Privacy Policy

Notice provided pursuant to art. 13 of EU Regulation 679/2016 (GDPR) and the UK GDPR, addressed to any visitor of the website steel-glass.it.
Last updated: 2026-09-19

1. Data Controller

The Data Controller of personal data is Steelglass S.R.L., VAT no. 03678150925, with registered office and main production plant at Villacidro (SU), Zona Industriale Strada C2, 2 – 09039, Sardinia, Italy, and a second production plant and logistics hub at Cesano Maderno (MB), Lombardia, Italy.

For any communication concerning data protection, please write to:info@steel-glass.it or use the phone numbers listed on theContact page.

2. Categories of data collected and how

The website only collects personal data voluntarily provided by the user, or automatically generated during browsing, in the following forms:

• Data provided voluntarily: first name, last name, email, phone number, town/city, type of work requested and any other information entered in the quote request form or in contact messages.
• Browsing data: IP address (anonymised or pseudonymised where possible), browser type, operating system, referral page, access time. Data required solely for the technical operation and security of the website.
• Cookies: see the dedicated Cookie Policy.

3. Purposes and legal basis of processing

Data is processed in accordance with the principles of lawfulness, fairness, transparency, purpose limitation and data minimisation, for the following purposes:

1. Performance of a contract or pre-contractual measures (art. 6.1.b GDPR / UK GDPR):handling of quote requests, design, production, installation and after-sales assistance relating to glass balustrades, AISI 304/316 stainless steel railings, staircases and custom metalwork.
2. Compliance with a legal obligation (art. 6.1.c GDPR / UK GDPR): retention and disclosure of data for tax, accounting, administrative and sector-specific regulatory obligations, or requests by competent public authorities.
3. Legitimate interests of the controller (art. 6.1.f GDPR / UK GDPR): administrative or informative communications relating to services already requested; customer satisfaction surveys; aggregated anonymous website traffic statistics; security and fraud-prevention measures.
4. Marketing and profiling purposes (art. 6.1.a GDPR / UK GDPR, subject to explicit consent):sending advertising materials, newsletters, commercial offers and personalised ads on Meta platforms (Facebook, Instagram) via Meta Pixel and Conversions API, or Google (Google Signals, Google Ads), only after consent has been given via the cookie banner or contact form.

4. How processing is carried out

Processing is performed using IT, telematic and manual tools, adopting appropriate technical and organisational measures to minimise risks of destruction, loss, unauthorised access, disclosure or unauthorised modification, in compliance with the technical security annex under art. 32 GDPR and Steelglass's internal security policy.

5. Data retention

• Contractual / pre-contractual data: retained for the ordinary duration of the commercial relationship and, thereafter, for the ordinary 10-year limitation period or any longer periods required by tax and regulatory obligations.
• Marketing data: retained for a maximum of 24 months from the last contact or withdrawal of consent, unless consent is renewed.
• Browsing and log data: retained for a maximum of 12 months, unless needed to establish liability in the event of cybercrime.
• Cookies: see the Cookie Policy.

6. Recipients of data

Data may be disclosed, exclusively for the purposes listed above, to:

• Steelglass employees and collaborators duly authorised or appointed as Data Processors;
• third parties performing ancillary and instrumental services: legal, tax and technical consultants, data-processing companies, email, hosting and security providers, couriers, partner installers, customer-research firms, finance partners for deferred-payment services;
• public authorities or supervisory bodies, in the cases and for the periods prescribed by law.

Personal data is not disclosed to the general public, nor is it transferred outside the European Union and the United Kingdom without appropriate safeguards. Any transfer to third countries — in particular the United States for cloud services or advertising platforms — will take place exclusively on the basis of adequacy decisions by the European Commission and UK adequacy regulations (EU-US Data Privacy Framework / UK Extension to the EU-US DPF) or standard contractual clauses approved by the European Commission and the UK ICO.

7. Cookies and advertising tracking

The website uses essential technical cookies (always active) and advertising-profiling cookies (activated only with the user's explicit consent). The cookie banner allows a free and informed choice (Accept / Reject / Customise).

Tools that may be activated after consent include:

• Meta Pixel and Meta Conversions API: conversion-measurement tools for Facebook and Instagram ads, managed by Meta Platforms Ireland Limited, Dublin, Ireland. Data is processed solely for the purposes of campaign measurement, delivery optimisation, remarketing and creation of lookalike audiences, in aggregated and pseudonymised form.
• Google Signals and Google Analytics: tools for anonymous traffic analysis and advertising features on Google networks, using aggregated non-identifying data on age, gender, interests, device and geographic location.

For full details, the named list of cookies, duration, suppliers and purposes, see theCookie Policy page.

8. Data subject rights

The user has the right to exercise the following rights at any time, free of charge and through simple procedures:

• Right of access (art. 15 GDPR / UK GDPR): to ascertain whether data relating to them is being processed and to obtain a legible copy.
• Right to rectification (art. 16 GDPR / UK GDPR): correction or supplementation of inaccurate or incomplete data.
• Right to erasure / right to be forgotten (art. 17 GDPR / UK GDPR): erasure of data in the cases provided for by law (unnecessary processing, withdrawal of consent, unlawful processing).
• Right to restriction (art. 18 GDPR / UK GDPR): suspension of processing pending checks on accuracy or lawfulness.
• Right to data portability (art. 20 GDPR / UK GDPR): to receive data provided for contractual or consent-based purposes in a structured, commonly used and machine-readable format.
• Right to object (art. 21 GDPR / UK GDPR): to object, in whole or in part, to processing for direct-marketing purposes or on grounds of legitimate interests, unless there are overriding legitimate grounds.
• Right to withdraw consent: withdrawal at any time of consent to processing for marketing or profiling purposes, without affecting the lawfulness of processing carried out before withdrawal.

There is also the right to lodge a complaint with a supervisory authority — in particular the Italian Data Protection Authority (garanteprivacy.it) or, for UK data subjects, the UK Information Commissioner's Office (ico.org.uk) — if you believe that processing violates the GDPR or UK GDPR.

9. How to exercise your rights

All requests relating to this notice or the exercise of rights may be sent to:

Steelglass S.R.L. – VAT 03678150925
Villacidro plant: Zona Industriale Strada C2, 2 – 09039 Villacidro (SU), Italy
Cesano Maderno plant: Cesano Maderno (MB) – Lombardia, Italy
Email: info@steel-glass.it
Phone: +39 070 4516135

10. Further references

• Cookie Policy — detailed list of cookies, duration, supplier, purpose, instructions for managing consent and browser-based disabling.
• Contact — direct forms and contact details for all offices.

Document compliant with Regulation (EU) 2016/679 (GDPR), the UK GDPR, Legislative Decree 196/2003 (Italy) and Italian DPA measure no. 229 of 8/5/2014 on cookies.