Tominettihome

Privacy Policy

Welcome to the website www.tominettihome.it (hereinafter, the “Website” or the “Application”).
This policy describes how the personal data of users who consult the Website is processed, in compliance with Regulation (EU) 2016/679 (“GDPR”), Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and the Guidelines of the Italian Data Protection Authority.

Last update: February 2026

1. Data Controller

The Data Controller is:
Tominettihome
Via Achille Tominetti, 8
28922 Verbania (VB) – Italy
Email: info@tominettihome.it

The Data Controller may be contacted at any time for information on the processing of personal data or to exercise the rights of the Data Subject.

2. Types of personal data processed

The Website processes only the following categories of personal data:

a) Browsing and usage data

Collected automatically while browsing the Site, including, but not limited to:

  • IP address;
  • type of browser and device used;
  • operating system;
  • domain names and URI addresses of the requested resources;
  • date and time of the request;
  • parameters relating to the User’s IT environment.

This data is necessary for the proper functioning of the Website and for security purposes.

b) Device information

Technical data relating to the User’s device, processed exclusively in aggregate form and not intended for direct identification.

The Website does not collect special categories of data (Article 9 of the GDPR) or judicial data (Article 10 of the GDPR).

3. Processing methods

The processing of personal data is carried out by the Data Controller in compliance with the principles set out in Article 5 of the GDPR, in particular lawfulness, fairness, transparency, data minimization, accuracy, storage limitation, integrity, and confidentiality.

The processing is carried out using IT and telematic tools, with organizational and logical methods strictly related to the purposes for which the data is collected, and in any case such as to guarantee an adequate level of security, in accordance with the provisions of Articles 24, 25, and 32 of the GDPR.

Appropriate technical and organizational security measures are taken to prevent unauthorized access, disclosure, modification, or destruction of personal data. Under no circumstances will personal data be disclosed.

4. Place of processing

The data is processed at the Data Controller’s operational headquarters and on the servers of the technical service providers involved in the operation of the Website.

In particular, the hosting service is provided by: Aruba S.p.A.
Place of processing: Italy

No transfer of personal data to countries outside the EU is envisaged. Should this become necessary, the transfer will take place in accordance with Articles 44 et seq. of the GDPR.

5. Purpose and legal basis of processing

The User’s personal data is processed by the Data Controller exclusively for specific, explicit, and legitimate purposes, and is not subsequently processed in a manner incompatible with those purposes, pursuant to Article 5, paragraph 1, letter b) of the GDPR.

In particular, personal data is processed for the following purposes:

a) FTechnical operation and security of the Website

The processing is aimed at ensuring the proper functioning of the Application, the technical management of the infrastructure, the monitoring of performance, the prevention of unauthorized access, cyber attacks, misuse, or fraudulent activities.

b) Management of hosting services and technological infrastructure

Processing is necessary to enable the provision of platform and hosting services, including technical data storage and system log management.

c) Compliance with legal obligations

The processing is necessary to comply with obligations under applicable European or national law, as well as to respond to legitimate requests from competent authorities.

d) Establishment, exercise, or defense of a right

Personal data may be processed for the management of any disputes, complaints, or judicial or administrative proceedings.

The processing of personal data for purposes other than those indicated above will only be carried out with the express consent of the User, where required by current legislation.

The legitimate interest of the Data Controller is to ensure the security, stability, and proper functioning of the Website.

6. Data retention period

Personal data is stored for the time strictly necessary to achieve the purposes for which it was collected, and in particular:

  • Browsing data: up to 12 months, except where necessary for the investigation of crimes or requests from judicial authorities;
  • System logs: for the time necessary for the technical management and security of the Website.

Once the retention period has expired, the data will be deleted or anonymized in an irreversible manner.

7. Cookies and tracking tools

The Website uses only technical and functional cookies, which are necessary for the proper functioning of the Application.

8. Recipients of the data

Personal data may be disclosed to:

  • internal personnel authorized by the Data Controller;
  • technical service providers (e.g., hosting providers), appointed as Data Processors pursuant to Article 28 of the GDPR;
  • public authorities, where required by law.

The updated list of Data Processors can be requested from the Data Controller.

9. Rights of the Data Subject

Pursuant to Articles 15–22 of the GDPR, the User has the right to:

  • get access to their personal data;
  • obtain the rectification or updating of data;
  • obtain the deletion of data (“right to be forgotten”);
  • limit processing;
  • object to processing on legitimate grounds;
  • receive data in a structured and readable format (portability);
  • withdraw consent, where given;
  • file a complaint with the Data Protection Authority.

10. How to exercise your rights

Requests can be sent to the Data Controller at the email address info@tominettihome.it.
The Data Controller will respond within 30 days, except for extensions permitted by law.

11. Legal defense

The User’s personal data may be used by the Data Controller for the establishment, exercise, or defense of legal or administrative claims.

12. Changes to this policy

The Data Controller reserves the right to modify this policy at any time.
The changes will be published on this page and will become effective upon publication.

13. Definitions

For definitions of “personal data,” “processing,” “controller,” “processor,” “data subject,” and other relevant terms, please refer to Article 4 of the GDPR.