Information on the processing of personal data (pursuant to Art.14 GDPR)

IDRAL SPA, with registered office in via ISEI 8/10, 28010 GARGALLO (NO), Italy, VAT number 00124610031, with its role as personal data Controller, informs the data subjects that personal data shall be processed according to the data protection principles established in the UE Regulation 2016/679 (GDPR).

The purposes of the processing of collected data

Personal data of the data subject are collected to enable the Controller to provide Services and/or fulfil contractual obligations.

Therefore, the purposes of data processing are the following:

Should the data subject not allow the data processing, he or she will not be able to use the required service.

Only upon specific and clear consent, personal data are used for the following additional purposes:

Methods of processing

The Controller shall take any suitable measure aimed at preventing non-authorised access, disclosure, alteration or destruction of personal data. Processing is carried out through computer and/or online and/or paper tools, and the organizational methods are strictly related to the purposes.

Legal basis

Data collection is mandatory according to that required by legal and contractual obligations and, therefore, refusing to provide such data, totally or partially, may impede the supply of the requested services.

The company processes optional user data according to the consent, namely with the explicit approval of this privacy policy and depending on the methods and purposes described below.

Data source

The Controller may acquire personal data coming from the users’ registration for the following platforms: and any other showcase (EDILPORTALE, Archiproducts etc.)

that may process data independently in their role as independent controllers for the purposes included in their own information document.

Categories of addresses

Furthermore, the following categories of authorised people and/or external processors that are identified in writing and who have been given specific written instructions about data processing, may become aware of the data while such data are processed:

The updated list of the authorised employees and the external processors can be required at any time from the Controller.

Data transmission

The Controller is entitled to transmit data for the purposes described above without explicit consent of the data subject to oversight bodies, judicial authorities, as well as to any other subject whenever such transmission is legally required in order to achieve the abovementioned purposes.

Your data will not be disseminated.

Storage duration

Data are processed and stored for the period necessary for the purposes the data initially were collected:

Rights of the data subject

Pursuant to the European Regulation 2016/679 (GDPR) and to the national legislation, the data subject can exercise the following rights within the limits and in accordance with the regulation in force:

Procedure for the exercise of rights

You can exercise your rights at any time sending:


The Controller is IDRAL SPA, with registered office in via ISEI 8/10, 28010 GARGALLO (NO), Italy.

Amendments of this Information document

This information document may be subject to amendments. It is therefore recommended to check this document on a regular basis and to refer to its latest version.