# Privacy and cookies

> How Covema Vernici processes your personal data and which cookies it uses on legno.covemavernici.com: purposes, providers, retention, rights and cookie preferences.

URL: https://legno.covemavernici.com/en/privacy-policy

Last updated: 7 October 2026

On this page we explain, in simple terms, what data we collect when you visit legno.covemavernici.com or fill in one of our forms, why we do so, which cookies we use and what your rights are. This is the notice required by the European General Data Protection Regulation (GDPR) and by Italian privacy and cookie legislation.

### 1. Who we are and how to contact us

Your data is processed by **Covema Vernici S.p.A.**, Strada della Barra, 5 — 10040 Druento (TO), Italy — VAT no. 00472350016, which is the data controller.

- Email: privacy@covemagroup.com
- Telephone: +39 011 9941800
- PEC (certified email): covemavernici@pecsoci.ui.torino.it
- Data Protection Officer (DPO): Marco Martinetti — dpo@covemagroup.com

### 2. What data we collect

**When you browse.** Like every website, we automatically receive some technical information: your IP address, the page you open, the date and time, and the browser and device you use. We need it to run the site and protect it.

**When you fill in a form.** We collect the data you enter:

| Form | Required data | Optional data |
| --- | --- | --- |
| Contact | first name, last name, email, message | telephone, city, profession |
| Newsletter sign-up | first name, last name, email | — |

Together with the form data we save the language of the page, the page from which you sent it, the date and time, and the consents you gave along with the exact text you read. If you accepted marketing cookies, we also save any advertising campaign you arrived from. To block automated submissions (spam), when you submit the form a Cloudflare service checks that the form is being filled in by a person.

Without the required data we cannot respond to your request; you may leave out the optional data. Please do not include health information or other people's data in your message.

**With cookies.** Only if you accept them, some tools collect information on how you use the site or show you relevant advertising. Full details are in the [Cookies](https://legno.covemavernici.com/en/privacy-policy#cookie) section.

**WhatsApp.** The WhatsApp button opens a conversation in the WhatsApp app: the data you write there is processed by WhatsApp (Meta) under its own terms, and by us only to reply to you.

### 3. Why we use your data

| Purpose | Legal basis |
| --- | --- |
| Responding to your requests | It is needed to give you what you asked for |
| Sending you the newsletter and, if you accept this in the contact form, commercial communications and informational and promotional material | Your consent |
| Running and protecting the site and the forms | Our legitimate interest in the security of the site |
| Keeping proof of the consents you have given us | A legal obligation |
| Statistics on the use of the site (Google Analytics) | Your consent to cookies |
| Measuring our campaigns and showing you relevant advertising (Meta Pixel, Google Ads) | Your consent to cookies |
| Showing you YouTube videos, when a page contains one | Your consent to cookies |
| Defending our rights in the event of disputes | Our legitimate interest |

You can withdraw consent whenever you wish: for the newsletter and commercial communications, use the unsubscribe link in every email or write to us; for cookies, use «Cookie preferences» at the bottom of every page. Withdrawing consent does not make what we did before unlawful.

### 4. Cookies

Cookies are small files that a website saves in your browser; in this section we also use the word «cookies» for similar tools (such as information saved in the browser by the site itself, or code from external services).

**How you choose.** On your first visit we ask you what to accept. You can accept everything, reject (including by closing the box with the X) or choose by category: no optional category is active until you choose it yourself, and continuing to browse does not count as consent. We remember your choice for 6 months and ask you again sooner only if the tools we use change. You can change it whenever you like from «Cookie preferences» at the bottom of every page.

**Record of choices.** To be able to prove the consent or refusal you gave us, we record every cookie choice in a secure archive: the choice, the date, the page, the language, the type of browser and device, the country and the version of the texts you saw, together with a random code that remains saved only in your browser. We do not record your IP address or any other data that identifies you. In the same secure archive we also record the consents you give in the contact and newsletter sign-up forms: which boxes you ticked, the text shown next to each one, the date, the page and the language, without your name or your email address. Each record has its own code, which we keep together with your request, and it is linked to the code of your cookie choices, if you have already made them. The code of your cookie choices appears in «Cookie preferences»: if you give it to us, we can find your choices. We keep the record for 10 years.

**Necessary — always active.** These are needed for the site to work and do not require your consent.

| What | Provided by | What it is for | How long it lasts |
| --- | --- | --- | --- |
| Your cookie choice (legno-consent, legno-consent-queue) | Covema Vernici | remember what you have accepted | 6 months |
| Your accessibility preferences (legno-a11y, legno-a11y-button) | Covema Vernici | remember the settings you choose in the Accessibility panel, including the position of the button | until you reset them |
| Anti-spam check (Cloudflare Turnstile) | Cloudflare Portugal Unipessoal Lda | check that the one sending a form is a person | short, set by Cloudflare |
| Cloudflare cookies | Cloudflare Portugal Unipessoal Lda | protect the site from automated traffic and abuse | short, set by Cloudflare |

Cloudflare hosts the site and protects it: to do so it may use short-lived technical cookies and the technical data of visits (such as the IP address), without using them to profile you.

