Company Data:
- Company: CO-TOOLING di Lorenzo Guiati
Via Veles Bigi, 10 – 41016 NOVI DI MODENA (MO) – Italy - VAT Number: IT03908680360
- Tax Code: GTULNZ76C24F240E
- Phone: +39 059 8397618
- Website: https://www.cotooling.it/
- Email: info@cotooling.it
Privacy Policy of CO-TOOLING di Lorenzo Guiati
This Application collects some Personal Data from its Users.
Data Controller
CO-TOOLING di Lorenzo Guiati
Via Veles Bigi, 10 – 41016 NOVI DI MODENA (MO) – Italy
VAT Number: IT03908680360
Tax Code: GTULNZ76C24F240E
Data Controller’s email address: info@cotooling.it
The Data Controller has not appointed a Data Protection Officer (DPO), as there is no obligation to do so pursuant to Article 37 of the GDPR. For any privacy-related requests, Users may contact the Data Controller at the email address provided above.
Types of Data collected
Among the Personal Data collected by this Application, either independently or through third parties, are: Cookies; Usage Data; email.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed prior to data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation.
Users who have any doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees that they have the right to communicate or disseminate them, releasing the Data Controller from any liability towards third parties.
Methods and location of processing the collected Data
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes;
- processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
It is always possible to request the Data Controller to clarify the specific legal basis of each processing operation and, in particular, to specify whether the processing is based on law, provided for by a contract, or necessary to conclude a contract.
Location
The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to countries outside the EU, in particular to the United States, for the use of services such as Google Analytics and Facebook. Such transfers are based on the Standard Contractual Clauses (SCC) adopted by the European Commission, which guarantee an adequate level of protection. The User may obtain further information on these safeguards by contacting the Data Controller.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization of public international law or constituted by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.
The User can verify whether any of the transfers described above take place by examining the section of this document relating to the details on the processing of Personal Data or request information from the Data Controller by contacting them at the contact details provided at the beginning.
Retention period
The Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until the performance of such contract is completed.
- Personal Data collected for purposes related to the legitimate interest of the Data Controller shall be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When the processing is based on the User’s consent, the Data Controller may retain Personal Data for longer until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, upon the expiry of such period, the right of access, deletion, rectification, and the right to data portability can no longer be exercised.
Purposes of processing the collected Data
The User’s Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Interaction with social networks and external platforms, Remarketing and behavioral targeting, Statistics, and Displaying content from external platforms.
To obtain further detailed information on the purposes of the processing and on the Personal Data specifically relevant for each purpose, the User may refer to the relevant sections of this document.
Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Interaction with social networks and external platforms
This type of service allows interactions with social networks or other external platforms to be carried out directly from the pages of this Application.
The interactions and information acquired by this Application are in any case subject to the User’s privacy settings relating to each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services to ensure that the data processed on this Application is not reconnected to the User’s profile.
Facebook Like button and social widgets (Meta Platforms Ireland Limited)
The Facebook “Like” button and social widgets are interaction services with the Facebook social network, provided by Meta Platforms Ireland Limited (Dublin, Ireland) for European users.
Personal Data collected: Cookies; Usage Data.
Place of processing: Ireland (and, for some technical aspects, USA) – Privacy Policy.
Facebook Remarketing (Meta Platforms Ireland Limited)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Meta Platforms Ireland Limited that connects the activity of this Application with the Facebook advertising network.
Personal Data collected: Cookies; Usage Data.
Place of processing: Ireland (and, for some technical aspects, USA) – Privacy Policy – Opt Out.
Facebook Custom Audience (Meta Platforms Ireland Limited)
Facebook Custom Audience is a Remarketing and Behavioral Targeting service provided by Meta Platforms Ireland Limited that connects the activity of this Application with the Facebook advertising network.
Personal Data collected: Cookies; email.
Place of processing: Ireland (and, for some technical aspects, USA) – Privacy Policy – Opt Out.
Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to track the User’s behavior.
Facebook Ads conversion tracking (Facebook pixel) (Meta Platforms Ireland Limited)
Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Meta Platforms Ireland Limited that connects data from the Facebook ad network with the actions performed within this Application. The Facebook pixel tracks conversions that can be attributed to Facebook, Instagram, and Audience Network ads.
