Privacy Policy

Last updated: 2026-03-06

Data Controller

Hesa Group Srl, with registered office in Milan, Italy (hereinafter “Hesa Group”, “we” or “the Controller”), as data controller, processes the personal data of users (hereinafter “User” or “Data Subject”) who visit the website hesagroup.com (hereinafter “Website”).

The processing of personal data is based on the following legal bases, pursuant to Art. 6 of Regulation (EU) 2016/679 (GDPR):

  • Consent: for sending promotional communications and the use of non-essential cookies.
  • Performance of a contract: for managing contact requests and quotes.
  • Legitimate interest: for improving services and Website security.
  • Legal obligation: for compliance with tax and accounting obligations.

Types of Data Collected

The computer systems responsible for the operation of the Website automatically collect certain data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system, pages visited).

Voluntarily Provided Data

The User may voluntarily provide personal data by filling out the contact forms on the Website, including: first name, last name, email address, phone number, company name.

Cookies

For detailed information on the use of cookies, please refer to our Cookie Policy.

Purposes of Processing

Personal data is processed for the following purposes:

  1. Management of contact and information requests.
  2. Provision of services requested by the User.
  3. Compliance with legal obligations.
  4. Statistical analysis in aggregate and anonymous form.
  5. Sending promotional communications, with prior consent.

Processing Methods

Data processing is carried out using electronic and/or automated tools, with organizational logic strictly related to the purposes indicated above, and in any case in a manner that ensures the security and confidentiality of the data.

Data Retention Period

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case in compliance with applicable legal deadlines.

Rights of the Data Subject

Pursuant to Articles 15-22 of the GDPR, the User has the right to:

  • Access their personal data.
  • Obtain rectification or erasure of data.
  • Restrict processing.
  • Object to processing.
  • Request data portability.
  • Withdraw consent at any time.

To exercise their rights, the User may contact us at: privacy@hesagroup.com.

Changes to This Policy

The Controller reserves the right to make changes to this policy at any time. We recommend checking this page regularly.