This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and concerns the processing of your personal data for the purpose of sending newsletters by PIN-CRAFT S.r.l. (hereinafter “PIN-CRAFT” or the “Data Controller”), according to the terms set out below.
1. DATA CONTROLLER
The Data Controller processing your personal data is PIN-CRAFT S.r.l., with registered office at Via dei Comparini no. 85, 55049 Viareggio (LU), Italy, registered with the Lucca Companies Register, VAT No. 01965100462; contacts: tel. +39 0584-383930, e-mail. info@pin-craft.com.
2. DATA PROTECTION OFFICER
The Data Controller has appointed a Data Protection Officer (“DPO”) for the Opacmare group companies, of which PIN-CRAFT is part. The DPO may be contacted at the following e-mail address: dpo@opacmare.it for all matters relating to the processing of personal data and the exercise of the rights that may be exercised pursuant to the GDPR and according to the procedures described in Section 9 of this Privacy Notice.
3. PURPOSE OF THE PROCESSING
Your personal data will be processed for the purpose of sending newsletters containing commercial, promotional and informational communications regarding the products and services offered by PIN-CRAFT.
4. LEGAL BASIS FOR THE PROCESSING
The legal basis for the processing is your explicit consent (Art. 6(1)(a) GDPR), provided by selecting the specific consent checkbox available on the Website.
Consent may be withdrawn at any time by modifying your newsletter preferences, by clicking on the appropriate unsubscribe link included at the bottom of each e-mail received, or by sending a request to the following e-mail address: info@pin-craft.com.
Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal, nor any further processing of the same data based on other legal grounds.
5. NATURE OF THE PROVISION OF DATA AND CONSEQUENCES OF FAILURE TO PROVIDE DATA
Providing your data for newsletter subscription is entirely optional. Refusal to provide such data will only result in the impossibility of receiving the newsletter and therefore news and updates from PIN-CRAFT, and will not affect your ability to use the other products and services offered through the Website.
6. METHODS OF PROCESSING
The processing of your personal data will mainly be carried out using electronic means, including automated tools, in compliance with security measures designed to ensure the confidentiality and integrity of the data. In particular, all appropriate technical, IT, organizational, logistical and procedural security measures will be adopted to ensure an adequate level of data protection as required by law, allowing access only to persons authorized to process the data by the Data Controller or by processors appointed by the Data Controller.
The information collected and the processing methods adopted will be relevant and not excessive in relation to the purposes pursued. The data will also be managed and protected in environments subject to constant access control.
PIN-CRAFT stores personal data through servers mainly located within the European Economic Area (EEA). However, it reserves the right to use services located in non-EU countries; in such cases, service providers will be selected among those offering adequate safeguards pursuant to Articles 45 et seq. of the GDPR.
7. RECIPIENTS OF THE DATA
The persons who may become aware of your personal data, within the limits strictly necessary to fulfil the purposes described above, are persons authorized by the Data Controller to process personal data.
For the performance of certain functions related to the management of the newsletter service and the Website, the Data Controller relies on third parties and/or external companies to whom the necessary data may be disclosed, including in particular:
- Platforms providing automated marketing communication services;
- Website hosting providers;
- Consultants and companies entrusted with the technological maintenance of the Website, including Opacmare S.p.A. (majority shareholder of PIN-CRAFT).
The data may also be used by police authorities and judicial authorities for the purpose of establishing liability in the event of cybercrimes affecting the Website.
The complete list of data processors is available upon request by writing to info@pin-craft.com.
8. DATA RETENTION PERIOD
The data provided for newsletter subscription will be retained as long as regular contact with PIN-CRAFT continues. In any case, periodic communications will be sent in order to verify the continued interest in receiving the newsletter. Data will be deleted where no regular contact with the Data Controller has occurred for two consecutive years.
9. DATA SUBJECT RIGHTS
Pursuant to Articles 15–22 of Regulation (EU) 2016/679, you, as a data subject, are entitled to exercise the following rights:
- Right of access: pursuant to Art. 15 GDPR, you have the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, to obtain a copy thereof. You also have the right to access your personal data and additional information such as the purposes of the processing, the categories of recipients, the retention period and the rights exercisable.
- Right to rectification: pursuant to Art. 16 GDPR, you have the right to obtain the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.
- Right to erasure: you have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds provided for in Art. 17 GDPR applies.
- Right to restriction of processing: in the cases provided for under Art. 18 GDPR, you have the right to obtain restriction of processing.
- Right to data portability: you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit such data to another controller without hindrance, pursuant to Art. 20 GDPR.
- Right to object: you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR.
- Right to lodge a complaint: you also have the right to lodge a complaint with the competent supervisory authority, namely the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
The rights listed above may be exercised by sending an informal request to the Data Controller by post at the address indicated above (under “Data Controller”) or by e-mail to info@pin-craft.com.
In the event of violations or denial of privacy rights, data subjects may also contact the Group Data Protection Officer (DPO) at dpo@opacmare.it.
10. UPDATES AND AMENDMENTS
The Data Controller reserves the right to amend, supplement or periodically update this Privacy Notice in compliance with applicable legislation or measures adopted by the Italian Data Protection Authority.
Such amendments or updates will be communicated to data subjects. Users are invited to review the Privacy Policy regularly in order to verify the updated version and decide whether to continue using the services offered.
This Privacy Notice was last updated on 23 February 2026.