Personal Data collected: Cookies; Usage Data.
Place of processing: Ireland (and, for some technical aspects, USA) – Privacy Policy.
Google Analytics (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (Dublin, Ireland) for European users. Google uses the collected Personal Data to track and examine the use of this Application, compile reports, and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. The anonymization works by shortening the IP address of Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States.
Personal Data collected: Cookies; Usage Data.
Place of processing: Ireland (and, for some technical aspects, USA) – Privacy Policy – Opt Out.
Displaying content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them.
In the event that a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.
YouTube Video Widget (Google Ireland Limited)
YouTube is a video content display service managed by Google Ireland Limited that allows this Application to integrate such content within its pages.
Personal Data collected: Cookies; Usage Data.
Place of processing: Ireland (and, for some technical aspects, USA) – Privacy Policy.
Tracking in email communications
This Application may use tracking pixels or other monitoring systems in emails sent to Users (e.g., newsletters, commercial communications). These tools allow the detection of email opening and interaction with content, in order to evaluate the effectiveness of campaigns and improve the service.
The use of such pixels for marketing or profiling purposes occurs only with the explicit consent of the User, which can be revoked at any time. For more details and to manage preferences, the User can contact the Data Controller at info@cotooling.it.
User Rights
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, the User has the right to:
- withdraw consent at any time. The User may withdraw their previously expressed consent to the processing of their Personal Data.
- object to the processing of their Data. The User has the right to object at any time to the processing of their Data for direct marketing purposes. When the processing is based on a legitimate interest of the Data Controller, the User may object for reasons related to their particular situation.
- access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the Data processed.
- verify and request rectification. The User may verify the accuracy of their Data and request its updating or correction.
- obtain the restriction of processing. When certain conditions apply, the User may request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their storage.
- obtain the deletion or removal of their Personal Data. When certain conditions apply, the User may request the deletion of their Data by the Data Controller.
- receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to obtain its transfer without hindrance to another controller. This provision is applicable when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party, or on contractual measures connected to it.
- lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority (Italian Data Protection Authority – Garante per la protezione dei dati personali) or take legal action.
Details on the right to object
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are informed that their Data may be processed for direct marketing purposes. In such cases, the User may object to the processing at any time and without providing any justification.
How to exercise your rights
To exercise the User’s rights, Users may send a request to the contact details of the Data Controller indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.
Cookie Policy
This Application uses Cookies. To learn more and to view the detailed information, the User can consult the Cookie Policy.
Further information on processing
Defense in court
The User’s Personal Data may be used by the Data Controller in court or in the preparatory stages of its possible establishment for the defense against abuses in the use of this Application or related Services by the User.
The User declares to be aware that the Data Controller may be obliged to disclose the Data by order of public authorities.
Specific information
Upon the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For needs related to operation and maintenance, this Application and any third-party services it uses may collect system logs, i.e., files that record interactions and that may also contain Personal Data, such as the User’s IP address.
Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Response to “Do Not Track” requests
This Application does not support “Do Not Track” requests.
To find out whether any third-party services used support them, the User is invited to consult their respective privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Application as well as, where technically and legally feasible, by sending a notification to Users through one of the contact details in the Data Controller’s possession. Please therefore consult this page regularly, referring to the date of the last modification indicated at the bottom.
If the changes affect processing operations whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.
Definitions and legal references
Personal Data (or Data)
Any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable, constitutes personal data.
Usage Data
This is the information collected automatically through this Application (also from third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects to this Application, the URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g., the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User’s IT environment.
User
The individual who uses this Application who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public administration, or any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, service, or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.
This Application
The hardware or software tool through which the Personal Data of Users is collected and processed.
Service
The Service provided by this Application as defined in the relevant terms (if any) on this site/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document is intended to extend to all current member states of the European Union and the European Economic Area.
Cookie
Small portion of data stored within the User’s device.
Legal references
This privacy policy is drafted based on multiple legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy concerns exclusively this Application.
Last modified: August 4, 2026