24, user-agent
- Consent data: subscription/double opt-in confirmation timestamp, IP at confirmation, user-agent, immutable audit log
3. Purposes and legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Sending the periodic newsletter (technical updates, product news, events, commercial initiatives) | Explicit consent (Art. 6.1.a) collected via double opt-in |
| Measuring effectiveness (open rate, click rate, conversions) to improve content | Legitimate interest (Art. 6.1.f) of the controller for service quality |
| Legal obligations (consent register, user requests, anti-spam, audit) | Legal obligation (Art. 6.1.c) and GDPR Art. 30 |
4. Processing methods
Data is processed electronically with the following safeguards:
- At-rest encryption: PostgreSQL database with disk encryption
- In-transit encryption: TLS 1.3 for all communications
- Pseudonymization: email addresses indexed via SHA-256 hash for analytics
- Encrypted backups: AWS S3 (eu-west-1, Ireland) with SSE-KMS, 90-day retention
- Restricted access: only authorized personnel with 2FA
- Immutable audit log: every operation on personal data is logged with timestamp, actor, object
5. Retention period
| Data category | Retention |
|---|---|
| Active subscribers (confirmed) | For the entire subscription duration |
| Unsubscribed data | 30 days from revocation, then permanent erasure |
| Consent log (for GDPR audit) | 5 years from unsubscribe |
| Inactive subscribers (no opens/clicks in 24 months) | Automatic deletion with prior notice |
6. Data sharing and transfers
Data is NEVER sold or shared with third parties for marketing.
Technical processors (GDPR Art. 28):
| Provider | Service | Location | DPA signed |
|---|---|---|---|
| Amazon Web Services EMEA SARL | SES (SMTP delivery) + SNS (bounce notifications) | Region eu-west-1 (Ireland) | ✓ |
| Aruba S.p.A. | Domain DNS hosting | Italy | ✓ |
| [VPS hosting] | Application server | Italy/EU | ✓ |
No extra-EU transfers. All data remains within the European Economic Area.
7. Your rights (GDPR Art. 15-22)
You can exercise the following rights at any time:
- Right of access (Art. 15): receive a copy of all data concerning you
- Right to rectification (Art. 16): correct inaccurate data
- Right to erasure / "right to be forgotten" (Art. 17): request full deletion
- Right to restriction (Art. 18): freeze processing
- Right to data portability (Art. 20): receive your data in structured JSON format
- Right to object (Art. 21): object to processing for marketing purposes
- Right to lodge a complaint (Art. 77): contact the Italian Data Protection Authority (garanteprivacy.it)
8. How to exercise your rights
- Immediate unsubscribe: click the "Unsubscribe" link in any newsletter (1-click GDPR-compliant)
- Other rights: write to [privacy@tecnicaindustriale.shop] specifying the right and your email address
- Response within 30 days (GDPR Art. 12.3), extendable by 60 days for complex cases with notice
9. Changes to this notice
We reserve the right to update this notice. Substantial changes will be communicated by email at least 30 days in advance.
Document compliant with EU Reg. 2016/679 (GDPR), Italian D.Lgs. 196/2003 (Privacy Code as amended by D.Lgs. 101/2018) and the Italian Data Protection Authority's guidelines.