Privacy Policy

Privacy Policy

XFORGE S.R.L., with registered office at Via Francesco Arese 16, 20159, Milan – VAT No. 10147400963, in its capacity as Data Controller, hereby informs you, pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 (hereinafter, the "Privacy Code") and Article 13 of EU Regulation no. 2016/679 (hereinafter, the "GDPR"), that your data will be processed in the manner and for the purposes set out below:

XFORGE S.R.L. processes personal data, both identifying and non-sensitive (by way of example but not limited to: first name, last name, address, telephone number, email – hereinafter referred to as “personal data” or simply “data”) provided by you.

What data we process and why

The categories of personal data that our website collects and processes when you browse or make purchases on xforge.it are as follows:

We collect the personal data necessary to complete and fulfill your purchase: first and last name, email address, shipping address, billing address, phone number, and payment information;
We collect your email address when you subscribe to our newsletter service;
We process the personal data you provide when you contact our Customer Service to provide you with the requested assistance;
With your consent, we collect and use your personal data for marketing purposes;
For the registration of your account, we collect your first and last name, email address, and password.

How we use your data

XFORGE S.R.L. collects and processes your personal data for the following purposes:

Management of requests to our Customer Service, which uses the personal data you provide to fulfill your information requests and assistance inquiries;
If you send us your CV to be considered for an open position, we will use the information contained in your CV exclusively for that purpose;
With your explicit consent, we may use the contact details you have provided for commercial communications regarding our products and services, in order to keep you updated on news, new arrivals, exclusive products, our offers, and promotions. Furthermore, with your consent, we may use your contact information for market research and satisfaction surveys to improve our services and our relationship with our users.

Data Security

We protect your personal data with specific technical and organizational security measures designed to prevent your personal data from being used unlawfully or fraudulently. In particular, the measures outlined in Articles 31-34 of the Privacy Code are implemented.

Who has access to the data

Your data may be made accessible for the purposes listed to:

Our employees and collaborators in their capacity as authorized personnel and/or internal data processors and/or system administrators;
third-party companies or other entities (for example, technicians responsible for hardware and software support, couriers and carriers, credit institutions, professional firms, etc.) that perform outsourcing activities on behalf of XFORGE S.R.L. in their capacity as external data processors.

Comunicazione dei dati

Without your explicit consent (pursuant to Article 24, letters a), b), d) of the Privacy Code and Article 6, letters b) and c) of the GDPR), XFORGE S.R.L. may disclose your data for the purposes listed to supervisory bodies, judicial authorities, and all other entities to whom disclosure is mandatory. Your data will not be disseminated.

Data Transfer

The management and storage of personal data takes place within the European Union, on servers located in Italy, owned by XFORGE S.R.L. and/or third-party companies appointed and duly named as Data Processors

How long we keep your data

We keep your personal data for a limited period of time, which varies depending on the type of activity that involves the processing of your personal data.
Once this period has expired, your data will be permanently deleted or, in any case, irreversibly anonymized.
Your personal data are stored in compliance with the terms and criteria specified below:

Data collected to conclude and execute purchase contracts for goods on xforge.it: until the completion of administrative and accounting formalities. Billing data will be retained for ten years from the date of invoicing;
Registered user data: the data will be retained until you request the deletion of your profile;
Payment data: until payment is certified and the related administrative and accounting formalities are completed, following the expiration of the right of withdrawal and the terms applied for payment disputes;
Data related to user requests to our Customer Service: the data necessary to assist you will be retained until your request is fulfilled.
Data used for commercial communication activities with users registered to the newsletter: this data is retained until the service is discontinued or the user exercises their right to object by unsubscribing.
Data used for conducting market research and satisfaction surveys: until the User requests the cessation of the activity.

In any case, for technical reasons, the cessation of processing and the subsequent permanent deletion or irreversible anonymization of the related personal data will be completed within thirty days from the above-mentioned deadlines.

Your Rights

As data subjects, you have the rights under Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:

Access your data and modify it: you have the right to access your personal data and request that it be corrected, modified, or supplemented with other informatio
Withdraw your consent: you can withdraw at any time a consent you have given for the processing of your personal data in relation to any marketing activities;
Delete your data: in cases provided for by applicable law, you can request the deletion of your personal data. Upon receiving and evaluating your request, if it is legitimate, we will promptly cease processing and delete your personal data.

How to exercise your rights

You can exercise your rights at any time in one of the following ways:

By deleting your registered profile by sending an email to info@xforge.it
By clicking on "Click here" after "Do you no longer wish to receive these communications?" found at the end of each of our commercial emails.

Data Controller, Data Processor, and Authorized Personnel

The updated list of data processors and authorized personnel is kept at our office located at Via Francesco Arese 16, 20159, Milan.