In compliance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), we hereby provide you with the necessary information regarding the processing of the personal data you have provided. This privacy notice is issued pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation).

TYPES OF DATA PROCESSED / PROCESSABLE

Data processed/processable: "personal data."

For the purposes of Article 4 of GDPR 2016/679, "personal data" means "any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Recitals 26, 27, 30)."

User data.

Browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects; however, by its very nature, it could, through processing and association with data held by third parties, make it possible to identify users. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's response (successful, error, etc.), and other parameters relating to the user's operating system and IT environment.

Data voluntarily provided

The optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the completion of data collection forms results in the subsequent acquisition of the data necessary to respond to requests.

COOKIES

For information regarding cookies and similar technologies, please refer to the Cookie Policy available in the website footer. For non-technical cookies and similar technologies, the legal basis for processing is the data subject's consent pursuant to Article 6(1)(a) of the GDPR.

DATA CONTROLLER. Pursuant to Article 4 of Regulation (EU) 2016/679, the Data Controller is IGUZZINI ILLUMINAZIONE S.p.A., with registered office at Via Mariano Guzzini No. 37, 62019 RECANATI (MC), Italy, Tel. +39 071-75881, privacy@iguzzini.com, represented by its legal representative pro tempore.

DATA PROTECTION OFFICER. No Data Protection Officer (DPO) has been appointed, as the processing activities carried out by the Company do not fall within the mandatory cases provided for under Article 37 of the GDPR.

PURPOSES OF THE PROCESSING

A) Browsing this website

LEGAL BASIS. Pursuant to Article 6(1)(f) of GDPR 2016/679, the legal basis for processing is the legitimate interest of the Data Controller, namely: "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child."

In this specific case, the legitimate interest consists of the activities strictly necessary for the proper functioning of the website and the provision of the browsing service through the platform.

RETENTION PERIOD. For the duration of the browsing session (without prejudice to any need for the Judicial Authority to ascertain criminal offences).

NATURE OF THE PROVISION OF DATA. The provision of data is necessary in order to browse the website.

B) Subscription to the mailing list

Following completion of the relevant form, the Company—subject to the data subject's explicit consent and until such consent is withdrawn—will collect contact details in order to send commercial information, promotional communications, newsletters and market research for marketing purposes. Such activities may be carried out through automated means (e-mail and SMS).

Please note that the Form is not intended for visitors under the age of 14 or for individuals who have not reached the age of majority in their jurisdiction of residence. If you do not meet these age requirements, please do not provide your personal data through the Form.

LEGAL BASIS. Pursuant to Article 6(1)(a) of GDPR 2016/679, the legal basis is the data subject's consent, namely: "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."

RETENTION PERIOD. Personal data will be retained until consent is withdrawn (opt-out).

NATURE OF THE PROVISION OF DATA. Providing personal data for this purpose is optional. If consent is not provided, the data supplied will not be used for the above-mentioned activities. Refusal to provide consent does not affect the other purposes described in this Privacy Notice. Any subsequent withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal (Article 7(3) GDPR).

C) Company visit booking

Following completion of the relevant form, the Company will process the personal data provided in order to organize the visit to its premises.

Please note that the Form is not intended for visitors under the age of 14 or for individuals who have not reached the age of majority in their jurisdiction of residence. If you do not meet these age requirements, please do not provide your personal data through the Form.

LEGAL BASIS. Pursuant to Article 6(1)(b) of the GDPR, processing is necessary in order to take pre-contractual steps at the request of the data subject.

RETENTION PERIOD. Personal data will be retained for the time necessary to participate in the event, after which they will be deleted.

NATURE OF THE PROVISION OF DATA. The provision of personal data is optional; however, failure to provide, or incomplete provision of, the data indicated as mandatory will make it impossible to book the visit.

D) Product information request

Following completion of the relevant form, the Company will respond to the requests received.

Please note that the Form is not intended for visitors under the age of 14 or for individuals who have not reached the age of majority in their jurisdiction of residence. If you do not meet these age requirements, please do not provide your personal data through the Form.

LEGAL BASIS. Pursuant to Article 6(1)(b) of the GDPR, processing is necessary in order to take pre-contractual steps at the request of the data subject.

RETENTION PERIOD. Personal data will be retained for the time necessary to send the requested publication, after which they will be deleted.

NATURE OF THE PROVISION OF DATA. The provision of personal data is optional; however, failure to provide, or incomplete provision of, the data indicated as mandatory will make it impossible to send the requested publication.

E) Sending targeted marketing communications based on segmentation (profiling) carried out according to the data subject's profession and country of residence

Please note that the Form is not intended for visitors under the age of 14 or for individuals who have not reached the age of majority in their jurisdiction of residence. If you do not meet these age requirements, please do not provide your personal data through the Form.

LEGAL BASIS. Pursuant to Article 6(1)(a) of GDPR 2016/679, the legal basis is the data subject's consent, namely: "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."

RETENTION PERIOD. Personal data will be processed until consent is withdrawn and, in any event, will be deleted after 12 months of inactivity by the data subject.

NATURE OF THE PROVISION OF DATA. The provision of personal data is optional; however, failure to provide the data or to give consent will make it impossible to receive personalized marketing communications.

F) Supplier contact form

Following completion of the supplier contact form available on the website, the Company will process the personal data provided by the data subject in order to contact you and assess potential business collaboration opportunities.

Please note that completion of the Form is prohibited for users under the age of 14 (or who are considered minors under the laws of their country of residence). If you do not meet the required age requirements, you must not provide your personal data through the Form.

LEGAL BASIS. Pursuant to Article 6(1)(b) of the GDPR, processing is necessary in order to take pre-contractual steps at the request of the data subject.

RETENTION PERIOD. Personal data will be retained until the request has been fulfilled and, in any event, for no longer than one year.

NATURE OF THE PROVISION OF DATA. The provision of personal data is optional; however, failure to provide, or incomplete provision of, the data indicated as mandatory will prevent the Company from processing the request.

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

The personal data provided may be disclosed to recipients who will process the data either as Data Processors (Article 28 of Regulation (EU) 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of Regulation (EU) 2016/679), or who operate independently as separate Data Controllers, for the purposes set out above.

TRANSFER OF DATA TO A THIRD COUNTRY

Personal data will not be transferred outside the European Union.

RIGHTS OF DATA SUBJECTS

You may exercise your rights as provided for by Articles 15 et seq. of Regulation (EU) 2016/679 by contacting the Data Controller. You have the right, at any time, to request access to your personal data, their rectification or erasure. You also have the right to data portability. Furthermore, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your personal data infringes Regulation (EU) 2016/679, pursuant to Article 15(f) of the aforementioned Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (Supervisory Authority – www.garanteprivacy.it).

CHANGES TO THIS PRIVACY NOTICE

The Data Controller reserves the right, at its sole discretion, to change, amend, add to or remove any part of this Privacy Notice at any time. In order to facilitate verification of any changes, this Privacy Notice will indicate the date on which it was last updated.

Last updated: 26/06/2026

Data Controller

IGUZZINI ILLUMINAZIONE S.p.A.