Privacy Policy
Privacy Policy
Information notice pursuant to Art. 13 of the European General Data Protection Regulation (GDPR - EU 2016/679)
This Privacy Policy describes how DDA S.r.l. collects, uses, and protects the personal data of private individuals ("B2C Users") and automation sector professionals ("B2B Trade Customers") interacting with the website www.ducatihome.it or using our customer care, remote consultancy, installation, and sales services.
1. Data Controller
The Data Controller responsible for processing your personal data is:
- Company Name: DDA S.r.l. (hereinafter "Ducatihome" or the "Company")
- Registered Office: Viale Vaccari 17/B, 43012 Fontanellato (PR), Italy
- Operational Headquarters: Via Cabriolo 50A, 43036 Fidenza (PR), Italy
- VAT Number / Fiscal Code: IT02849470345
- Contact Email: info@ducatihome.it
2. How We Collect Your Personal Data
The Company collects and processes your personal data under the following circumstances:
- When you submit an inquiry via the contact form on our website.
- When you contact our dedicated technical helpline by phone, email, or instant messaging applications.
- When you share photos or videos of your installation site or products with us to receive remote technical advice, preliminary remote surveys, or post-sales assistance.
- When you participate in a live video call via corporate mobile devices and messaging platforms (e.g., WhatsApp Business) for remote technical support.
- When our operators/technicians take photos or videos of automated systems on-site during testing, inspection, and verification phases.
- When you voluntarily share your media content, photos, or videos with us to act as a brand "promoter" or testimonial.
- When you write or submit a product review, feedback, or testimonial regarding your purchasing and service experience (either directly to us or via certified review platforms).
- When you complete a purchase order or a repair form.
3. Types of Personal Data Collected
We may collect and process the following categories of personal data:
- Contact Information: First name, last name, billing and shipping address, phone number, and email address.
- Sales & Billing Data: VAT number, fiscal code/tax ID, bank details (IBAN), and purchase history.
- Inquiry Details: Any information you spontaneously type into the text field of our contact forms.
- Technical & Promotional Media Content (Photos & Videos): Images and video recordings of your gates, garage doors, shutters, or structural environments sent by you (via email, website, or messaging apps) or recorded on-site by our technical operators during testing and inspection. This may also include complete images/videos showing your person or property if you choose to act as a testimonial/promoter.
- Customer Reviews and Feedback: Texts, comments, ratings, names, usernames, or any contact details voluntarily filled out and published by you on certified review systems or applications.
- Helpline & Video Support Data: Information provided during phone support, including caller ID, interactive voice response (IVR) navigation paths, and call duration. This includes metadata and live streaming data generated during video calls conducted via corporate smartphones.
- Account Registration Data (B2B Only): Username, password, security question response, country, and language preference.
- Website Usage & Navigation Data: IP addresses, browser type, timestamps, and browsing patterns collected via cookies (please refer to our Cookie Policy for more details).
4. Purposes, Legal Bases, and Data Retention
The Company processes your data only for specific, explicit purposes based on valid legal grounds, as outlined below:
A) Core Contractual & Operational Purposes
-
Pre-Sales Remote Technical Consultancy & Preliminary Remote Surveys: Reviewing the photos/videos of your structure (gates, doors, shutters) or conducting live video calls via corporate mobile devices (e.g., WhatsApp) to replace a physical on-site visit, provide professional remote consultancy, and recommend the most suitable automation product.
- Legal Basis: Performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
- Retention Period & Storage: Media files received are safely transferred and stored exclusively on the Company’s internal computers. They are kept for 12 months from the date of the advice to reference the file if you proceed with a purchase, after which they are permanently deleted.
-
Post-Sales Technical Assistance, Testing, and Troubleshooting: Reviewing photos/videos sent by you, interacting via technical video calls, or examining media recorded on-site by our operators during testing/verification phases to analyze malfunctions or certify the proper operation of an installed product.
- Legal Basis: Performance of a contract, testing verification, or warranty obligations (Art. 6(1)(b) GDPR).
- Retention Period & Storage: Media files are saved on internal corporate computers and stored for the duration of the product's active support history, up to a maximum of 24 months from the closure of the technical ticket or testing phase.
-
Order Fulfillment, Sales Management, and Product Repairs: Administrative and logistical handling of your purchases.
- Legal Basis: Performance of a purchase or service contract (Art. 6(1)(b) GDPR).
- Retention Period: For the entire duration of the active contract, and subsequently archived for 10 years to comply with statutory tax and accounting obligations.
B) Commercial, Portfolio, and Marketing Purposes (Subject to Consent)
-
Publication of Automated System Media for Exemplary and Commercial Use: Publishing photos or videos of automated systems (shared by customers or taken by our operators during testing) on the Company’s official website, e-commerce platform, and official social media channels for portfolio, illustrative, and promotional purposes.
