Privacy Policy

01Data Controller

The data controller for the personal data processed through this website is [LEGAL COMPANY NAME], with registered office at [REGISTERED ADDRESS], Italy, VAT number [VAT NUMBER] (the “Controller”, “Petralis”, “we”, “us”).

For all matters relating to the processing of your personal data you can contact us at [PRIVACY EMAIL] or [PHONE NUMBER]. Where a Data Protection Officer or EU representative is appointed, their details are: [DPO / EU REPRESENTATIVE DETAILS — IF APPOINTED].

02Scope of This Policy

This Privacy Policy describes how Petralis collects, uses, stores and protects personal data when you visit this website (the “Website”), submit an enquiry or project request, or contact us by email, telephone or messaging applications such as WhatsApp.

The Controller operates from Italy and serves clients internationally, including in Europe and the Middle East. This Policy is provided in accordance with Regulation (EU) 2016/679 (“GDPR”) and, where applicable, Italian data protection legislation.

03Types of Personal Data We Collect

• Identity and contact data — such as your name, email address, telephone number, company or studio name and professional role.
• Project data — such as the project type and location, budget range, timeline, furniture categories of interest, and any description, files or images you choose to share.
• Technical browsing data — such as IP address, browser type, device type and pages visited, collected automatically as described below.

04How We Collect Personal Data

You provide personal data directly when you complete forms on the Website, send us an email, message us via WhatsApp or social media, upload a file, or otherwise communicate with us.

We also collect technical browsing data automatically when you access the Website, through server logs and similar technical means necessary to deliver and secure the site.

05Purposes of Processing

• Responding to enquiries, project requests and requests for information, including preparing tailored quotations and proposals.
• Managing pre-contractual and contractual relationships, including production, delivery and after-sales assistance for commissioned projects.
• Communicating with you about your project or enquiry, including by email, telephone or messaging applications.
• Operating, maintaining and securing the Website, and improving its content and performance.
• Complying with legal obligations to which we are subject.

06Legal Bases for Processing

• Performance of a contract, or steps prior to entering into a contract (Art. 6(1)(b) GDPR) — for processing connected to your enquiries and commissioned projects.
• Legitimate interests (Art. 6(1)(f) GDPR) — for responding to initial enquiries, operating and securing the Website and improving our services, where these interests are not overridden by your rights and freedoms.
• Consent (Art. 6(1)(a) GDPR) — for optional uses such as marketing communications or non-essential cookies. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c) GDPR) — where processing is required by applicable law.

07Website Browsing Data

When you visit the Website, our hosting infrastructure processes standard technical data — such as your IP address, browser and device information — to deliver the pages you request and to protect the Website from abuse. This data is not used to profile you or to send you advertising, and it is retained only for the technical period necessary for the purposes described above.

08Contact Forms and Project Requests

The Website provides a project request form through which you can describe your project and share your contact details. The data you submit is used exclusively to review and respond to your request. Submitting the form is voluntary, but without the requested contact data we may be unable to respond.

09Email and Direct Enquiries

If you contact us directly by email, telephone or messaging applications such as WhatsApp, we will process the personal data contained in your message in order to respond to you and follow up on your request. Messages are retained for the period necessary to handle the enquiry and any resulting relationship.

10Newsletter and Marketing Communications

The Website does not currently operate a newsletter or send direct marketing communications. Should such communications be introduced in the future, they will only be sent to users who have given their explicit consent, and every message will include a clear way to withdraw consent at any time.

11Customer and Business Inquiries

Personal data received through any enquiry channel may be retained and used to develop the commercial relationship with you or your company — for example preparing proposals, samples and documentation consistent with the request you made.

12Data Retention

Enquiry and contact data is retained for no longer than necessary for the purposes for which it was collected — typically up to [RETENTION PERIOD FOR ENQUIRIES — E.G. 24 MONTHS] from the last contact, unless a project or contractual relationship follows.

Data connected to a contractual relationship is retained for the duration of the relationship and afterwards for the period required by applicable civil, tax and accounting obligations.

Technical browsing data is retained for the short technical period necessary to deliver and secure the Website.

13Data Sharing and Categories of Recipients

Your personal data may be shared, where relevant to the purposes described above, with: our authorised internal personnel; production partners and suppliers involved in fulfilling your requests; IT and hosting providers — including the platform on which this Website operates; professional advisers; and public authorities where required by law.

We do not sell your personal data, and we do not share it for third-party advertising purposes.

14Third-Party Service Providers

The Website relies on a limited number of providers acting as processors or independent controllers, including the platform that hosts and delivers the Website — which processes technical data such as IP address and browser information — and the service used to deliver transactional email. Each provider processes data only for the purposes for which it was engaged. A complete list of providers and their roles is available on request at [PRIVACY EMAIL].

15International Data Transfers

As our clients and providers are located internationally, personal data may be transferred outside the European Economic Area — for example to providers hosting the Website, delivering email, or supplying components of it, such as externally delivered fonts.

Any such transfer takes place only where an adequate level of protection is ensured — for example adequacy decisions by the European Commission or Standard Contractual Clauses — together with any additional safeguards required. Details of the specific safeguards applied are available on request at [PRIVACY EMAIL].

16Your Rights Under GDPR

Where applicable, you have the right to: access your personal data; obtain its rectification or erasure; restrict its processing; object to processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time where processing is based on consent.

17How to Exercise Your Rights

To exercise your rights, contact us at [PRIVACY EMAIL] or [PHONE NUMBER]. We will respond within one month of receiving your request. Where necessary, we may ask you for additional information to confirm your identity, and we will inform you of any extension of the response period, explaining the reasons.

18Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. For Italy this is the Garante per la protezione dei dati personali; if you reside elsewhere in the European Union, you may contact the supervisory authority of your Member State of habitual residence or place of work.

19Security Measures

We adopt appropriate technical and organisational measures to protect personal data, including encrypted data transmission, access restricted to authorised personnel and providers, and monitoring of the Website infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

20Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology or our services. The date of the last update is shown at the top of this page, and significant changes will be highlighted on the Website.

21Contact Information

For any question about this Privacy Policy or our processing of personal data, contact: [LEGAL COMPANY NAME], [REGISTERED ADDRESS] — [PRIVACY EMAIL] — [PHONE NUMBER].