Privacy and Cookie Policy

Welcome!
This document (hereinafter also "Privacy Policy") serves as information and illustrates, with particular reference to the principle of transparency pursuant to art. 13 of EU Regulation 679/2016 (hereinafter, for convenience, "GDPR"), what data is processed by the Data Controller and how it is managed.
Pursuant to art. 5 of the GDPR, the processing of personal data is based on general respect and observance of the principles of lawfulness, fairness, purpose limitation and retention, data minimization, accuracy, integrity, confidentiality, and accountability, in accordance with the principles of privacy by default and by design.
In particular, the regulation of this matter is contained, among other legal provisions, in Legislative Decree 196/2003 and subsequent amendments, in Legislative Decree 101/2018, and in the aforementioned GDPR.

For the purposes of this document, "website" means www.enoweb.com, including each of its pages, sections, and subsections.
"User" means any person who contacts the website, uses its services, communicates, or even simply accesses and/or views one or more pages of the aforementioned website.
For further definitions, such as personal data or other definitions, please refer to the text of the aforementioned GDPR.
We kindly ask you to carefully read this Privacy Policy, which applies whenever you access and/or browse this website and/or use its services, regardless of the data processed. Therefore, by accessing the website, you consent to the Privacy Policy described herein. For any further information regarding data processing, you can contact the Data Controller at the email address indicated in point 1 of this Privacy Policy.

The Data Controller, pursuant to Articles 4 and 24 of the GDPR, is:

• E-Group Srl – Via Enrico Fermi, 9 – 35136 Padova (PD)
• VAT No. 03461800280
• Email: info@enoweb.com

For the Data Controller's personal details, you can send a written request to the email address indicated above.

• Browsing data: This is the set of data whose transmission is implicit in the use of Internet communication protocols. They are acquired, in the absence of any human activity, independently by the computer systems and software procedures used to operate the website. This category includes, for example, the IP addresses or domain names of the devices used during navigation, the URI addresses of the requested resources, the date, time, and date of the request, the method used to submit the request to the server, the size and type of the file obtained in response, the numerical code indicating the status of the response given to the server, and other parameters relating to the operating system and the User's IT environment. This data, which is necessary for using the web services, is also processed to obtain statistical information on the use of the services and to monitor the proper functioning of the services provided.
• Data communicated by the user: This is the set of data collected when the User sends a message to the email address referred to in art. 1, makes a telephone contact or any other type of contact to receive information or commercial proposals, request clarifications, or otherwise. The voluntary sending of messages to the contact addresses, as well as the completion and submission of the forms provided, entails the acquisition of the sender’s contact details and all personal data independently included by the user in the communications and/or requested when completing the form form : all data provided will be processed in order to fulfill the User's requests. Depending on the circumstances, this activity may be carried out through third-party service providers such as: Calendly – https://help.calendly.com/hc/en-us/articles/360009867334-Calendly-Platform-Security-and-Compliance#calendly-platform-security-and-compliance-0-0, for which the Controller has undertaken to collect and maintain all necessary permissions and valid consents required to lawfully transfer the data and allow such data to be lawfully collected, processed and shared by the third party for the provision of the Service.
• Data collected via cookies: This concerns the information contained in cookies, which is retransmitted to the servers when the user returns to visit the site. Cookies are text files that the servers of visited websites may deposit in the memory of the devices used by the user; in this regard, please consult the Cookie Policy on the website.
• Newsletter subscription data: This is the data entered by the user to subscribe to the newsletter, which requires their name, surname, and email address via a specific form. formIn this case, the data is useful and preparatory to receiving updates and commercial communications. This marketing activity may, depending on the circumstances, be carried out through third-party service providers such as: Mailchimp – https://www.intuit.com/privacy/statement/, for which the Data Controller has undertaken to collect and maintain all necessary permissions and valid consents required to legally transfer the data and to allow such data to be legally collected, processed, and shared by the third party for the purposes of providing the Service.
• Purchase, billing, and payment data: This data is acquired to allow the order to be placed and the purchase of products and/or services on the website. The Data Controller receives the information directly from the user through the appropriate form registration and payment process. Specifically, the following data are collected: identification data, personal data, and, more generally, contact details such as name, surname, place and date of birth, residence, domicile, email address, and telephone numbers, which may also be used for shipping purposes; relating to payment and invoicing methods, as well as administrative, accounting, and tax data.
• Review data: This refers to data entered by the user to review purchased products and/or services, where the user is asked to provide their name, surname, and email address via a specific form. formIn this case, the data is useful and preparatory to publishing the review.

