Privacy Policy

Information in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree No. 196/2003 et seq. – Last update: October 29, 2026.

Questa informativa spiega come Eco Service S.p.A. tratta i dati personali di chi visita il sito ecoservicespa.com e di chi utilizza i moduli presenti sul sito. Per l’uso dei cookie e delle tecnologie simili si rimanda alla Cookie Policy.

1. Data controller

Eco Service S.p.A.
Registered office: Via Giuseppe Gioacchino Belli 27, int. 10 – 00193 Rome (RM), Italy
Administrative headquarters and plant: Penitro industrial complex, S.R. 630 km 29,300 – 04026 Minturno (LT)
VAT number: IT02153560590
Email: info@ecoservicespa.com – PEC: ecoservicespa@pec.it – Tel. +39 0771 614260

2. What data do we process

2.1 Navigation data

The computer systems that run the website acquire, during normal use, certain data whose transmission is implicit in the use of Internet protocols: for example, IP address, browser type and device, pages visited, date and time of the request. This data is used to make the website work, to ensure its security and to detect any abuse.

2.2 Cookies and third-party tools

The site uses technical cookies necessary for its operation, and only with the express consent via the banner, cookies and statistical tools (Google Analytics) and marketing tools (Meta Pixel). The site also integrates third-party content (e.g., Google Maps). For details, see Cookie Policy, where you can modify or revoke the consent at any time.

2.3 Data provided voluntarily through the forms

When you fill out a form on the site, you will provide the data requested by the form itself:

  • Contact request or quote e request for vehicles ready for immediate delivery: name and surname, company or organization, email address, phone number, region, type of request, message.
  • Request for information (e.g. trade shows and events): area of interest, name, surname, company, location, email, phone number.
  • Request for assistanceName, company, serial number of the vehicle, region, phone number, email, type of request, message and any attachments (e.g. service book, photo of the problem).
  • Request to become a resellerName, company, VAT number, area, email, phone number, message.
  • Spontaneous applicationName, role of interest, email, phone number, message, and attached CV.
  • Subscribe to the newsletter: email address.

We ask you not to include in messages or attachments any unnecessary data, in particular data belonging to particular categories (e.g., data related to health). If a curriculum vitae contains them, they will only be processed if necessary and within the limits of the law.

3. Purposes and legal bases

  • Respond to requests for contact, quotes, information, and prompt delivery, and manage the negotiations that result from it: execution of pre-contractual measures adopted at the request of the interested party (Article 6.1.b GDPR).
  • Providing technical assistance on the means and equipment: execution of the contract (Art. 6.1.b GDPR).
  • Evaluating requests to become a reseller: pre-contractual measures (Art. 6.1.b GDPR).
  • Evaluating spontaneous applications: pre-contractual measures at the request of the interested party (Article 6.1.b GDPR) and Article 111-bis of Legislative Decree 196/2003.
  • Send the newsletter: consent of the interested party (article 6.1.a GDPR), revocable at any time with the link present in every email.
  • Website usage statistics and measurement of advertising campaigns (Google Analytics, Meta Pixel): consent expressed through the cookie banner (Art. 6.1.a GDPR).
  • Site security and prevention of abuse: legitimate interest of the Data Controller (art. 6.1.f GDPR).
  • Compliance with legal obligations (e.g. fiscal and accounting) and Protection of rights by the Data Controller in court proceedings: legal obligation (Article 6.1.c GDPR) and legitimate interest (Article 6.1.f GDPR).

The provision of the data requested by the forms is optional, but without the data marked as mandatory it is not possible to process the request.

4. Mode of treatment

The data are processed using electronic tools, by authorized personnel, and with technical and organizational measures adequate to protect them from unauthorized access, loss, or destruction. No decisions are made based solely on automated processing that produces legal effects on the data subject.

5. To whom we disclose the data

The data may be processed, on behalf of the Data Controller and as data controllers, by suppliers who help us manage the site and requests:

  • Aruba S.p.A. – hosting of the website;
  • Zapier Inc. – automation platform that receives the data sent with the forms and forwards them to our systems;
  • the provider of the corporate email service, to which the notification of requests arrives;
  • the CRM software provider with which we manage contacts and negotiations;
  • Google Ireland Ltd / Google LLC – Google services for spreadsheets and document storage (e.g. Google Sheets and Google Drive), Google Analytics and Google Maps;
  • Meta Platforms Ireland Ltd – Meta Pixel, only with consent to marketing cookies. For the collection and transmission of data through the Pixel, Eco Service S.p.A. and Meta act as co-controllers of the processing (Article 26 GDPR); subsequent processing is carried out by Meta as the sole controller, in accordance with its own privacy policy.

The data may also be communicated to consultants and professionals (e.g., accountants, lawyers), to retailers and authorized partners when necessary to follow up on a request, and to authorities when required by law. The data are not disseminated.

6. Transfer of data outside the European Union

Some providers (e.g. Zapier, Google, Meta) may process data in the United States or in other countries outside the European Economic Area. In these cases, the transfer takes place based on the guarantees provided by Articles 45 and 46 GDPR: the European Commission adequacy decision (EU-US Data Privacy Framework) for the participating providers, or Standard Contractual Clauses approved by the Commission.

7. How long we keep the data

  • Contact requests, quotes, information, prompt delivery and assistance: 24 months from the last contact. If the request leads to a contract, the necessary data are kept for the duration of the relationship and, after its conclusion, for 10 years for fiscal and civil law obligations.
  • Requests to become a reseller: 24 months from the last contact, unless a commercial relationship is established.
  • Spontaneous applications: 12 months from receipt.
  • Newsletter: until unsubscribed.
  • Navigation data and cookies: for the periods indicated in Cookie Policy.

Upon expiration, the data is deleted or rendered anonymous, unless retention is necessary for legal obligations or to protect the rights of the Data Controller.

8. Your rights

At any time you can ask the Data Controller for access to your data, rectification, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest (Articles 15-22 GDPR). If the processing is based on consent, you can revoke it at any time without affecting the legality of the processing carried out before the revocation; for cookies you can do so from Cookie Policy.

To exercise your rights, write to info@ecoservicespa.com or by e-mail ecoservicespa@pec.it.

You also have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) or to the supervisory authority of the EU country where you reside or work.

9. Minors

The site is aimed at businesses and organizations and is not intended for persons under 18 years of age. We do not knowingly collect data from minors.

10. Changes

This information may be updated. The current version is always the one published on this page, with the date of the last update indicated at the top.