Privacy and Cookie Policy

Privacy Policy


This policy describes how the website manages and processes the personal data of users who visit it, as well as the data processing practices for information transmitted by the data subject to the Controller through this site.

In compliance with Articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of Regulation (EU) 2016/679 (GDPR), the following information is provided to users of this website. These details pertain exclusively to data processing carried out through this website and not to other websites that may be accessed via links. For those websites, users are encouraged to review the privacy policies provided by the respective controllers.

This website and the services offered through it are reserved for individuals who are at least eighteen years old. Therefore, the Controller does not collect personal data from individuals under 18. If any such data is inadvertently collected, the Controller will promptly delete it upon request.

1. Data Controller

RACR srls – Via Antonio Chinotto, 1 – 00195 Rome (RM) (hereinafter referred to as the "Controller") acts as the data controller for personal data of users of the racr.it website (hereinafter, "Users") and provides this privacy policy pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter referred to as the "Regulation" or "Applicable Law").

2. Categories and Sources of Processed Data / Purpose of Processing

We may process browsing data as well as cookies. Additionally, we may process data voluntarily provided by the user, such as through the contact form, e-commerce platform form, or email communication. This may include general personal data (identification, billing information, etc.) and, in exceptional cases, special categories of data under Article 9 GDPR or criminal records under Article 10 GDPR, but only when necessary to respond to specific requests.

Data may originate from automatic or voluntary sources, as well as from public sources. For instance, they may come from the user's browsing activity, which may carry information about previous website visits, including cookies and similar technologies. Users may also voluntarily provide data, and some data may be gathered from public sources such as databases and public records.

3. Purpose of Processing

The personal data of website users will be processed in compliance with GDPR regulations to ensure the website’s functionality, including but not limited to:
  • Processing specific requests submitted by the user through the website and its communication tools (contact form, e-commerce platform, inquiry forms, etc.).
  • Managing newsletter subscriptions and sending commercial and informational communications relevant to the Controller’s sector, subject to the user's consent.
  • Sending informational communications about the Controller’s services in response to user inquiries through email or contact forms.
  • Managing activities related to the website’s operations. Using the user’s email address, provided during a product or service purchase, to send marketing communications related to similar products or services without additional consent.
  • Users may opt out of such communications at any time, following the instructions in each email.
      Browsing data may be automatically collected for the purpose of monitoring website access.

      Data Collected via Email Platform To provide complete information, we specify that the Controller may use a compliant email platform with statistical tracking systems. This may allow detection of whether an email was opened, which links were clicked, the IP address used, the browser type, and similar details. Such data collection is a core functionality of the messaging system.

      Users can easily opt out of receiving further newsletters by clicking the unsubscribe link provided in each newsletter email. Upon revocation of consent, the Controller will send a confirmation message.

      4. Legal Basis for Processing

      Personal data processing is based on the right to information, contractual obligations, or social contact, as well as user consent where applicable, obtained through the voluntary completion of dedicated forms.

      5. Legitimate Interest of the Controller

      Data processing is also based on the Controller’s legitimate interests, including exercising its rights in the information society, performing contractual obligations, and conducting direct marketing activities.

      6. Mandatory Data Provision

      The extent of personal data processing depends on the privacy settings enabled or disabled by the user through their browser. Disabling certain settings may affect website navigation. Some data is essential for the website’s functionality and its processes. Any optional data will be requested with a prior approval checkbox. Providing all other data remains optional, based on the type of information the user wishes to share.

      7. Possible Recipients of Personal Data

      Data may be shared with affiliated, associated, or controlled companies of the Controller, as well as consultants or third parties acting on behalf of the Controller to fulfill the purposes described in this policy. Data may be transferred both within and outside the EU (in the latter case, only to entities adhering to the Privacy Shield protocol).

      8. Data Retention Period

      Browsing data will be retained for the time necessary to fulfill the functions for which it was collected.

      9. Data Subject Rights

      Each data subject has the right to access, rectify, erase (right to be forgotten), restrict processing, receive notification in case of rectification or deletion, data portability, object to processing, and not be subject to automated decision-making, including profiling, as provided in Articles 15-22 of the GDPR.

      These rights can be exercised in accordance with Article 12 GDPR by sending a written request to the Controller via email at mail@racr.it.

      The Controller will respond as soon as possible and no later than one month from the request date.

      10. Right to Withdraw Consent

      Users may withdraw their consent at any time by submitting a request at the Controller's office or via email at mail@racr.it.

      11. Complaints

      Each data subject has the right to file a complaint under Articles 77 and following of the GDPR with a supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.

      The procedures, modalities, and deadlines for filing complaints are governed by national legislation. Filing a complaint does not exclude other legal or administrative actions, which in Italy can be directed either to the Garante or the competent court.