Schaivo Machinery Unit_Logo
Schaivo Machinery Unit_Logo
Schaivo Machinery Unit_Logo

Privacy Policy

Home / Privacy Policy

Privacy Policy

Last updated: 23 April 2026

01 Who we are

This Privacy Policy applies to the website schiavolift.com (the “Site”), operated by Schiavo Srl (“we”, “us” or “our”), an Italian company specialising in lift systems and vertical mobility solutions.

Data controller: Schiavo Srl
Website: schiavotech.com
Country: Italy (EU)
Contact: privacy@schiavotech.com

We are committed to protecting your personal data and to complying with the EU General Data Protection Regulation (GDPR – Regulation 2016/679) and Legislative Decree 196/2003 (the Privacy Code), as amended by Legislative Decree 101/2018.

02 Data we collect

We collect two categories of data depending on how you interact with the website:

Category

Data

Source

Contact form

First name, surname, email address, telephone number (optional), message text

Provided directly by you

User account

Name, email address, password (hashed), account preferences, date and time of logins

Provided directly by you at the time of registration

Technical aspects / Navigation

IP address, browser type, operating system, pages viewed, session duration, referring URL

Automatically, via server logs and analytics tools

We do not collect sensitive personal data (relating to health, religion, political opinions, etc.) and we do not directly process payment card data.

03 Legal bases for processing

We process your personal data only where there is a valid legal basis under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)): for optional marketing communications and non-essential cookies.
  • Contract (Art. 6(1)(b)): to manage your user account and respond to support requests.
  • Legal obligation (Art. 6(1)(c)): where the law requires data to be retained (e.g. tax and accounting obligations).
  • Legitimate interest (Art. 6(1)(f)): for website security, fraud prevention and internal analytics.

04 How we use your data

  • Responding to enquiries submitted via the contact form.
  • Creating and managing your user account and providing you with access to restricted areas.
  • Sending service-related communications (e.g. account confirmations, password resets).
  • Sending marketing or promotional communications, only with your prior consent.
  • Analysing website usage to improve its performance, content and user experience.
  • Fulfilling applicable legal and regulatory obligations.

05 Sharing of data

We do not sell your personal data. We may share data only with:

  • Service providers acting as data processors on our behalf (for example, web hosting, email delivery, data analytics), bound by data processing agreements.
  • Public authorities, where required by law or by a court order.

Where data is transferred outside the EEA, we ensure appropriate safeguards (standard contractual clauses or equivalent).

06 Data retention

Type of Data

Retention period

Contact form enquiries

24 months from the last interaction

User account data

Duration of the account + 12 months from the deletion request

Marketing preferences

Until consent is withdrawn

Server logs / access logs

12 months

Legal and tax documents

10 years (as required by Italian law)

07 Your rights (GDPR)

As a data subject under the GDPR, you have the following rights, which may be exercised free of charge:

  • Access (Art. 15): obtain a copy of the personal data we hold about you.
  • Rectification (Art. 16): request the correction of inaccurate or incomplete data.
  • Erasure (Art. 17): request deletion (the “right to be forgotten”), subject to legal retention obligations.
  • Restriction (Art. 18): request the restriction of processing in certain circumstances.
  • Portability (Art. 20): receive your data in a structured, machine-readable format.
  • Objection (Art. 21): object to processing based on legitimate interests or for direct marketing purposes.
  • Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out previously.

To exercise any right, please contact us at privacy@schiavolift.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): garanteprivacy.it.

08 Security

We adopt appropriate technical and organisational security measures, including encrypted connections (HTTPS/TLS), access controls and periodic security reviews. In the event of a data breach that poses a risk to your rights, we will inform you and notify the competent supervisory authority in accordance with the GDPR.

09 Contact

Schiavo Srl — Privacy Office
Email: privacy@schiavotech.com
Website: schiavotech.com