• Data sent via contact forms
  When the user completes and submits a form on the website, voluntarily entered data may be collected, such as first and last name, company name, email address, telephone number, subject of the request, and content of the message. Some technical data associated with the submission may also be processed, such as the date and time of the request, IP address, browser, and user agent used.

All the aforementioned information is intended to be provided only for purposes related to this website and not for other sites that may be accessed via links. Therefore, the Data Controller cannot be held responsible for personal data processed independently by the provider of the platform connected via a link..

In cases where the nature of the provision is to be defined as mandatory, the relevant text field in form of this website will be expressly indicated as such, including through the use of symbols or graphic signs.

If, in the presence of such fields marked as mandatory, the User fails to enter the requested information, it will be objectively impossible for the Data Controller to manage the pre-contractual/contractual and communication/purchase/sale relationship.

In summary, failure to provide the data in question will prevent the relationship from being established.

The data is processed, subject to express consent pursuant to. Art. 6, letter a, GDPR, for the following purposes:  

• Marketing, profiling, and commercial promotion, sending, via all digital and/or paper communication tools, information, updates, and news regarding products, services, and promotions. At any time, the User has the right to withdraw consent to receive promotional information by communicating their wish in writing to the email address indicated in Article 1, or by following the procedure available at the link at the bottom of communications received by email, which allows them to unsubscribe.

• Publish reviews of products and/or services previously purchased by the User.

At any time, the User has the right to withdraw consent to the publication of the review uploaded on the website by communicating their wish in writing to the email address indicated in Article 1.

The data is processed without prior express consent pursuant to art. 6, letter b) of the GDPR. b, c, and f, GDPR, for the following purposes: 

1. Allow the User to join the community and receive paper and/or digital communications on the legal basis of contractual fulfillment;
2. Fulfill orders, process payments, ship products and/or provide services, and provide subsequent customer assistance and support on the legal basis of the implementation of pre-contractual and contractual measures, adopted at the customer's request;
3. Comply with all legal, tax, accounting, and administrative obligations;
4. Provide information on products or services similar to those already purchased and measure customer satisfaction with the products or services purchased. The User has the right to withdraw the consent given at any time by communicating it in writing to the email address referred to in Article 1, or by following the procedure available via the link included in the email communications received, which allows you to unsubscribe;
5. Processing the User's requests and requests and responding to questions and concerns raised through the contact tools available. The legal basis is the Data Controller's legitimate interest in providing customer support, as well as information on products and services, developing new products and/or services, implementing existing ones, and generally achieving greater efficiency;
6. Establishing an adequate defense in the appropriate judicial and extrajudicial venues in the event of a dispute with the User.

The User has the right to withdraw the consent given at any time by communicating it in writing to the email address referred to in Article 1.

Management and archiving of requests received via the website
Data sent via the forms is processed to respond to requests for information, assistance, quotes, or contact information and to maintain a history of received communications. The legal basis is the implementation of pre-contractual measures adopted at the request of the data subject, pursuant to Art. 6, paragraph 1, letter b) of the GDPR. For strictly organizational, security, and protection activities of the Data Controller, processing may be based on legitimate interest pursuant to Art. 6, paragraph 1, letter f) of the GDPR.

 All data collected is processed solely for purposes related to this website and not for other sites that may be accessed via links or the social buttons contained therein. Therefore, the Data Controller cannot be held responsible for data processing carried out independently by the owner of the platforms connected via links and/or social buttons. It is hereby specified that the website is autonomous and independent from the sites and/or platforms accessed via the aforementioned links and/or social buttons.

The data is processed by the Data Controller using electronic and telematic means, without prejudice to the possibility of processing in paper form.

The processing of personal data may include any type of operation, including collection, recording, modification, storage, organization, consultation, processing, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction. In any case, the data is collected and processed for specific, explicit, and legitimate purposes, and used in a manner compatible with the purposes indicated in point 4. This is accomplished by adopting the most appropriate security measures possible to minimize the risks associated with such activities, and, in particular, where erasure or destruction are not the subject of the processing, in order to prevent such occurrences, as well as to prevent unauthorized access or processing that is not permitted and/or inconsistent with the purposes.

Messages sent through the contact forms are sent to the Data Controller's email address and may be stored in the site's database through the Flamingo plugin, installed in the WordPress environment, to allow the management, consultation, and retrieval of requests received.

