Privacy Policy
This privacy notice describes how personal data of users who browse and interact with the website unicaitaly.com (the "Site") is processed, in accordance with Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018 (the "Italian Privacy Code").
1. Data Controller
The controller of the personal data collected through the Site is UNICA C.E. S.a.s. di Sanvido Michele & C. (trading as UNICA CE Italy), with registered office at Via Spagna, 11/B – 35010 Vigonza (PD), Italy, VAT/Tax ID IT 0265 133 0280, Chamber of Commerce (REA) registration no. PD-258268, registered with the Court of Padua under no. 47137.
For any request regarding the processing of personal data, the Data Controller can be contacted at:
- Email: info@unicaitaly.com
- Administration email: amministrazione@unicaitaly.com
- Address: Via Spagna, 11/B – 35010 Vigonza (PD), Italy
2. Categories of data processed, purposes and legal basis
2.1 Data provided voluntarily through the contact form
When a user fills in the "Contact" form on the Site, the following data is collected: name, email address, phone number (optional), any reference to a product of interest, the text of the message, and the language version of the Site used.
Purpose: to respond to commercial inquiries, quote requests and pre-sales technical support.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures taken at the data subject's request) and, for aspects not strictly contractual, Art. 6(1)(f) GDPR (the Controller's legitimate interest in responding to received requests). Providing the data marked as mandatory on the form is necessary to process the request: failure to provide it makes it impossible to receive a reply.
The message is stored in an internal archive of the Site and forwarded by email to the responsible sales/administrative staff, with the reply-to address set to the one provided by the user, to make a direct reply easier.
2.2 Data provided through the custom electric heating resistors configurator
The online configurator for requesting custom electric heating resistors (ATEX or non-ATEX) collects: type of use, power, length, dimensions, operating temperature, type of certification required, name, email and phone number (optional).
Purpose: to process and handle the technical configuration/quote request. Based on the data entered, a summary PDF datasheet is generated (including an indicative, not-to-scale technical drawing and the technical data entered), which is emailed to the technical/sales staff and stored in an internal archive to handle the request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures requested by the data subject prior to entering into a contract). Please note that the price shown in the preliminary PDF is always marked "to be confirmed": no final automatic price calculation is performed; the final quote is communicated manually by an operator.
2.3 Browsing data and technical information
In the course of its normal operation, the IT systems used to run the Site acquire certain data (IP address, browser type, operating system, pages visited, date and time of the visit) that is recorded in the server's log files for IT security purposes, prevention of unlawful use, and diagnosis of technical issues. This data is not collected in order to be associated with identified data subjects, but by its nature it could, through processing carried out by third parties, allow users to be identified.
Legal basis: Art. 6(1)(f) GDPR (the Controller's legitimate interest in the security of its IT infrastructure).
2.4 Cookies and similar technologies
The Site uses exclusively technical cookies, necessary for the correct functioning of the features requested by the user:
- Session cookie (PHPSESSID): generated only while using the electric resistors configurator, to temporarily hold the data entered in the multi-step wizard between steps and to display the confirmation page after submission. It is a session cookie (not persistent), automatically deleted when the browser is closed, and is never used for profiling, cross-site tracking or advertising purposes.
As of the date this notice was last updated, the Site does not use profiling, analytics or third-party marketing/advertising cookies (e.g. Google Analytics, Google Tag Manager, Meta/Facebook Pixel or similar tools). The platform is technically capable of supporting them in the future, but such tools are currently disabled. Should the Controller decide to activate them, this notice will be updated beforehand and, where required by applicable law, the user's consent will be collected via a dedicated banner before any non-technical cookie is installed.
The Site also includes, on the Contact page and in the footer, an external text link to Google Maps to show the company's location. This is a simple hyperlink that opens Google Maps in a new browser tab: no map is embedded within the Site's pages, so no data is transmitted to Google during normal browsing. Any processing of data by Google only takes place if and when the user voluntarily clicks the link, and is governed by Google's own privacy notice.
Users may manage, block or delete cookies at any time through their browser settings; however, disabling the technical session cookie may prevent the electric resistors configurator from working correctly.
3. How data is processed and security measures
Processing is carried out using IT and telematic tools, with logic strictly related to the purposes indicated, so as to ensure the security and confidentiality of the data. The Controller adopts appropriate technical and organisational measures, including: access restricted to authorised personnel through personal credentials, data transmission protected via the HTTPS protocol, access passwords stored using secure hashing algorithms, and database queries executed exclusively through parameterised statements (prepared statements) to prevent SQL injection attacks.
4. Data retention period
- Contact form requests: retained for a maximum of 24 months from the last contact, unless the request results in a contractual relationship, in which case the tax/accounting retention periods provided by law apply (10 years pursuant to Art. 2220 of the Italian Civil Code).
- Electric resistors configurator requests (including the generated PDF datasheet): retained for a maximum of 24 months from the request, unless a contractual relationship is established, in which case the same statutory tax/accounting periods apply.
- Server technical log data: retained for a maximum period of 6 months, save for specific needs related to the investigation of offences.
- Session cookie: automatically deleted when the browser is closed.
Once the above periods have elapsed, the data is permanently deleted or anonymised, save for any legal obligations requiring longer retention.
5. Recipients of the data and third parties
The personal data collected is not disclosed publicly and is never sold or transferred to third parties for marketing purposes. The data may be accessed by:
- personnel of the Controller authorised to process data by reason of their duties (sales, technical and administrative departments);
- the provider of the hosting service on which the Site and its database are hosted, which processes the data as a data processor pursuant to Art. 28 GDPR, solely to the extent necessary to provide the technical service;
- any email delivery (SMTP) service providers used to deliver the notifications generated by the Site's forms, limited to the data strictly necessary to send the message.
At present, the Controller does not use any further third-party providers (e.g. external CRM, marketing automation or advertising platforms) to process data collected through the Site.
6. Transfer of data outside the EU
Data is processed on IT infrastructure located in Italy/the European Union. The Controller does not routinely transfer personal data to countries outside the EU. Should this become necessary in the future, the transfer will only take place where there is an adequacy decision of the European Commission or adequate safeguards pursuant to Articles 44-49 GDPR (e.g. standard contractual clauses).
7. Data subject rights
As a data subject, you have the right to request from the Controller, at any time:
- access to your personal data (Art. 15 GDPR);
- rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR);
- erasure of data ("right to be forgotten"), in the cases provided for by Art. 17 GDPR;
- restriction of processing, in the cases provided for by Art. 18 GDPR;
- data portability, i.e. to receive your data in a structured format and transmit it to another controller, where technically feasible (Art. 20 GDPR);
- objection to processing based on the Controller's legitimate interest (Art. 21 GDPR);
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal, where processing is based on consent.
Requests may be exercised by contacting the Controller at info@unicaitaly.com or amministrazione@unicaitaly.com, or in writing to the registered office address indicated above. The Controller will respond without undue delay and in any case within one month of the request, a period that may be extended by two further months for particularly complex or numerous requests.
You retain the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it), if you believe that the processing of your data infringes applicable law.
8. B2B nature of the Site and minors
The Site is aimed at a professional audience (customers, prospective customers and business partners in the electrical and pneumatic construction sector) and is not intended for minors under the age of 18. The Controller does not knowingly collect personal data of minors through the Site's forms.
9. Changes to this notice
The Controller reserves the right to modify or update this notice, in whole or in part, including as a result of regulatory changes. Any changes will be published on this page, indicating the date of the last update. Users are advised to check this page periodically.
Last updated: 5 August 2026
