Privacy Policy

Privacy Policy. Effective from 15/06/2026

Foreword

This notice takes into account the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Privacy Code (Legislative Decree of 30 June 2003, no. 196). The document has also been drafted based on the Guidelines of the Italian Data Protection Authority (in particular the Guidelines on combating spam issued by the Data Protection Authority on 4 July 2013).

Data ControllerSol Montes Srl, VAT number 03323610216, Bolzano Chamber of Commerce, share capital EUR 12,000 fully paid up, info@solmontes.it

Website to which this privacy policy refers: www.solmontes.itSite).

The Data Controller has not appointed a Data Protection Officer (DPO). Therefore, you can send any requests for information directly to the Data Controller.

GENERAL INFORMATION

This document describes how the Data Controller handles your personal data provided on the Website.

The main treatments of your personal data are described below. The legal basis for the treatment, whether the provision is mandatory, and the consequences of not providing personal data are explained in particular. To best describe your rights, where necessary, we have specified if and when a particular processing of personal data is not carried out.

Site Registration

The information and data requested upon registration will be used to allow you to access the restricted area of the Website and to make use of the online services offered by the Data Controller to registered users. The legal basis for the processing is the necessity for the Data Controller to perform pre-contractual measures taken at the request of the data subject. Providing the data is optional. However, your refusal to provide the data will make it impossible to register on the Website.

Purchases on the Website

Your personal data will be processed to enable you to make purchases on the Website. When you place an online order, this is to enable the conclusion of the purchase contract and the proper execution of the related transactions (and, where required by sector-specific legislation, to fulfil tax obligations). This processing of personal data also includes the possibility of sending communications (e.g. tracking updates, order information and requests to leave a review) via automated means such as email and/or text message and/or WhatsApp. The legal basis for the processing is the Data Controller’s obligation to perform the contract with the data subject or to comply with legal obligations. Notwithstanding the above (and therefore your consent), the Data Controller may process your data for so-called "soft-spam" purposes, as governed by Article 130 of the Privacy Code. This means that, limited to the email address you provided in the context of a purchase via the Website, the Data Controller will process your email address to enable the direct marketing of similar products/services, provided that you do not object to such processing in the manner set out in this privacy notice. The legal basis for the processing is the Data Controller’s legitimate interest in sending this type of communication. This legitimate interest may be considered equivalent to the data subject’s interest in receiving "soft-spam" communications. The Data Controller does not process the user’s data to send "reminder" emails regarding the purchase of the Data Controller’s own products and/or services. Access to content/services is subject to alternative age verification systems adopted by the Data Controller, provided these comply with Agcom regulations and the GDPR. In any case, the minimisation of the data processed and the impossibility of directly identifying the user are guaranteed. Should the user not consent to the verification, it will not be possible to access the content/services nor to process personal data for this purpose.

To respond to your requests

Your data will be processed to respond to your information requests. Providing your data is optional, but refusal will make it impossible for the Data Controller to answer your questions. The legal basis for the processing is the Data Controller's legitimate interest in responding to user requests. This legitimate interest is equivalent to the user's interest in receiving a response to communications sent to the Data Controller.

General marketing

The Data Controller will not send you advertising material and/or newsletters relating to its own or third-party products. We use Google services, such as Google Ads and Google Analytics, to personalise advertising and improve the user experience. This includes the collection of personal data and cookies, used to show you ads in line with your preferences. At the time of consent, you will be asked to authorise the use of this data. Further details on the use of cookies and consent management are available in this website's cookie policy.

Profiling

The Data Controller does not carry out "profiling" with your personal data. Therefore, they will not send you advertising material and/or newsletters relating to their own products or those of third parties of specific interest to you.

Data transfer

The Data Controller does not transfer your personal data to third parties.

Geolocation

The website does not implement IP address geolocation tools for the user.

Curriculum Vitae

It is not possible to submit CVs through the Website. Therefore, your data will not be processed for these purposes.

Booking appointments

The Website does not have any third-party appointment booking systems with the Data Controller. Therefore, your data will not be processed for this purpose. In any event, you may always contact the Data Controller at the contact details provided above.

Photographs and videos

The Data Controller does not request the publication of photographs and/or videos showing you. Therefore, your data will not be processed for these purposes.

Web scraping

The Data Controller permits the use of web scraping techniques, provided that such activities are carried out in accordance with the following terms and conditions: (i) Legal and Ethical Access. Web scraping must be performed legally and ethically. Users must comply with all applicable laws and regulations when carrying out scraping activities; (ii) Responsible Use. Users must ensure that scraping techniques do not compromise the functionality of our website, do not overload the Site's servers, and do not interfere with the experience of other users; (iii) Respect for Personal Data. Users must respect the privacy and protection of personal data present on the Site. Any collection of personal data must be carried out in compliance with current personal data protection regulations; (iv) Attribution. It is required that any data or content collected from the Site via web scraping be adequately attributed to the Site as the original source; (v) Limitations. The Data Controller reserves the right to impose limitations or restrictions on web scraping, including requiring a prior written agreement in certain cases. Users must be prepared to cease scraping activities upon request by the Data Controller. By using the Site and carrying out web scraping activities, the user agrees to abide by the terms and conditions set out above. Failure to comply with these conditions may result in the revocation of permission to carry out web scraping and the adoption of appropriate measures to protect the rights and interests of the Data Controller.

