Privacy Policy on the Processing of Personal Data. Effective from 15/06/2026
INTRODUCTION
This information takes into account the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and of the Privacy Code (Legislative Decree 30 June 2003 n. 196). The document has also been drafted in accordance with the Guidelines of the Privacy Guarantor (especially the Guidelines for combating spam issued by the Privacy Guarantor on 4 July 2013).
Data ControllerSol Montes GmbH, VAT IT03323610216, Chamber of Commerce of Bolzano, registered capital €12,000, fully paid up, info@solmontes.it
Site to which this privacy policy refers: www.solmontes.itSite).
The Data Controller has not appointed a DPO. Therefore, you may send any inquiries directly to the Data Controller.
GENERAL INFORMATION
This document explains how the Data Controller processes your personal data.
The following describes the main processing of your personal data. In particular, we explain the legal basis for processing, whether the provision of personal data is compulsory and the consequences of not providing personal data. To better describe your rights, where necessary, we have specified if and when a particular processing of personal data is not carried out.
Site registration
The information and data requested upon registration will be used to allow you to access the private area of the Site and to use the online services offered by the Data Controller to registered users. The legal basis for the processing is the Data Controller's need to carry out pre-contractual measures requested by the data subject. Providing the data is optional. However, if you refuse to provide the data, it will be impossible to register on the Site.
Purchases on the Site
Your personal data will be processed to enable you to make purchases on the Site. In the case of placing an online purchase order, this will allow the conclusion of the purchase contract and the proper execution of transactions related to it (and, if necessary by law, to fulfil tax obligations). This processing of personal data also includes the possibility of sending communications (e.g. tracking, order information and requests for reviews) via automated tools such as email and/or SMS and/or WhatsApp. The legal basis for the processing is the obligation of the Data Controller to execute the contract with the data subject or to comply with legal obligations. Apart from the above (and therefore your consent), the Data Controller may process your data for the purpose of so-called "soft-spam", governed by art. 130 of the Privacy Code. This means that limited to the email you provided in the context of a purchase through the Site, the Data Controller will process the email to permit direct offerings of similar products/services, unless you object to such processing in the manner provided by this policy. The legal basis for processing is the legitimate interest of the Data Controller to send this type of communication. This legitimate interest can be considered equivalent to the interest of the data subject in receiving "soft-spam" communications. The Data Controller does not process the user's data to send "reminder" emails to purchase products and/or services from the Data Controller. Access to the contents/services is subject to alternative age verification systems, implemented by the Controller provided they comply with Agcom requirements and the GDPR. Data minimisation is ensured and it remains impossible to directly identify the user. If the user does not consent to verification, it will not be possible to access the contents/services or process personal data for this purpose.
Responding to your requests
Your data will be processed in order to respond to your requests for information. Providing this data is optional, but if you refuse, the Data Controller will be unable to answer your questions. The legal basis for this processing is the legitimate interest of the Data Controller in fulfilling your requests. This legitimate interest is equivalent to your interest in receiving a response to communications sent to the Data Controller.
Marketing
The Data Controller will not send you advertising material and/or newsletters concerning its own products or those of third parties. We use Google services, such as Google Ads and Google Analytics, to personalise advertisements and improve user experience. This includes the collection of personal data and cookies, used to show you ads that match your preferences. Upon your consent, you will be asked to authorise the use of this data. More details on cookie usage and consent management can be found in this website's cookie policy.
Profiling
The Data Controller does not undertake "profiling" with your personal data. Therefore, it will not send you advertising material and/or newsletters relating to its own products or to third parties of specific interest to you.
Data transfer
The Data Controller does not transfer your personal data to third parties.
Geolocalisation
The site does not implement tools for geolocating the user's IP address.
Curriculum Vitae
It is not possible to send CVs via the website. Your data will therefore not be processed for these purposes.
Booking Service
There are no third-party appointment booking systems active on the Site. Therefore, your data will not be processed for this purpose. In any event, you can always contact the Data Controller using the contact details provided in the heading.
Photographs and videos
The Data Controller does not request the publication of photographs and/or videos of you. Therefore, your data will not be processed for these purposes.
Web scraping
The Data Controller permits the use of web scraping techniques, provided such activities are conducted in compliance with the following terms and conditions: (i) Legal and Ethical Access. Web scraping must be carried out in a legal and ethical manner. Users must comply with all applicable laws and regulations when performing scraping activities. (ii) Responsible Use. Users must ensure that scraping techniques do not compromise the functionality of our website, overload the Site's servers, or interfere with other users' experience. (iii) Respect for Personal Data. Users must respect the privacy and protection of personal data on the Site. Any collection of personal data must be done in accordance with applicable data protection legislation. (iv) Attribution. It is required that any data or content collected from the Site through web scraping is properly attributed to the Site as the original source. (v) Limitations. The Data Controller reserves the right to impose limitations or restrictions on web scraping, including requiring prior written agreement in certain cases. Users must be prepared to cease scraping activities upon request from the Data Controller. By using the Site and carrying out web scraping activities, you agree to comply with the above terms and conditions. Failure to comply with these terms and conditions may result in the revocation of your permission to carry out web scraping and the adoption of appropriate measures to protect the rights and interests of the Data Controller.
