Privacy Policy
This privacy notice is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 («GDPR») to anyone interacting with the website oreficegenerators.com or with the Controller's contact forms.
1. Data Controller
Orefice Powergen S.r.l. — VAT No. IT03987800921
Registered office: Ex S.S. 131 km 7.00, 09028 Sestu (CA), Italy
Operational and administrative office: Zona Industriale Su Fraigu, 09026 San Sperate (SU), Italy
Email: info@oreficegenerators.com — Certified email (PEC): oreficepowergen@pec.it
Phone: +39 070 2298142 · +39 070 229035 · +39 070 7331920
2. Data Protection Officer (DPO)
The Controller is not required to appoint a DPO under Art. 37 GDPR. For any request concerning data protection please write to info@oreficegenerators.com.
3. Types of data processed
- Contact data provided via the website forms: name, surname, company, email, phone, subject of the request and its content.
- Application data (Careers section): CV and professional information voluntarily submitted.
- Browsing data: IP address, user-agent, technical logs collected by the hosting infrastructure for security and diagnostics.
- Cookies: see the Cookie Policy.
4. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Replying to commercial requests, quotations, technical information, service | Pre-contractual measures (Art. 6.1.b) |
| Performance of supply, rental or service contracts | Contract performance (Art. 6.1.b) |
| Evaluation of spontaneous applications | Pre-contractual measures / consent (Art. 6.1.b and 6.1.a) |
| Tax, accounting and legal compliance | Legal obligation (Art. 6.1.c) |
| Website IT security and fraud prevention | Legitimate interest (Art. 6.1.f) |
| Third-party cookies (Google Maps) | Consent (Art. 6.1.a) |
5. Data recipients
Data may be disclosed to entities acting as Data Processors pursuant to Art. 28 GDPR, in particular:
- Hosting and cloud infrastructure providers
- Email and IT-security providers
- Google Ireland Limited (Google Maps service, only with prior consent)
- Accounting, tax and legal advisors
- Public authorities in case of legal obligations
Data are not disseminated and are not subject to automated decision-making or profiling.
6. Extra-EU data transfer
The use of Google Maps involves the transfer of browsing data to Google servers also located outside the European Economic Area (USA). Such transfer is governed by the Standard Contractual Clauses adopted by the European Commission.
7. Retention period
- Commercial and service requests: 24 months from the last useful contact.
- Contractual and accounting data: 10 years as required by law (Art. 2220 of the Italian Civil Code).
- Job applications: 24 months, unless otherwise requested by the data subject.
- Technical logs: up to 12 months unless investigation needs require otherwise.
8. Data subject rights
You may exercise at any time the rights set out in Articles 15-22 GDPR: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Please write to info@oreficegenerators.com specifying your request.
9. Complaint to the Supervisory Authority
If you believe that the processing infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority — Piazza Venezia 11, 00187 Rome — garanteprivacy.it.
10. Changes
The Controller reserves the right to update this notice to reflect regulatory or organisational changes. The current version is always published on this page.
Last updated: 2026.