**Statistics — only with your consent.** These help us understand, in aggregate form, how the site is used.

| What | Provided by | What it is for | How long it lasts |
| --- | --- | --- | --- |
| Google Analytics (_ga, _ga_P8Q7PFTQLP) | Google Ireland Limited | count visits and page views | up to 2 years |

**Marketing — only with your consent.** These help us understand whether our campaigns work and show you relevant advertising on other websites and social media.

| What | Provided by | What it is for | How long it lasts |
| --- | --- | --- | --- |
| Meta Pixel (_fbp, _fbc) | Meta Platforms Ireland Limited | measure visits and requests coming from Facebook and Instagram; targeted advertising | 3 months |
| Google Ads (_gcl_au) | Google Ireland Limited | measure requests coming from Google ads; show our ads again (remarketing) | 3 months |
| Source campaign (legno-utm) | Covema Vernici | know which campaign a request sent with a form comes from | until the browser tab is closed |
| YouTube videos (when a page contains one) | Google Ireland Limited (YouTube) | show videos; YouTube uses its own cookies, including for advertising | set by YouTube |

We use Google Ads to measure the results of our advertising campaigns on Google and to show you our ads again (remarketing), and Meta Pixel to measure the visits and requests that come from Facebook and Instagram and to show you our ads on those platforms: both only if you accept marketing cookies.

**YouTube videos.** When a page contains a YouTube video, the video loads only if you have accepted marketing cookies, because YouTube uses its own cookies, including for advertising. Until you accept them, instead of the video you see a box from which you can accept them and start it.

Google and Meta also receive this data as independent controllers, in accordance with their own privacy policies (policies.google.com/privacy, www.facebook.com/privacy/policy).

**Google Consent Mode.** Until you choose, Google services are not loaded; when you choose, they receive only the permissions corresponding to the categories you have accepted.

**From your browser.** As well as through «Cookie preferences», you can decide in your own browser (Chrome, Safari, Firefox, Edge…) to delete cookies already saved or to stop websites from saving them, usually in the settings under «Privacy». Refreshing the page or clearing the cache does not delete your choice; if, however, you delete our site's data, we lose it and will ask you again. The same happens if the browser deletes it on its own, as Safari does, for example, with sites you have not visited for a few days. If you block all cookies, some features may not work, for example sending forms.

### 5. Who we entrust data to

The data is seen only by authorised Covema Vernici staff, who also receive a copy of the form confirmation email. We also rely on these providers:

| Provider | Role | What it does for us |
| --- | --- | --- |
| Cloudflare Portugal Unipessoal Lda | processor | hosts the site and the record of cookie choices, receives the forms, blocks spam |
| HighLevel, Inc. / Glofu Srl Unip. | processor / sub-processor | manages the system in which we record requests (CRM) and sends the confirmation emails and the newsletter |
| Google Ireland Limited | processor for Google Analytics; independent controller for Google Ads and YouTube | statistics, campaign measurement and advertising, YouTube videos (only with your consent) |
| Meta Platforms Ireland Limited | joint controller for collection via Meta Pixel; independent controller for what it does afterwards | campaign measurement and advertising (only with your consent) |

«Processors» process the data only on our behalf and under a contract; «independent controllers» also use it for their own purposes, in accordance with their privacy policies. We may disclose data to the authorities when required by law. We do not sell your data.

### 6. Data outside the European Union

Some providers use servers in the United States. In these cases the data is protected by the EU-US privacy agreement (Data Privacy Framework), to which these providers adhere, and additionally by the standard contractual clauses approved by the European Commission.

| Provider | Safeguard |
| --- | --- |
| Cloudflare | Data Privacy Framework and standard contractual clauses |
| HighLevel / Glofu | Data Privacy Framework and standard contractual clauses |
| Google | Data Privacy Framework and standard contractual clauses |
| Meta | Data Privacy Framework and standard contractual clauses |

You can ask us for a copy of these safeguards by writing to privacy@covemagroup.com.

### 7. How long we keep data

| Data | How long |
| --- | --- |
| Requests sent via the forms | in the contact management system (CRM) we use, for the time needed to handle the request and subsequent contacts; if a contract is signed, for the period required by law |
| Newsletter subscription and consent to commercial communications | until you unsubscribe or withdraw your consent |
| Proof of consent | as long as the consent is in use and for 10 years after you withdraw it (the ordinary limitation period), so that we can prove we collected it correctly; we keep only the date, the text of the consent and the withdrawal. Records in the consent register (cookie choices and boxes ticked in forms) are kept for 10 years |
| Technical data of visits | 180 days |
| Google Analytics statistics | 14 months |
| Your cookie choice | 6 months |
| Record of cookie choices | 10 years |

After that the data is deleted or anonymised, unless the law requires us to keep it longer or it is needed to defend ourselves in a dispute.

### 8. Your rights

At any time you can ask us to:

- know what data of yours we hold and receive a copy of it;
- correct or complete it;
- delete it;
- restrict its use;
- receive it in a machine-readable format, so you can pass it on to another party;
- stop using it for marketing, always, and for other purposes based on our legitimate interest, if you have a reason related to your particular situation;
- withdraw consent you have given.

To do so, write to **privacy@covemagroup.com**. It is free of charge; we will reply within one month (three in more complex cases, in which case we will let you know) and we may ask you for some information to verify your identity.

If you believe we are processing your data improperly, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the European country where you live or work.

### 9. Artificial intelligence

The site has no chatbots or other artificial intelligence systems that interact with you, and we do not make decisions about you in a fully automated way.

Some texts and images on the site may be created with the help of artificial intelligence and are reviewed by our staff.

### 10. Changes

We may update this page, for example if the services we use or the laws change. You will always find the current version here, with the date of the last update. If something changes that requires your consent, we will ask you for it again.