Privacy policy

Information provided under Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Personal Data Protection Code”), as amended by Legislative Decree 101/2018, to visitors of www.elettrowp.com and to anyone who writes to us through the contact form.

1. Data controller

The data controller is ElettroWel Partners S.r.l., registered office at Via Maurizio Gonzaga 7, 20123 Milano (MI), VAT no. 14186990967.

For any matter concerning your data you can write to us by post at the registered office or through the contact form on this website.

2. What data we process

Browsing data

The systems that run the website automatically record some data whose transmission is implicit in the use of the Internet: IP address, date and time of the request, page requested, outcome of the request, browser and operating system, referring page. These data are not collected to identify visitors, but could allow it when combined with other data, for example at the request of the judicial authorities in the event of cybercrime.

Data provided through the contact form

If you write to us through the form we process the data you enter: name, company, email address, phone number (optional), service of interest and the content of your message, together with the date and time of submission and the website language used. Please do not include special categories of data (for example health data) or data about other people in your message, as they are not needed to answer you.

3. Purposes, legal basis and retention

Answering your request

Answering questions and requests for information or quotations, and handling any pre-contractual contacts that follow.

• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). For requests not related to a possible contract, our legitimate interest in answering those who contact us (Art. 6(1)(f)).
• Retention: as long as needed to handle the request and in any case no longer than 24 months from the last contact. If a contract follows, the data are processed under the contractual privacy notice and kept for 10 years to meet civil and tax obligations (Art. 2220 of the Italian Civil Code).

Operation and security of the website

Making sure the website works properly and preventing abuse and cyber attacks.

• Legal basis: the controller’s legitimate interest in the security and operation of the website (Art. 6(1)(f) GDPR).
• Retention: browsing data are kept by the hosting provider only as long as strictly needed for these purposes, normally no longer than 12 months, unless requested by the judicial authorities.

Protecting the controller’s rights

Establishing, exercising or defending legal claims, in or out of court.

• Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
• Retention: for the duration of the dispute and until the time limits for appeal have expired.

We do not use your data to send newsletters or marketing communications, we do not sell or pass them on to third parties, and we do not use them for profiling. We do not take decisions based solely on automated processing (Art. 22 GDPR).

4. Whether providing data is required

Browsing data are necessary to use the website. In the contact form, the required fields (name, company, email, service of interest and message) are needed to answer you: without them we cannot follow up on your request. The phone number is optional.

5. How data are processed

Data are processed electronically, with technical and organisational measures appropriate to ensure their security and confidentiality (Art. 32 GDPR), and only by persons authorised and instructed by the controller (Art. 29 GDPR and Art. 2-quaterdecies of the Italian Code).

6. Who may receive the data

Data are not made public. They may be accessed by:

• the controller’s staff authorised to process them;
• providers processing data on the controller’s behalf, appointed as data processors (Art. 28 GDPR): Aruba S.p.A. (Italy), for hosting the website and its logs, and Microsoft Ireland Operations Ltd (Ireland), provider of the Microsoft 365 email service where we receive messages from the contact form;
• the controller’s advisers (for example legal or tax advisers), where necessary and bound by confidentiality;
• public authorities, where required by law or at their request.

The up-to-date list of data processors is available from the controller on request.

7. Transfers outside the European Union

The website is hosted on servers in Italy. Messages received through the form are stored in Microsoft 365, which processes European customers’ data within the European Union. Any transfers to Microsoft Corporation or its sub-processors in the United States take place on the basis of the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795) and, as a fallback, of the standard contractual clauses approved by the Commission (Art. 46 GDPR).

8. Cookies and tracking tools

This website does not use cookies, either technical or profiling, and does not use other tracking tools such as pixels, analytics or browser local storage. It also does not load content from third-party servers: even the fonts are hosted on our own server. Therefore, in line with the Italian Data Protection Authority’s cookie guidelines of 10 June 2021, no consent is required.

The website contains links to external websites (for example our team’s LinkedIn profiles and the Rugged Monitoring website). Following these links takes you off our website: data processing on those websites is governed by their own privacy notices.

9. Your rights

At any time you can exercise the rights set out in Articles 15–22 GDPR against the controller:

• access to your data and to information about the processing (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure of your data, where applicable (Art. 17);
• restriction of processing (Art. 18);
• portability of data processed for pre-contractual steps or a contract (Art. 20);
• objection to processing based on the controller’s legitimate interest, on grounds relating to your particular situation (Art. 21).

You can exercise your rights by writing by post to the registered office given in section 1 or through the contact form. We reply without undue delay and in any case within one month of the request, which may be extended by two months for complex requests (Art. 12 GDPR).

If you believe the processing infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it (Art. 77 GDPR), or with the supervisory authority of your country of residence or work, or to bring proceedings before a court (Art. 79 GDPR).

10. Minors

The website and the services described are aimed at businesses and professionals. We do not knowingly collect data from children under 14.

11. Changes to this privacy policy

This privacy policy may be updated, for example following changes in the law or in the services offered through the website. The version in force is always the one published on this page, with the date of the last update.

Last updated: 9 October 2026.