Privacy Policy

This information is provided to customers, individuals and natural persons operating in the name and on behalf of legal entities, of the company XILOPAN spa VAT-Id IT00183170182 pursuant to art. 13 d. lgs. June 30, 2003 No. 196 – “Code regarding the protection of personal data” and Article. 13 GDPR 679/2016 – “European regulation on the protection of personal data”.

Identity of the Holder

The Data Controller of the clients, natural persons, or natural persons operating in the name and on behalf of legal entity clients, is the president, managing director and legal representative of the company XILOPAN spa VAT-Id IT00183170182 based in Loc San Giuseppe 1-3 – 27040 Cicognola (PV).

Data source

The personal data processed are those provided by the interested party on the occasion of:

  • visits or phone calls;
  • acquire pre-contractual data and information;
  • managing and controlling risks, preventing possible fraud, insolvency or default;
  • carry out the operations necessary for processing orders and other requests;
  • prevent and manage possible disputes, take legal action in case of need;
  • manage accounting and tax compliance;
  • initiate and manage compensation transactions and practices in the event of damage suffered by customers within the points of sale.
  • manage administrative, accounting, civil and fiscal obligations;
  • prepare and present declarations and documents of a civil, fiscal nature, provided for by laws, regulations, norms and EU and non-EU directives.
  • filling in the “contact request” form;
  • requests for information, including via email;
  • previous transactions.

Purpose of the processing

The personal data of customers, if provided, are processed by the Data Controller for:

  • Fulfillment of tax and accounting obligations
  • Consultancy activities
  • Accounting or treasury management
  • Litigation management
  • Customer management
  • Information by electronic means
  • Information to customers of new services / products
  • Sending of informative and / or advertising material also by telephone or internet
  • Marketing (market analysis and surveys)
  • Advertising
  • Financial services
  • Electronic payment tools

Data recipients

The personal data processed by the Data Controller will not be disclosed, or will not be disclosed to undetermined subjects, in any possible form, including that of making them available or simple consultation. Instead, they can be communicated to the workers who work under the Owner and to some external subjects who collaborate with them. They may also be communicated, within the strictly necessary limits, to subjects who, for the purpose of fulfilling orders or other requests or services relating to the transaction or the contractual relationship with the Data Controller, must provide goods and / or execute on behalf of the Owner services or services. Finally, they can be communicated to the subjects entitled to access it under the provisions of the law, regulations, community regulations.
In particular, based on the roles and duties performed, some workers have been entitled to process personal data, within the limits of their competences and in accordance with the instructions given to them by the Owner.

Data transfer

The data controller does not transfer personal data to third countries or international organizations.
However, it reserves the right to use cloud services; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Data retention

The Data Controller maintains and processes personal data for the time necessary to fulfill the indicated purposes. Subsequently, the personal data will be stored, and not further processed, for the time established by the current civil and fiscal provisions.

Rights of the interested party

With reference to art. 7 of Legislative Decree 196/2003 and Articles 15 – right of access, 16 – right of rectification, 17 – right to cancellation, 18 – right to limitation of treatment, 20 – right to portability, 21 – right of opposition, 22 right to object to the automated decision-making process of GDPR 679 / 16, the interested party exercises his rights by writing to the Data Controller at the address above, or by email, specifying the subject of his request, the right he intends to exercise and attaching a photocopy of an identity document certifying the legitimacy of the request.

Withdrawal of consent

With reference to art. 23 of Legislative Decree 196/2003 and art. 6 of GDPR 679/16, the interested party can revoke any consent given at any time.
However, the treatment that is the subject of this information is lawful and permitted, even in the absence of consent, as it is necessary for the execution of a contract to which the interested party (the service supply relationship) is part or to fulfill his requests

Proposition of a complaint

The interested party has the right to complain to the supervisory authority of the state of residence.

Refusal to provide data

Customers natural persons may not refuse to provide the Data Controller with the personal data necessary to comply with the laws governing commercial transactions and taxation.
The provision of further personal data may be necessary to improve the quality and efficiency of the transaction.
Therefore, refusal to provide the data required by law will prevent the execution of orders; while the provision of further data may compromise in whole or in part the fulfillment of other requests and the quality and efficiency of the transaction itself.
Persons operating in the name and on behalf of clients legal persons may refuse to provide their Owners with their personal data.
However, the provision of personal data is necessary for the correct and efficient management of the contractual relationship. Therefore, any refusal to grant data may compromise the contractual relationship in whole or in part.

Automated decision making processes

The Data Controller does not carry out processing consisting of automated decision-making processes on the data of customers, natural persons, or natural persons operating in the name and on behalf of legal entity clients.

Cookie policy


Cookies are small pieces of data that are stored and used to improve the experience of using a site.
For example, they can temporarily remember your browsing preferences to avoid selecting the language all the time, thus making subsequent visits more comfortable and intuitive.
Or they can be used to make “anonymous surveys” on how users navigate through the site, so that they can then improve on real data.

Cookies do not record any personal information about a user and any identifiable data will not be stored. If you wish to disable the use of cookies, you need to customize the settings on your computer by setting all cookies to be deleted or by activating a warning message when cookies are stored. To proceed without modifying the application of cookies, simply continue browsing.

Cookies are not viruses or programs
Cookies are only data saved in text form in the form “variable = value” (example: “dataAccessoSito = 2014-01-20,14: 23: 15”). These data can only be read by the site that generated them, and in many cases have an expiration date, beyond which the browser will automatically delete them.

Not all cookies are used for the same purpose: the different types of cookies used by this website will be specified below.

Essential technical cookies

These cookies are essential in order to allow you to move around the site and make full use of its features. Without these cookies some services will not work properly.

Performance cookies (technical cookies)

These cookies collect information on how users use a website, but do not store information that identifies a visitor. These cookies are used only to improve the functioning of the website.
By using the site, you agree that these cookies can be stored on your device.

Functionality cookies (technical cookies)

Cookies allow the site to remember the choices made by the user (such as language or other special settings that may be available) and provide customized advanced features, and can also be used to provide the services requested. By using the site, you agree that these cookies can be stored on your device.

Profiling cookies

Cookies can be used to keep track of user activities and preferences for statistical and / or advertising purposes. By using this site, you agree that these cookies can be saved in the browser.

How to manage cookies on your PC

Each browser allows you to customize the way cookies are treated. For more information, consult the documentation of the browser used. More information on how to manage and delete cookies from your browser is available on the website

Some browsers allow “anonymous browsing” on websites, accepting cookies and then automatically deleting them at the end of the browsing session. For more information about “anonymous browsing” consult the documentation of the browser used.

Google Analytics

This website may use Google Analytics (Google’s privacy policy is available here), a web analytics service provided by Google. Google Analytics uses cookies to allow the website to analyze how users use the site. The information generated by the cookie on the use of the website (including your anonymous IP address) will be transmitted and stored on Google’s servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for its operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where this is required by law or where such third parties process the information on Google’s behalf. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can prevent Google from detecting a cookie that is generated due to and related to your use of this website (including your IP address) and processing such data by downloading and installing this browser plugin.