Skip to content
Contact us

Privacy Policy

Privacy notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), for visitors to corti-srl.it and for anyone who contacts Corti Srl through the website, by email or by telephone.

Last updated: 5 November 2026.

1. Data controller

Corti Srl – registered office Piazzale G. delle Bande Nere 7, 20146 Milan, Italy – operational headquarters Via Rivera 47, 20841 Carate Brianza (MB), Italy – VAT no. IT10286290969.
Email: corti.srl@tin.it – Telephone: +39 0362 903489.

Corti Srl has not appointed a data protection officer (DPO), as it is not required to do so. For any question about the processing of your data, please write to the address above.

2. What data we process and why

2.1 Requests for information and quotes

When you write to us using the form on the Contact page, by email or by telephone, we process the data you provide: first name, last name, company, email, telephone, country, sector, material, approximate annual quantity, message and any attached drawing.

  • Purpose: to reply to your request, assess the feasibility of the component and prepare a quotation.
  • Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Provision of data: fields marked with an asterisk are required in order to reply; the others are optional.
  • Retention: for as long as needed to handle the request. If the request does not lead to a business relationship, data and attachments are deleted within 24 months of the last contact. If a contract follows, data are kept for the duration of the relationship and then for the periods required by law (for example 10 years for accounting records).

Drawings and technical documents you send us are treated as confidential and used only to assess your request.

2.2 Browsing data

The server hosting the website automatically records some technical data for each visit: IP address, date and time, requested page, browser and operating system.

  • Purpose: to operate the website, keep it secure and detect any misuse.
  • Legal basis: the controller’s legitimate interest in the security and proper functioning of the website (Art. 6(1)(f) GDPR).
  • Retention: for the period set by the hosting provider, unless needed to investigate offences.

2.3 Visit statistics (only with your consent)

If you accept them in the cookie banner, we use Google Analytics 4, provided by Google Ireland Limited, to find out in aggregate form how many people visit the website and which pages they view. Without your consent, Google Analytics is not loaded.

  • Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the “Cookie preferences” link in the footer.
  • Retention: statistical data are kept by Google for the period set in the service.

Details about cookies are in our Cookie Policy.

2.4 Preferences saved on your device

Your cookie choices and accessibility menu settings are saved in your browser, so that you do not have to repeat them on every page. We do not receive them or use them for any other purpose.

2.5 Features and links to other services

  • Map: the map on the Contact page is an image stored on our website; Google Maps opens only if you click the image, in a new tab.
  • LinkedIn and other linked websites: when you click these links you leave our website, and the privacy notices of the respective operators apply.

The website does not use embedded external services (videos, interactive maps, third-party fonts) and does not use profiling or advertising cookies.

3. Who may process your data

Data are processed by authorised and trained Corti Srl staff, and by the providers that help us run the website and email, appointed as data processors (Art. 28 GDPR):

  • Aruba S.p.A. (Ponte San Pietro, Bergamo, Italy): website hosting and email service, on servers in Italy;
  • whoever provides technical maintenance of the website on behalf of Corti Srl;
  • Google Ireland Limited, for statistics only and only if you have given your consent.

Data are not disclosed to the public or sold.

4. Transfers of data outside the European Union

The website and email are hosted on servers in Italy: for these services, data is not transferred outside the European Union.

Google may process data in the United States; Google LLC participates in the EU-US Data Privacy Framework, which the European Commission has recognised as adequate.

5. Your rights

At any time you can ask Corti Srl for access to your data, rectification or erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Arts. 15–21 GDPR). Consent to statistics can be withdrawn at any time, without affecting processing carried out before withdrawal.

To exercise your rights, write to corti.srl@tin.it: we reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

6. Automated decision-making

We do not take decisions based solely on automated processing, including profiling.

7. Changes

This notice may be updated, for example following changes to the website or to the law. The date of the last update is shown at the top of the page.