Privacy Policy.

Dear User, before submitting your personal data through this website, we invite you to read this notice carefully. It has been prepared pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003, as subsequently amended and supplemented.

This notice describes how HARDY S.R.L. collects, uses, stores and protects the personal data of users who browse the website, complete contact forms, subscribe to the newsletter, create an account or make online purchases.

This notice applies exclusively to this website and does not extend to other websites that may be reached via links on the site.

Data controller

The controller of personal data processing is:

The same contact details may be used by the User to request information about personal data processing and to exercise the rights provided under applicable law.

Types of data processed

While browsing and using the website, HARDY S.R.L. may process different categories of personal data.

Browsing data. The IT systems and software procedures used to operate the website automatically acquire certain technical information whose transmission is implicit in the use of Internet protocols. This category includes, by way of example, IP addresses, browser-related data, access times, pages visited and technical information about the device used.

Such data is used to ensure the proper functioning of the website, maintain its security, obtain aggregated statistical information and verify any anomalies or non-compliant use.

Data voluntarily provided by the User. When the User completes a contact form, sends a request by email, subscribes to the newsletter, creates an account or makes an online purchase, data such as first name, surname, email address, phone number, shipping address, billing address, tax details, the content of the message sent and any other information necessary to handle the request or order may be required.

Data relating to online purchases. When using the e-commerce section, data necessary to manage the order, ship products, issue invoices, provide after-sales support and fulfil administrative, accounting and tax obligations may be processed.

Payment data, where handled through external platforms or payment service providers, will be processed according to the security procedures and privacy notices of the respective providers.

Purposes of processing and legal basis

Personal data collected through the website may be processed for the following purposes.

Browsing and website operation. Technical and browsing data is processed to allow the User to access the website, view its contents correctly, maintain platform security and prevent abuse or malfunctions. The legal basis is the legitimate interest of the Controller in the proper functioning and security of the website.

Handling information requests. Data entered in contact forms or spontaneously communicated by email, phone or other channels is processed to respond to the User’s requests, provide information on HARDY products and services, manage commercial communications requested by the data subject and follow up on expressed needs. The legal basis is the performance of pre-contractual or contractual measures requested by the User.

Account and online order management. Data provided during registration or purchase is processed to create and manage the personal account, receive and fulfil orders, process payments, arrange shipping, issue tax documents, provide assistance and fulfil obligations connected with online sales. The legal basis is the performance of the sales contract or pre-contractual measures requested by the User.

Administrative, accounting and tax compliance. Data relating to purchases, invoicing and commercial transactions is processed to comply with legal, tax and accounting requirements and with requests from competent authorities. The legal basis is compliance with legal obligations to which the Controller is subject.

Newsletter and informational or promotional communications. Where the User subscribes to the newsletter or gives specific consent to receive commercial communications, HARDY S.R.L. may use the email address to send updates, news, offers, informational content and communications relating to its products or services. The legal basis is the data subject’s consent, which may be withdrawn at any time.

Processing methods

Personal data is processed using IT, telematic and, where necessary, paper-based tools, according to logic strictly related to the stated purposes.

HARDY S.R.L. adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction, disclosure, alteration or misuse.

Data is processed by personnel authorised and instructed by the Controller, as well as by external parties appointed as processors under Article 28 GDPR, where applicable.

Recipients of personal data

The User’s personal data may be disclosed, to the extent necessary for the stated purposes, to the following categories of recipients:

• employees, collaborators and personnel authorised by HARDY S.R.L.;
• providers of IT services, hosting, technical maintenance and website management;
• providers of e-commerce platforms, payment systems, shipping and logistics services;
• tax, administrative, legal or accounting advisors;
• companies appointed to manage newsletters or electronic communications;
• public authorities, bodies or parties to whom disclosure is required by law.

Such parties may process the data as processors, independent controllers or authorised persons, depending on their actual role.

Transfer of data outside the European Union

Personal data will mainly be processed within the European Union.

Where, for technical or organisational reasons connected with the use of external providers, some data must be transferred to non-EU countries, HARDY S.R.L. will adopt the safeguards provided under applicable law, such as adequacy decisions, standard contractual clauses approved by the European Commission or other suitable legal instruments.

Data retention period

Personal data will be retained for the time strictly necessary to achieve the purposes for which it was collected.

In particular:

• data collected through contact forms will be retained for the time necessary to handle the request and, as a rule, no longer than 6 months, unless further needs connected with the request arise;
• data relating to accounts, orders, sales, invoicing and administrative compliance will be retained for the period required by civil, tax and accounting law, generally 10 years;
• data processed for newsletter delivery will be retained until consent is withdrawn or the User requests deletion;
• technical and browsing data will be retained for the time necessary for website operation and security, unless further retention is required to establish liability or comply with legal obligations.

Rights of the data subject

At any time, the User may exercise the rights provided under personal data protection law.

In particular, the User has the right to:

• obtain confirmation as to whether or not personal data concerning them exists;
• obtain access to their personal data;
• request rectification of inaccurate data or completion of incomplete data;
• request erasure of data, where provided by law;
• request restriction of processing;
• object to processing, where the conditions provided by law apply;
• receive data in a structured, commonly used and machine-readable format, where applicable;
• withdraw consent given, without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Requests may be sent to:

Nature of data provision

Provision of browsing data is necessary to allow the technical operation of the website.

Provision of data requested in contact forms is optional; however, failure to provide necessary data may prevent HARDY S.R.L. from responding to the User’s request.

Provision of data necessary for registration, online purchase, shipping and invoicing is required to conclude and manage the contractual relationship. Without such data, it may not be possible to create an account, place an order, receive purchased products or obtain assistance.

Provision of data for newsletter or marketing purposes is optional and subject to the User’s consent, which may be withdrawn at any time.

Cookies and tracking tools

The website may use technical cookies and other tools necessary for the proper functioning of pages, cart management, security, User authentication and use of requested services.

Any use of analytics, profiling or third-party tracking tools will be governed by a specific Cookie Policy and, where required by law, subject to the User’s consent.

For further information on the use of cookies and how to manage preferences, the User is invited to consult the website’s Cookie Policy.

Updates to this notice

HARDY S.R.L. reserves the right to amend or update this Privacy Policy at any time, including as a result of regulatory, technical or organisational changes or changes relating to services offered through the website.

Updates will be published on this page. The User is therefore invited to consult this notice periodically.

Last updated: 31 May 2026