Disclosure of personal data

In the course of its ordinary business, the Data Controller may communicate your personal data to certain categories of subjects. In Article 2 You can find the list of subjects to whom the Data Controller communicates your personal data. To facilitate the protection of your rights, Article 2 may specify in some cases when your data is not communicated to third parties.

"Communication" of personal data to third parties is different from "transfer" (governed in the preceding paragraph). In fact, with communication, the third party to whom the data is transmitted can only use it for the specific purposes described in the relationship with the Data Controller. In a transfer, however, the third party becomes an independent Data Controller of the personal data. Furthermore, your consent is always required to transfer your personal data to third parties.

Notwithstanding the foregoing, it is understood that the Data Controller may still use your personal data to properly fulfil the obligations required by current laws.

SPECIFIC PRIVACY NOTICE

Art. 1 Processing methods

The processing of your personal data will primarily be carried out using electronic or otherwise automated means, in accordance with the methods and with tools suitable for ensuring the security and confidentiality of personal data.

1.2 The information acquired and the methods of processing will be relevant and not excessive with respect to the type of services provided. Your data will also be managed and protected in secure IT environments appropriate to the circumstances.

1.3 No "special data" is processed through the Site. Special data is data that can reveal racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union character, health status and sexual life.

1.4 Judicial data is not processed via the Website.

Art. 2 Communication of personal data

The Data Controller may disclose Your personal data to specific categories of subjects. The subjects to whom the Data Controller reserves the right to disclose Your data are indicated below:

  • The Data Controller may communicate your personal data to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions.
  • Your personal data may also be communicated to all those public and/or private entities, individuals and/or legal persons (legal, administrative and tax consultancy firms, judicial offices, Chambers of Commerce, Labour Offices, etc.), where communication is necessary or functional for the correct fulfilment of legal obligations.
  • The Data Controller does not use employees and/or collaborators in any capacity. Therefore, your personal data will not be communicated to this category of subjects.
  • The Data Controller does not use companies, consultants or professionals responsible for the installation, maintenance, updating and, in general, the management of the Data Controller's hardware and software. Therefore, your data will not be disclosed to these categories of subjects.
  • The Data Controller does not use CRM platforms (companies that specifically carry out the activity of sending automated communications to users). Therefore, your personal data is not communicated to these companies.
  • The Data Controller does not use external companies to provide customer care services.
  • The Data Controller uses banking institutions and companies that manage national and international payment circuits for online payments for products and services purchased through the Website.
  • The personal data of the buyer may be communicated to postal offices, couriers, or freight forwarders responsible for delivering the Products purchased through the Site.
  • Buyers' personal data is not shared with generative artificial intelligence technology providers.

The Data Controller reserves the right to amend the above list based on its ordinary operations. Therefore, you are invited to regularly access this policy to check which parties the Data Controller communicates your personal data to.

Art. 3 Retention of personal data

3.1 This article describes how long the Data Controller reserves the right to retain your personal data.

  • Via the Website (or by making a request to the Data Controller), the user's account can be deleted. In this case, all personal data stored will be deleted and will not be retained by the Data Controller for any purpose.
  • The personal data provided via the quote request form will be retained for the time strictly necessary to respond to the request, and in any case, for a period not exceeding 6 months from its receipt. After this period, the data will be deleted or anonymised, unless there are any legal obligations requiring longer retention.
  • In cases where age verification measures are implemented, personal data are processed exclusively for the time necessary to carry out the verification itself and are not retained beyond that purpose.
  • Your personal data will be kept only for as long as necessary to ensure the correct provision of services offered via the Website.

3.2 Notwithstanding Article 3.1, the Data Controller may retain your personal data for the time required by specific regulations, as amended from time to time.

Art. 4 Transfer of personal data

4.1 The Data Controller is based in a country that has an adequate level of regulatory security. Should the transfer of your personal data take place in a non-EU country for which the European Commission has expressed an adequacy decision, the transfer is considered safe from a regulatory point of view in all cases. This Article 4.1 indicates, from time to time, the countries to which your personal data may potentially be transferred and for which the European Commission has expressed an adequacy decision.

  • Users are therefore invited to access this article regularly to check if their personal data is being transferred to a country with these characteristics.

4.2 Notwithstanding the provisions of Article 4.1, your data may also be transferred to non-EU countries for which the European Commission has not issued an adequacy decision. You are therefore invited to regularly review this Article 4.2 to ascertain in which of these countries your data may be transferred.

4.3 In this article, the Data Controller indicates the countries to which they may specifically direct their activity. This circumstance may imply the application of the legislation of the country in question, along with that which governs the relationship with the user based on what is indicated in the Preamble. 

  • At the user's request, the Data Controller will apply any more favourable national legislation of the user to the processing of personal data.

Art. 5. Rights of the Data Subject

The Data Controller informs you that you have the right to:

  • request access to your personal data from the Data Controller, and the rectification or erasure of such data, or the restriction of the processing concerning you, as well as your right to object to its processing, in addition to the right to data portability
  • withdraw consent at any time without prejudice to the lawfulness of the processing based on consent given prior to withdrawal
  • submit a complaint to a supervisory authority.

The above rights can be exercised by making a request, without formality, to the contacts indicated in the Preamble.

Art. 6. Amendments and Miscellaneous

The Data Controller reserves the right to make changes to this notice at any time, giving appropriate publicity to users of the Site and ensuring in any case adequate and similar protection of personal data. In order to view any changes, you are invited to consult this notice regularly. In the event of substantial changes to this privacy notice, the Data Controller may also notify you via email.