Privacy Policy

Steel Models S.r.l. Document updated in compliance with GDPR – EU Regulation 2016/679

1. Data Controller

Steel Models S.r.l.
Registered office: Vicolo Gela 2, 35020 Albignasego (PD) – Italy
VAT ID: 04204840286
Data protection contact email: info@steelmodels.com

Steel Models S.r.l. determines the purposes and means of processing personal data collected through the website and related services.

2. Technology Infrastructure and Hosting

The website and Ready Pro management database are hosted on the infrastructure of Aruba Business (Aruba S.p.A.).

• Data location: servers are located within the European Union (Italy).
• Security: Aruba adopts advanced technical and organizational measures to prevent unauthorized access, data loss, cyber attacks and service interruptions.
• Backup and redundancy: data is protected through backup and business continuity systems.

3. Types of Data Collected

Steel Models S.r.l. processes different categories of data:

Data provided voluntarily by the user

• Identification and contact data: name, surname, address, phone, email.
• Billing data (including SDI/PEC and VAT data for B2B customers).
• Shipping data required for order delivery.

Browsing data

• IP address
• Device information
• Technical data collected through cookies and similar tools

Marketing data

• Purchase preferences
• Browsing behavior
• Newsletter and Google Ads interaction data (only with consent)

4. Purposes and Legal Bases of Processing

Purpose	Legal basis
Order, payment and shipping management	Contract performance
Invoicing and tax obligations	Legal obligation
Customer account management	Contract performance
Newsletters and marketing communications	User consent
Statistics and website improvement	Legitimate interest
Fraud prevention and IT security	Legitimate interest

Providing data for contractual purposes is mandatory; failure to provide it makes order processing impossible. Providing data for marketing purposes is optional.

5. External Services and Data Transfers

The website integrates third-party services including:

• Google Fonts
• Google Ads / Analytics
• Social network links and plugins

Use of these services may involve transmission of the IP address to the providers.

Extra-EU transfers

Some Google services may involve transfers to the United States. Such transfers are based on Standard Contractual Clauses (SCC) approved by the European Commission.

6. Disclosure of Data to Third Parties

Personal data may be shared with:

Couriers

• GLS
• TNT
• FedEx
• Bartolini (BRT)

Payment providers

• PayPal
• Scalapay
• Banking circuits (card data is never accessible to Steel Models S.r.l.)

Technology partners

• Aruba Business (hosting)
• Ready Pro (ecommerce platform)

Google and YouTube services

Used for analytics, advertising and multimedia features.

All third parties are appointed as Data Processors under Article 28 GDPR.

7. Data Retention

• Billing data: 10 years (tax obligation).
• Order data: for the time required to fulfill the contract.
• Customer account data: until deletion request.
• Marketing data: until consent withdrawal.
• Technical logs and browsing data: according to cookie and security system retention periods.

8. Cookies and Tracking Tools

The website uses technical, analytics and profiling cookies. For details see the dedicated Cookie Policy.

9. Data Subject Rights

The user may exercise the following rights at any time:

• Access to personal data
• Correction of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interest
• Withdrawal of consent (marketing)
• Complaint to the Data Protection Authority

To exercise rights: info@steelmodels.com

10. Data Protection Officer

Steel Models S.r.l. is not required to appoint a DPO, unless otherwise indicated.

11. Policy Updates

This policy may be updated at any time. Changes will be published on the website.

12. Contacts

For any privacy request: info@steelmodels.com

---

Last update: 10/02/2026