Website: Gruppo Synergy
URL: https://grupposynergy.it
Data Controller: Synergy S.r.l.
Last updated: 13 October 2026
1. Introduction
This notice describes how the personal data of users is processed when they visit the Synergy S.r.l. website, view published content, download technical documents and certifications, or submit enquiries through the contact form.
This notice is provided under Regulation (EU) 2016/679 (GDPR) and applicable national personal data protection legislation.
2. Data Controller
Synergy S.r.l.
Registered office:
Via Lesegno 13
12060 Niella Tanaro (CN) – Italy
Contact details:
Email: info@grupposynergy.com
Phone: +39 0174 241416
VAT number / Tax ID: 04325850750
For any request concerning personal data processing, you may contact the Controller using the details above.
3. Types of data processed
3.1 Browsing data
During normal website operation, certain technical information is collected to ensure security and correct service delivery, including:
- IP address;
- access date and time;
- pages visited;
- requested URLs;
- browser used;
- operating system and device;
- browsing session information;
- system and security logs.
This data is not collected to identify users directly, but may allow identification through processing or association with data held by third parties.
3.2 Data voluntarily provided by the user
The website contact form may collect:
- first and last name;
- business or company name;
- email address;
- phone number;
- division or service of interest;
- the content of the enquiry or message.
Users may also voluntarily provide additional information in the message text.
The website forms prepare a draft in the user’s email application. The request is sent to Synergy S.r.l. when the user sends the email.
Please do not include special categories of personal data (Article 9 GDPR), health data or information that is not strictly necessary to handle your enquiry.
3.3 Data arising from the use of third-party services
Google Maps
The “Find us” section embeds Google Maps.
When the map loads, Google may collect:
- IP address;
- connection data;
- device information;
- any necessary or identifying cookies associated with the service.
Data is processed in accordance with Google’s privacy policy.
Social networks
The website links to the company’s profiles on:
- Facebook;
- Instagram;
- LinkedIn;
- Google.
Accessing these platforms involves data processing by the respective providers under their own privacy policies.
The WhatsApp button on the home page opens the company chat at +39 340 338 8954. Access takes place on the WhatsApp platform, subject to the provider’s terms and privacy settings.
3.4 Document downloads
The website provides:
- catalogues;
- technical data sheets;
- certifications;
- information documents.
Accessing and downloading these materials may generate technical records in the website systems and with the hosting provider.
4. Purposes and legal bases of processing
| Purpose | Legal basis | Data used |
|---|---|---|
| Handling enquiries submitted through the contact form | Article 6(1)(b) GDPR (pre-contractual steps) | Identification data and enquiry content |
| Managing business relationships and related activities | Article 6(1)(b) GDPR | Identification and contact data |
| IT security, system protection and abuse prevention | Article 6(1)(f) GDPR (legitimate interest) | Logs and technical data |
| Compliance with regulatory and legal obligations | Article 6(1)(c) GDPR | Data necessary to meet the obligation |
| Protecting the Controller’s rights | Article 6(1)(f) GDPR | Data relevant to the dispute |
5. Providing data
Providing the data requested in the contact form is optional.
However, not providing the information needed to identify or contact the person concerned may prevent Synergy S.r.l. from responding to the enquiry.
6. Consent and contact forms
The legal basis for handling information or quotation requests is the pre-contractual steps requested by the user, rather than consent.
The form requires the following acknowledgement:
“I confirm that I have read and understood the Privacy Notice.”
This acknowledgement is not mandatory consent to processing.
Any marketing activities, newsletters or promotional communications must be covered by a separate notice and specific consent where required by law.
7. Use of artificial intelligence systems
The public pages of the website do not appear to include:
- chatbots;
- virtual assistants;
- automated content generation systems;
- AI tools for end users.
The website therefore does not collect prompts, documents or other content for processing through artificial intelligence services accessible to visitors.