Communication of personal data
As part of its ordinary business, the Data Controller may communicate your personal data to certain categories of recipients. In Article 2, you can find the list of recipients to whom the Data Controller communicates your personal data. In order to facilitate the protection of your rights, Article 2 may specify in certain cases when your data is not communicated to third parties.
The "communication" of personal data to third parties is different from the "transfer" (governed by the preceding point). In fact, in communication, the third party to whom the data is transmitted can only use it for the specific purposes described in the relationship with the Data Controller. In a transfer, however, the third party becomes the autonomous Data Controller. Furthermore, your consent is always required to transfer your personal data to third parties.
Without prejudice to the foregoing, it is understood that the Data Controller may use personal data in order to correctly fulfil the obligations provided for by the laws in force.
PRIVACY POLICY
Art. 1 Method of processing
1.1 The processing of your personal data will be mainly carried out using electronic or automated tools and methods, suitable for ensuring their security and confidentiality.
1.2 The information acquired and the methods of treatment will be relevant and not excessive in relation to the type of services rendered. Your data will also be managed and protected in secure computer environments appropriate to the circumstances.
1.3 "Special data" are not processed through the Site. Special data are those that can reveal racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union nature, health and sexual life.
1.4 No judicial data is processed through the Site.
Art. 2 Communication of personal data
The Data Controller may communicate your personal data to certain categories of parties. The parties to whom the Data Controller reserves the right to communicate your data are indicated below:
- The Data Controller may communicate your personal data to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative measures.
- Your personal data may also be disclosed to all public and/or private individuals and/or legal entities (legal, administrative and tax offices, judicial offices, Chambers of Commerce, Chambers and Offices of Labour, etc.), if the communication is necessary or functional to the proper fulfilment of obligations under the law.
- The Data Controller does not make use of employees and/or collaborators in any capacity. Therefore, your personal data will not be communicated to this category of subjects.
- The Data Controller does not use companies, consultants or professionals responsible for the installation, maintenance, updating and, in general, the management of the Data Controller's hardware and software. Therefore, your data will not be communicated to these categories of subjects.
- The Data Controller does not use CRM platforms (companies that carry out the activity of sending automated communications to users), therefore your personal data are not communicated to these companies.
- The Data Controller does not use external companies to provide customer care services. Therefore, your personal data will not be processed for this purpose.
- The Data Controller uses banking institutions and companies that manage national and international payment networks for online payments for products and services purchased through the Website.
- The purchaser's personal data may be communicated to post offices, couriers or forwarding agents responsible for the delivery of the Products purchased through the Site.
- The personal data of purchasers is not disclosed to providers of technology based on generative artificial intelligence.
The Data Controller reserves the right to modify the above list in accordance with its ordinary operations. Therefore, you are invited to regularly access this information to check to which subjects the Data Controller communicates your personal data.
Article 3 Personal data retention
3.1 This article explains how long the Data Controller reserves the right to retain your personal data.
Data retention
3.2 Without prejudice to the provisions of Article 3.1, the Data Controller may retain your personal data for the time required by specific regulations, as amended from time to time.
Article 4 Transfer of personal data
4.1 The Data Controller is located in a country that has an adequate level of security from a regulatory standpoint. If the transfer of your personal data takes place to a non-EU country and for which the European Commission has expressed a judgment of adequacy, the transfer is deemed safe from a regulatory standpoint in any case. This article 4.1 indicates from time to time the countries where your personal data may possibly be transferred and where the European Commission has expressed a judgment of adequacy. {data-transfer-countries}
4.2 Without prejudice to what is stated in article 4.1, your data may also be transferred to countries outside the EU for which the European Commission has not issued an adequacy decision. You are therefore invited to regularly review this article 4.2 to find out to which of these countries your data may be transferred.
4.3 In this article, the Data Controller indicates the countries in which it may specifically direct its activities. This circumstance may imply the application of the legislation of the reference country, together with that which governs the relationship with the user as indicated in the Preamble.
{extra-ue}
Art. 5. Your rights
The Data Controller informs you that you have the right:
- To request from the Data Controller access to your personal data and its rectification or erasure, or the restriction of its processing, or to object to its processing, in addition to the right to data portability.
- revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation
- to lodge a complaint with a supervisory authority (e.g. the Italian Data Protection Authority).
The rights referred to above may be exercised by submitting a request, without any formalities, to the contacts listed in the Introduction.
Art. 6. Amendments
The Data Controller reserves the right to amend this policy at any time, providing appropriate notice to users of the Site and ensuring, in all cases, an adequate and comparable level of protection for personal data. To view any changes, please check this policy regularly. In the event of substantial changes to this privacy policy, the Data Controller may also notify you of such changes by email.