- Anonymization & Minimization: The Company's graphic department heavily edits all such media files prior to publication. Our team removes any personal reference, house numbers, license plates, or specific customer identification details to protect your privacy.
- Legal Basis: Your explicit, specific, and freely given consent (Art. 6(1)(a) GDPR). Media will never be published without your express authorization.
- Retention Period: Until you decide to withdraw your consent. Upon consent revocation, the published media will be promptly removed from our channels.
-
Publication of Customer Reviews, Feedback, and Testimonials: Publishing text-based reviews, satisfaction ratings, or successful customer stories shared by you on our official channels. In accordance with EU consumer protection transparency regulations (EU Omnibus Directive), the Company ensures that published reviews originate strictly from verified customers who have actually purchased a product or service.
- Anonymization Policy vs Public Reviews: To fully protect your privacy, whenever feedback is sent directly or privately to us, the Company publishes it strictly in an anonymous format (e.g., omitting full names, using initials). However, if you actively submit your feedback through certified external review systems, public applications, or dedicated platform tools, the content will be displayed exactly as submitted by you, including any name, username, or contact details you chose to make public.
- Legal Basis: Our legitimate interest in publicizing verified customer satisfaction while protecting privacy through anonymization (Art. 6(1)(f) GDPR), or your explicit consent if you chose to publicize your identity on external apps (Art. 6(1)(a) GDPR).
- Retention Period: Until an objection or deletion request is submitted, or until you remove your review from the third-party application.
-
Customer Testimonials and Brand "Promoter" Programs: Cases where the customer voluntarily chooses to act as a testimonial or promoter for Ducatihome, explicitly sharing or authorizing the use of complete, unedited images/videos containing their person or property to show their satisfaction with our products.
- Legal Basis: Your explicit consent and a specific testimonial/promoter agreement (Art. 6(1)(a) GDPR).
C) Legal Compliance & Rights Protection
-
Compliance with Legal Obligations: Fiscal, accounting duties, or authority requests.
- Legal Basis: Compliance with a legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR). Kept for 10 years for fiscal and invoice records.
-
Protection of Rights and Legal Defense: Management of eventual disputes or legal claims.
- Legal Basis: Legitimate interest of the Company to protect its business, property, and rights (Art. 6(1)(f) GDPR).
D) Standard Marketing Purposes
-
Newsletter and Promotional Communications: Sending marketing emails, discount coupons, and commercial news.
- Legal Basis: Your explicit consent (Art. 6(1)(a) GDPR). Stored for a maximum of 24 months from collection or from your last active interaction.
5. Data Recipients and Media Diffusion
Your personal data—including raw technical photos and videos—will never be sold or unlawfully transferred to third parties. Technical media files are stored exclusively within our secure internal corporate computer systems.
Data, feedback, and anonymized media may be shared or visible under the following conditions:
- Internal Staff: Shared exclusively with authorized internal personnel (technical, sales, and graphic marketing teams).
- Public Diffusion (Commercial Media, Reviews, and Feedback): Photos and videos of installations for which you have granted express commercial consent, as well as reviews/feedback (published anonymously if private, or with full details if released via public apps), will be visible to the general public on our website and our official social media networks.
- External Data Processors: Selected external partners (Art. 28 GDPR) strictly necessary for business operations (IT providers, CRM platforms, hosting companies, couriers, and tax/legal advisors).
6. International Data Transfers
Your data is primarily processed and stored on secure systems located within the European Economic Area (EEA). When using cross-platform communication tools (such as WhatsApp Business) or public review apps, data processing complies with the providers' international data privacy frameworks. Should any transfer outside the EEA occur, the Company guarantees that appropriate safeguards are implemented (Standard Contractual Clauses approved by the European Commission).
7. Your Rights as a Data Subject
Under Articles 15 to 22 of the GDPR, you have the right to exercise the following rights at any time, free of charge:
- Right of Access: Find out if your data is being processed and request a copy (including sent media/feedback).
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data/media/reviews from our computers or our public web pages under specific legal conditions.
- Right to Restriction of Processing: Request a temporary freeze on how your data is used.
- Right to Data Portability: Receive your data in a structured, machine-readable format to transfer it elsewhere.
- Right to Object: Object to the processing of your data, particularly for marketing, reviews, or commercial portfolio purposes.
- Right to Withdraw Consent: Revoke your marketing, testimonial, review, or commercial publication consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, simply email us at: info@ducatihome.it.
Furthermore, if you believe your data has been handled unlawfully, you have the absolute right to lodge a formal complaint with a competent supervisory authority, such as the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza di Monte Citorio n. 121, Rome, Italy) or the authority of your place of residence.