If AI tools that process users’ personal data are introduced in future, the Controller will update this notice to specify:
- the service provider;
- the purposes of processing;
- the categories of data transmitted;
- any transfers outside the EU;
- retention periods;
- any use of data to train or improve AI models;
- the provider’s data protection role.
8. Cookie Policy
8.1 What cookies are
Cookies are small text files stored on a user’s device while browsing. They allow the website to work correctly and, in some cases, collect information for statistics or profiling.
8.2 Necessary cookies
The website may use necessary cookies for:
- browsing security;
- session management;
- page functionality;
- preventing fraudulent use.
These cookies do not require the user’s consent.
8.3 Analytics and profiling cookies
Any non-necessary cookies may be installed only after the user consents through the preference banner, in accordance with applicable legislation.
The user must be able to:
- accept;
- refuse;
- change;
- withdraw
their consent at any time.
8.4 Google Maps
Integrating Google Maps may involve cookies and tracking technologies managed by Google.
For more information:
Google Privacy Policy
https://policies.google.com/privacy
8.5 Storage inventory
The storage managed directly by this website is listed below. Cookie preferences are saved on the device and are not sent by the website to a server.
| Name and technology | Purpose | Duration | Category and provider |
|---|---|---|---|
synergy_cookie_preferenceslocalStorage | Remembers the Google Maps choice and the date and expiry of the preferences. | 180 days, after which a new choice is requested. | Necessary · Gruppo Synergy |
synertubeFirePopupClosedsessionStorage | Remembers that the SynerTube product notice was dismissed during the tab session. | Browser tab session. | Functional · Gruppo Synergy |
Google Maps remains disabled until external content is enabled. Once enabled, Google may use its own storage technologies depending on the user’s browser and account settings. For information from the provider, see the Google Privacy Policy.
This version of the website does not integrate its own traffic analytics or profiling tools.
Google Maps is disabled until you choose to enable it.
9. How data is processed
Data is processed using IT and electronic tools in accordance with the principles of:
- lawfulness;
- fairness;
- transparency;
- data minimisation;
- integrity;
- confidentiality.
Appropriate technical and organisational measures are adopted to prevent unauthorised access, data loss, improper disclosure or unlawful use.
10. Data recipients
Personal data may be disclosed to:
- the Controller’s authorised staff;
- IT service providers;
- hosting providers;
- email service providers;
- administrative, tax and legal advisers;
- companies responsible for website maintenance;
- competent authorities where required by law.
Parties processing data on the Controller’s behalf act, where necessary, as Processors under Article 28 GDPR.
11. Transfers outside the EU
Some technology providers used by the Controller may transfer personal data to countries outside the European Economic Area.
In such cases, transfers comply with Article 44 et seq. GDPR through:
- European Commission adequacy decisions;
- Standard Contractual Clauses (SCCs);
- other appropriate safeguards under applicable legislation.
12. Data retention
Personal data is retained only for as long as strictly necessary for the stated purposes.
In particular:
- contact enquiries: for the time needed to handle the enquiry;
- business relationships: for the duration of the relationship and subsequent legal obligations;
- administrative and tax data: for the periods required by applicable legislation;
- technical logs: for the period needed for security and incident management.
13. Data subject rights
Data subjects may exercise their rights under Articles 15–22 GDPR at any time, including:
- access to personal data;
- rectification of inaccurate data;
- erasure (“right to be forgotten”);
- restriction of processing;
- data portability;
- objection to processing;
- withdrawal of any consent previously given.
Requests may be sent to:
14. Complaints to the supervisory authority
If you believe that your data is being processed in breach of applicable legislation, you may lodge a complaint with:
Garante per la Protezione dei Dati Personali (Italian Data Protection Authority)
Website: https://www.garanteprivacy.it
15. Updates to this notice
This notice may be amended and updated over time to reflect regulatory, technological or organisational changes.
Every update will be published on this page with its revision date.
Third-party provider privacy notices
Google: https://policies.google.com/privacy
Instagram: https://privacycenter.instagram.com/policy/
Facebook: https://www.facebook.com/privacy/policy/
