Privacy Policy

Information Notice pursuant to Art. 13 of the EU Regulation 2016/679


Rippotai S.r.l. Società Benefit, located at via Meleto 853 – 47835 Saludecio (RN), VAT No. 04476820404, e-mail info@rippotai.it, as Data Controller (hereinafter referred to as the "Controller"), pursuant to and for the purposes of EU Regulation 2016/679 (hereinafter referred to as the "Regulation" or "GDPR") and the Legislative Decree of 30 June 2003 no. 196 and subsequent amendments (hereinafter referred to as the "Decree"), hereby provides you with the required information concerning the processing of your personal data, under Art. 13 GDPR. In this notice, you may also be referred to as the Data Subject, pursuant to the GDPR.


  1. Purpose of the Processing

Your personal data, not deemed "special" as defined by Art. 9 of GDPR, provided through the website www.rippotai.it ("Website"), for instance by filling out forms, sent via e-mail or otherwise communicated while browsing the Website or afterwards, or otherwise acquired, will be processed by the Controller solely for the following purposes:

  1. a) to fulfill contractual obligations (e.g. sale of products or services), provide the requested information, and meet the related administrative and fiscal obligations;
  2. b) with your specific and explicit consent, to send informational, promotional, advertising, and marketing materials concerning the Controller's products or services, via e-mail, SMS, WhatsApp, and social networks.


The collected personal data will not be subject to any automated decision-making process, including profiling.


  1. Legal Basis for Data Processing and Nature of Data Provision

The legal basis for processing is the performance of a contractual obligation (Art. 1, point a), which, under the GDPR, does not require your consent. For processing personal data for the purposes referred to in Art. 2, point b), the legal basis is your explicit consent. Providing data for the purposes of Art. 1, letter a) is mandatory, and failure to provide it will result in the inability to fulfill contractual obligations. Providing data for the purposes of Art. 1, letter b) is optional.


  1. Consent

Consent may be withdrawn at any time. Withdrawing consent will not affect the lawfulness of processing based on consent given before its withdrawal.


  1. Processing Method and Data Retention Period

Processing will be carried out using IT systems by duly authorized persons, in compliance with security measures prescribed by the Regulation. In certain cases, processing might be done on paper, always by authorized individuals and in compliance with current privacy legislation. Personal data processed for the purposes of Art. 1, letter a) will be kept by the Controller for 10 years in line with the Italian laws regarding the retention of administrative documents. Personal data processed for the purposes of Art. 1, letter b) will be kept for a maximum of 2 years.


  1. Communication to third parties

Your personal data may be disclosed to third parties within the European Union, such as parent or subsidiary companies of the Controller, IT service providers (e.g., Website maintainers, company's IT systems maintainers), shipping agents, legal/tax consulting firms, and any other entity, individual, or organization to which the data communication is legally mandated.


  1. Cookies

The Cookie Policy can be accessed at the following link: https://www.iubenda.com/privacy-policy/84821771/cookie-policy


  1. Rights of the Data Subject

In accordance with Art. 13, paragraph 2 of the Regulation, the Controller informs you that you have the right to:

  1. a) request access to personal data from the Controller, and rectification or deletion of such data or restriction of processing concerning you, or to object to such processing. You also have the right to data portability;
  2. b) lodge a complaint with a supervisory authority.

You can exercise the above rights, those set out in Art. 15 and subsequent articles of the Regulation, as well as those provided for by the Legislation, by contacting the Data Controller at the address indicated above.



( ) I have read the Privacy Notice and consent to the processing of my personal data.

( ) I expressly consent to the processing of my personal data for receiving advertising/marketing materials through the means indicated in the notice.