The data is processed for the time necessary to fulfill the service requested by the User, coinciding with the achievement of the purposes for which it was collected, and in any case, no longer than 10 years from that date.
At the end of the retention period, the data will be deleted.
For marketing purposes only, this period is reduced to 24 months from the last interaction and in any case never more than 10 years.
The data collected through contact forms and stored by Flamingo is retained for the time necessary to process the request and, generally, for a maximum period of 24 months from the last communication, unless further retention is necessary to fulfill legal obligations, manage a contractual relationship, or protect the rights of the Data Controller.

The data is processed by the Data Controller and by personnel assigned by the Data Controller to carry out tasks related to the proper management of contractual and marketing relationships with customers, potential customers, and suppliers.

The data controller undertakes not to disclose personal data, unless authorized by the User, to persons other than the Data Controller's employees and/or professionals, collaborators, and third parties (natural or legal persons) who perform activities on behalf of the Data Controller and who need to know such data solely for the purposes of carrying out the requested activities.

In particular, the data may be disclosed to:

• persons who need access to the data to the extent strictly necessary to achieve purposes ancillary to the contractual relationship;
• persons and companies collaborating with the Data Controller, to the extent necessary to carry out their professional duties, including in particular bookkeeping or the completion of legal procedures.

In this sense, these persons will act as Data Processors.

The aforementioned entities, duly appointed pursuant to art. 28 GDPR, will process the data in full compliance with this Privacy Policy and applicable law: the list of such parties is available upon written request from the data subject, including by email at the address indicated in point 1, addressed to the Controller.

Pursuant to national and European laws and/or the provisions of the competent authorities, the data may also be communicated or made available to public or private entities indicated therein, within the limits and for the purposes set forth therein. The aforementioned entities will be provided only with strictly necessary information.

The data subject has the right to receive accurate information regarding the processing of their data, as established by Articles 12 et seq. of the GDPR.

At any time, pursuant to Articles 15 et seq. of the GDPR, the data subject has the right to exercise the rights of access to data, rectification, erasure, or restriction of processing, and to request and obtain information and clarification regarding the purposes and objectives of the processing, the categories of personal data, the recipients to whom the data have been disclosed, and the relevant retention period. For information on the rights of the data subject, please refer to the further details set out in Articles 15-22 of the GDPR.

The right to withdraw previously granted consent is always recognized, to be done by sending an email to the email address specified in point 1 and addressed to the Data Controller.

The law also provides for the right to lodge a complaint with the supervisory authority, the Data Protection Authority, as provided for by art. 77 GDPR, or to bring proceedings before the competent courts pursuant to Article 79 of the same text.

The exercise of all the aforementioned rights, with the exception of complaints with the Supervisory Authority (Garante per la protezione dei dati personali) and before judicial authorities, is possible by sending a specific request to the email address referred to in Article 1.

With particular reference to erasure, you have the right to request the erasure of your personal data, which will be erased upon request, except in cases where there are legally preventative circumstances, such as the validity of a contract or the existence of debt/credit relationships. Likewise, data cannot be deleted in cases where there are retention obligations.

Furthermore, pursuant to Art. 23 GDPR, and only under certain circumstances, European Union Member States have the right to limit certain rights of data subjects. We reserve the right to exercise this right, always in compliance with applicable EU and national law, in extraordinary cases where this is permitted.

All provisions of this policy are intended to apply solely to the website on which it is posted.

It does not apply in any way to other sites and/or platforms connected in any way to this site and accessible by the User via links. social buttons. 

For social buttons means the link buttons present on the web page depicting the icons of social networks to facilitate sharing and interaction on a specific social network of what the user has chosen.

The data processing carried out by these third-party entities is independent of that carried out on this website, and we therefore ask you to refer to their respective privacy policies, which can be consulted free of charge at the following links:

• Facebook: https://facebook.com/about/privacy
• Instagram: https://help.instagram.com/519522125107875
• YouTube: https://policies.google.com/privacy?hl=it
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/it-IT

Personal data will not be transferred outside of Europe. Any transfer to countries outside the European Union, where necessary and with the prior authorization of the User, will be carried out in accordance with Articles 44 et seq. of the GDPR, i.e., ensuring the best possible data protection measures.

Minors under the age of 16 are not required to provide any type of information or personal data without the consent of their parent or guardian.

The Data Controller reserves the right to modify and/or update this document, in whole or in part, in the future, also in light of possible regulatory changes on the matter in question. The User is advised to consult this page regularly for updates.

This document was last updated on June 3, 2026.