Privacy and cookies

1. Who we are and how to contact us

Your data is processed by Covema Vernici S.p.A., Strada della Barra, 5 — 10040 Druento (TO), Italy — VAT no. 00472350016, which is the data controller.

• Email: [email protected]
• Telephone: +39 011 9941800
• PEC (certified email): [email protected]
• Data Protection Officer (DPO): Marco Martinetti — [email protected]

2. What data we collect

When you browse. Like every website, we automatically receive some technical information: your IP address, the page you open, the date and time, and the browser and device you use. We need it to run the site and protect it.

When you fill in a form. We collect the data you enter:

Together with the form data we save the language of the page, the page from which you sent it, the date and time, and the consents you gave along with the exact text you read. If you accepted marketing cookies, we also save any advertising campaign you arrived from. To block automated submissions (spam), when you submit the form a Cloudflare service checks that the form is being filled in by a person.

Without the required data we cannot respond to your request; you may leave out the optional data. Please do not include health information or other people's data in your message.

With cookies. Only if you accept them, some tools collect information on how you use the site or show you relevant advertising. Full details are in the Cookies section.

WhatsApp. The WhatsApp button opens a conversation in the WhatsApp app: the data you write there is processed by WhatsApp (Meta) under its own terms, and by us only to reply to you.

3. Why we use your data

You can withdraw consent whenever you wish: for the newsletter and commercial communications, use the unsubscribe link in every email or write to us; for cookies, use «Cookie preferences» at the bottom of every page. Withdrawing consent does not make what we did before unlawful.

4. Cookies

Cookies are small files that a website saves in your browser; in this section we also use the word «cookies» for similar tools (such as information saved in the browser by the site itself, or code from external services).

How you choose. On your first visit we ask you what to accept. You can accept everything, reject (including by closing the box with the X) or choose by category: no optional category is active until you choose it yourself, and continuing to browse does not count as consent. We remember your choice for 6 months and ask you again sooner only if the tools we use change. You can change it whenever you like from «Cookie preferences» at the bottom of every page.

Record of choices. To be able to prove the consent or refusal you gave us, we record every cookie choice in a secure archive: the choice, the date, the page, the language, the type of browser and device, the country and the version of the texts you saw, together with a random code that remains saved only in your browser. We do not record your IP address or any other data that identifies you. In the same secure archive we also record the consents you give in the contact and newsletter sign-up forms: which boxes you ticked, the text shown next to each one, the date, the page and the language, without your name or your email address. Each record has its own code, which we keep together with your request, and it is linked to the code of your cookie choices, if you have already made them. The code of your cookie choices appears in «Cookie preferences»: if you give it to us, we can find your choices. We keep the record for 10 years.

Necessary — always active. These are needed for the site to work and do not require your consent.

Cloudflare hosts the site and protects it: to do so it may use short-lived technical cookies and the technical data of visits (such as the IP address), without using them to profile you.

Statistics — only with your consent. These help us understand, in aggregate form, how the site is used.

Marketing — only with your consent. These help us understand whether our campaigns work and show you relevant advertising on other websites and social media.

We use Google Ads to measure the results of our advertising campaigns on Google and to show you our ads again (remarketing), and Meta Pixel to measure the visits and requests that come from Facebook and Instagram and to show you our ads on those platforms: both only if you accept marketing cookies.

YouTube videos. When a page contains a YouTube video, the video loads only if you have accepted marketing cookies, because YouTube uses its own cookies, including for advertising. Until you accept them, instead of the video you see a box from which you can accept them and start it.

Google and Meta also receive this data as independent controllers, in accordance with their own privacy policies (policies.google.com/privacy, www.facebook.com/privacy/policy).

Google Consent Mode. Until you choose, Google services are not loaded; when you choose, they receive only the permissions corresponding to the categories you have accepted.

From your browser. As well as through «Cookie preferences», you can decide in your own browser (Chrome, Safari, Firefox, Edge…) to delete cookies already saved or to stop websites from saving them, usually in the settings under «Privacy». Refreshing the page or clearing the cache does not delete your choice; if, however, you delete our site's data, we lose it and will ask you again. The same happens if the browser deletes it on its own, as Safari does, for example, with sites you have not visited for a few days. If you block all cookies, some features may not work, for example sending forms.

5. Who we entrust data to

The data is seen only by authorised Covema Vernici staff, who also receive a copy of the form confirmation email. We also rely on these providers:

«Processors» process the data only on our behalf and under a contract; «independent controllers» also use it for their own purposes, in accordance with their privacy policies. We may disclose data to the authorities when required by law. We do not sell your data.

6. Data outside the European Union

Some providers use servers in the United States. In these cases the data is protected by the EU-US privacy agreement (Data Privacy Framework), to which these providers adhere, and additionally by the standard contractual clauses approved by the European Commission.

You can ask us for a copy of these safeguards by writing to [email protected].

7. How long we keep data

After that the data is deleted or anonymised, unless the law requires us to keep it longer or it is needed to defend ourselves in a dispute.

8. Your rights

At any time you can ask us to:

• know what data of yours we hold and receive a copy of it;
• correct or complete it;
• delete it;
• restrict its use;
• receive it in a machine-readable format, so you can pass it on to another party;
• stop using it for marketing, always, and for other purposes based on our legitimate interest, if you have a reason related to your particular situation;
• withdraw consent you have given.

To do so, write to [email protected]. It is free of charge; we will reply within one month (three in more complex cases, in which case we will let you know) and we may ask you for some information to verify your identity.

If you believe we are processing your data improperly, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the European country where you live or work.

9. Artificial intelligence

The site has no chatbots or other artificial intelligence systems that interact with you, and we do not make decisions about you in a fully automated way.

Some texts and images on the site may be created with the help of artificial intelligence and are reviewed by our staff.

10. Changes

We may update this page, for example if the services we use or the laws change. You will always find the current version here, with the date of the last update. If something changes that requires your consent, we will ask you for it again.