Information on the processing of personal data on the site: ai pursuant to art. 13 of the European Regulation n. 2016/679 – GDPR

Cielo S.R.L., as Data Controller (hence also the "Owner"), issues this Privacy Policy in relation to the treatments carried out on this website.

The information is to be considered valid only for this website ( and not for other websites that may be consulted by the user via links to which this site refers. The Owner is not to be considered in any way responsible for third-party websites. When you consult a third-party website, please read the related information.


Holder of the treatment Cielo S.R.L., VAT number: 02991690351 with headquarters in Via Terenziano Poletti 43/, 42025 Cavriago (RE) – Italy. You can contact the Data Controller at the email address


We only process your personal data if there is one of the legitimacy grounds set out in the GDPR. In the table below you will find information on the purposes, legal bases and terms of data retention:

Purpose of the TreatmentData typeLegal basisData Retention
Browsing the website – ensure proper functioning and IT securityNavigation dataLegitimate interest of the owner to promote his business through the web channel and to protect users and the site from cyber attacksWe will keep navigation data for the time strictly necessary to achieve the purposes for which they were collected, and subsequently automatically deleted; as far as cookies are concerned, the storage time is indicated in the appropriate lists, where present
Follow up on requests for information/contact and manage communications with the interested party.Identification data Contact and contact detailsExecution of a contract or satisfaction of pre-contractual needs of which the interested party is a part.The data will be processed for the time strictly necessary to respond to your request for information/contact and to manage communications. Subsequently they will be eliminated or used to achieve other purposes indicated in this statement.
Use of e-commerce featuresNavigation dataExecution of a contract or satisfaction of pre-contractual needs of which the interested party is a part.We will keep navigation data for the time strictly necessary to achieve the purposes for which they were collected, and subsequently automatically deleted; as far as cookies are concerned, the storage time is indicated in the appropriate lists, where present
User registration in the reserved area of ​​the websiteIdentification data Contact and contact details Other data requested during registrationExecution of a contract or satisfaction of pre-contractual needs of which the interested party is a part.We will keep the data relating to your registration on the Site until your account is cancelled.
Taking charge and delivery of the purchase order, provision of the agreed service and/or fulfillment of the obligations deriving from the law or from the contract stipulated with the interested party.Identification data Contact and delivery data Data relating to payment instruments Other personal data necessary for the correct execution of the serviceExecution of a contract or satisfaction of pre-contractual needs of which the interested party is a part. Legitimate interest of the owner to manage communication with the interested parties and satisfy the requests forwarded and manage any dispute. Legal obligations or obligations deriving from regulatory provisions.Unless otherwise required by law, your data will be processed for the entire duration of the contract and subsequently kept for the ordinary limitation period established by law. This period is 10 years.


Navigation data: The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes:

  • the IP addresses or domain names of the computers used by users who connect to the site;
  • the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources;
  •  the time of the request;
  • the method used in submitting the request to the server;
  • the size of the file obtained in response;
  • the numerical code indicating the status of the response given by the server (successful, error, etc.),
  • other parameters relating to the operating system and the user's IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

The site could also process data automatically by sending cookies to the user. Cookies are small strings of text sent during consultation of the website and, based on their purpose and assumed value, they allow the site and/or third parties to collect data relating to the user. The use of this electronic tool is analytically described through the website's Cookie Policy.

Data communicated by the user: The optional, explicit and voluntary sending of data to this site involves the subsequent acquisition of the contact details of the sender concerned, necessary to respond to requests, as well as any other personal data sent spontaneously by the latter.

The methods used by the website suitable for the collection of personal data and not from third party users are described below.

Contact form: Through the contact form on the website, the user is asked for personal identification data and contact details, as well as other information relating to the specific request of the user concerned. The data is entered and sent spontaneously by the user who wishes to be contacted by the site owner to submit specific requests to the latter. The data collected will be used exclusively to respond to requests forwarded and will be processed further only if a relationship is established between the user and the Owner.
Registration in the reserved area: The personal information entered in the registration form in the reserved area is necessary for the creation of the personal profile to access it. The data is entered and sent spontaneously by the user who wishes to access this area. All data sent and collected through the reserved area will be used to respond to specific requests from the registered user (e.g. for the recovery of access credentials, information on the owner's activity, management of the commercial relationship, etc.), as well as to facilitate subsequent commercial relations with the interested party. Registration is possibly necessary to use the functions relating to E-Commerce on the site.
E-Commerce Portal: An area dedicated to electronic commerce is available on the site, in which the user can view and possibly purchase products and services provided by the Data Controller. The data will be processed by the Data Controller to respond to specific user requests and to conclude commercial transactions with them. The Data Controller adopts all the security measures necessary to protect the user's data communicated at the time of the transaction, in particular for those connected to the payment instruments used. Subsequently, the user's data will be further processed and stored according to the methods described for ordinary customers in the specific information, available from the Data Controller (exclusively as regards the processing of personal data).


The scope of data communication is limited exclusively to subjects qualified as independent data controllers such as police forces, public authorities, supervisory bodies and other public or private subjects who have the right to process your data.

Therefore, they may be communicated to third parties, previously identified and appointed, where necessary, data processors pursuant to art. 28 GDPR belonging to the following categories:

companies that provide services for the management of the information system and the website (E-commerce and payment platforms, website development consultants, etc.);
studies or companies that provide services in the context of assistance and consultancy relationships (in the IT, accounting/administrative fields, etc.);
companies that deal with the shipment and transport of goods;
bodies, administrations and public authorities, for the fulfillment of legal obligations connected to the commercial relationship, if there is evidence of crimes or IT attacks against our system or other users who visit the site or in the context of managing the dispute with the 'interested.

Further information on the subjects who will be able to access the requested personal data will be available at the time of collection or by contacting the Data Controller via the contact details contained in the document.


The provision of data is mandatory if it is necessary to access and view the website correctly, to manage requests and communications, to provide the service and to fulfill and conclude the contract with the interested party. Failure to provide such data will make it impossible to view the website, manage requests or communication, conclude the contract or perform the agreed service.

In the remaining cases, the provision of data is optional and voluntary on the part of the interested party and, where indicated and necessary, subject to the explicit consent of the user.


We inform you of the existence of your right to ask us for access to your personal data, rectification, cancellation of the same, limitation of the processing of data concerning you, opposition to their treatment, data portability where applicable, analytically described and subject to the limitations set forth in articles from 15 to 22 of the RGPD and to the articles 2-undecies and 2-duodecies of Legislative Decree 196/03 integrated with the changes made to the Legislative Decree 101/18 of harmonization to the RGPD.

You can exercise your rights and know the third parties to whom the data may be communicated by writing to the e-mail address:

If part of the treatment has a legal basis on the consent given by you, the right to revoke it at any time is recognized without prejudice to the lawfulness of the treatment based on the manifestation of the same previously given.

ou have the right to lodge a complaint with the supervisory authority at the Guarantor for the protection of personal data, by sending a certified e-mail message addressed to, through the other contact tools made available by the Guarantor for this purpose or with the competent supervisory authority of another EU country.


The Owner reserves the right to modify, update, add or remove parts of this information. Please check periodically for any changes. In order to facilitate this verification, the information contains an indication of the update date.

Use of the site following the posting of changes will constitute acceptance of the same.

Update date: 03/05/2023