Privacy Policy

Last updated: August 20, 2026

1. Controller

The controller responsible for processing personal data on this website is:

BARBIERI electronics Srl/GmbH
Via Ignaz Seidner Str. 35
39042 Bressanone/Brixen BZ
Italy

Telephone: +39 0472 834 024
Email: info@barbierielectronics.com

VAT ID: IT 01402900219
Tax Code: 01402900219
REA Number: BZ 118339

In this Privacy Policy, BARBIERI electronics Srl/GmbH is referred to as “BARBIERI”, “we”, “us” or “our”.

2. General information

We process personal data in accordance with Regulation EU 2016/679, the General Data Protection Regulation, GDPR, and applicable Italian data protection legislation.
Personal data is processed only where a valid legal basis exists and only to the extent necessary for the respective purpose. Depending on the processing activity, the legal basis may be consent under Article 6 paragraph 1 letter a GDPR, performance of a contract or steps prior to entering into a contract under Article 6 paragraph 1 letter b GDPR, compliance with a legal obligation under Article 6 paragraph 1 letter c GDPR, or our legitimate interests under Article 6 paragraph 1 letter f GDPR.

3. Website hosting and server logs

Our website is hosted using services provided by Rocket.net.
When you access our website, technical information may automatically be processed, including your IP address, date and time of access, requested pages or resources, referring page, browser type and version, operating system, device information, HTTP status information and other technical connection data.
This processing is necessary to provide the website, maintain system security, detect technical problems and protect the website against unauthorized access and attacks. The legal basis is Article 6 paragraph 1 letter f GDPR. Our legitimate interest is the secure, reliable and technically functional operation of our website.
Technical log data is retained only for as long as required for security, operational and troubleshooting purposes, unless longer retention is necessary to investigate security incidents or comply with legal obligations.

4. Cloudflare

We use Cloudflare services as part of our website infrastructure and security architecture. Cloudflare may process technical connection information such as IP addresses, browser and device information, request information and security related data.
Cloudflare supports the availability, performance and security of our website and helps protect against malicious traffic and cyber attacks. The legal basis for technically necessary processing is Article 6 paragraph 1 letter f GDPR.
Where Cloudflare processes personal data on our behalf, Cloudflare acts as a processor. Data may also be processed outside the European Economic Area. Where required, appropriate safeguards for international transfers are used in accordance with Articles 44 to 49 GDPR.

5. Cookies and consent management

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device by your browser. They do no harm. We use cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognise your browser on your next visit. If you do not wish this, you can configure your browser to inform you when cookies are set and to allow them only in individual cases. Disabling cookies may limit the functionality of our website.

Consent management

We use the consent management tool Real Cookie Banner on our website. The service provider is the German company devowl.io GmbH, Tannet 12, 94539 Grafling, Germany. You can find more information about the data processed through the use of Real Cookie Banner in devowl.io’s privacy policy at https://devowl.io/privacy-policy/
When you give, change or withdraw your consent, the following data is stored in the database of this website: your consent decision (opt-in or opt-out for each service and service group), an anonymised IP address, the time of consent, a unique consent ID, information about your browser and device, and the version of the consent banner displayed at the time of consent. Corresponding information is also stored in cookies or in your browser’s local storage so that your selection is applied on subsequent visits.
The legal basis for storing this data is Art. 6(1)(c) GDPR in conjunction with the obligation to demonstrate consent under Art. 7(1) GDPR. Consent data is stored for the duration of this documentation obligation and then deleted. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link on this website.

6. Contact form

You can contact us using the contact form on our website. We may process your name, email address, message and any other information voluntarily included in your inquiry.
The form is implemented using WPForms. Form submissions are not stored as entries in the WordPress database. The information entered in the form is transmitted to us by email.
We process this data to handle and respond to your inquiry and, where relevant, to initiate or manage a business relationship. Where your inquiry concerns a potential or existing contractual relationship, the legal basis is Article 6 paragraph 1 letter b GDPR. For general business inquiries, the legal basis is Article 6 paragraph 1 letter f GDPR.
Data is retained for as long as necessary to process the inquiry and subsequently in accordance with applicable commercial, contractual and legal retention requirements.

7. Email communication

Emails generated through our contact form and other email communications are processed using Microsoft Exchange.
Microsoft may process information including sender and recipient addresses, message content, attachments, date and time of communication and technical message information.
The legal basis depends on the purpose of the communication. Contract related communication is processed under Article 6 paragraph 1 letter b GDPR, general business communication under Article 6 paragraph 1 letter f GDPR and processing required by statutory retention obligations under Article 6 paragraph 1 letter c GDPR.
Microsoft may process data through infrastructure located in different jurisdictions. Where personal data is transferred outside the European Economic Area, appropriate transfer mechanisms are applied in accordance with applicable data protection law.

8. Live Chat via Zendesk

We provide a live chat function through Zendesk to enable direct communication with BARBIERI.
When you use the chat function, Zendesk may process your IP address, browser and device information, date and time of the chat, chat content and any name, email address or other information you voluntarily provide.
The processing is carried out to respond to inquiries, provide information, support customers and handle requests efficiently. Where the communication relates to a contract or steps prior to entering into a contract, the legal basis is Article 6 paragraph 1 letter b GDPR. For general communication and customer support, the legal basis is Article 6 paragraph 1 letter f GDPR.
Where technically nonessential cookies or comparable technologies are used, the service is activated in accordance with the consent settings selected through our consent management system.
Zendesk may process personal data outside the European Economic Area. Appropriate contractual and organizational safeguards are used where required by applicable data protection law.

9. Newsletter and Mailchimp

You may subscribe to newsletters and marketing communications from BARBIERI.
For this purpose, we may process your email address, first name, last name, company, country, selected mailing lists or areas of interest, consent information, date and time of subscription and technical subscription information.
We use Mailchimp to manage and distribute newsletters. The legal basis for sending marketing communications is your consent under Article 6 paragraph 1 letter a GDPR.
You may withdraw your consent at any time using the unsubscribe function contained in our marketing emails or by contacting us. Newsletter data is retained until you unsubscribe or otherwise withdraw your consent, subject to information that must be retained to document previous consent and withdrawal.
Mailchimp operates infrastructure in the United States and personal data may therefore be transferred to or processed in the United States. Appropriate mechanisms for international transfers are used where required under applicable data protection law.

10. Newsletter analytics and tracking

We use Mailchimp analytics functions to understand how recipients interact with our newsletters. This includes Open Tracking and Click Tracking.
Depending on the technical configuration, Mailchimp may process information such as whether a message was opened, the date and time of opening, links clicked, the date and time of clicks, recipient identifiers and technical information about the device or email client.
We use this information to evaluate the relevance and effectiveness of our communications and to improve future newsletter content.
Where required under applicable data protection and electronic communications law, this processing is based on consent under Article 6 paragraph 1 letter a GDPR. Consent may be withdrawn at any time.

11. Google reCAPTCHA

We use Google reCAPTCHA to protect online forms and website functions against automated submissions, spam and abuse.
reCAPTCHA may process technical and interaction related information such as your IP address, browser information, operating system, device information, referrer information, date and time information and interaction data.
Where consent is required, the service is activated in accordance with the consent settings selected through our consent management system.
Where the processing is strictly necessary to protect our forms and website infrastructure against abuse, processing may also be based on Article 6 paragraph 1 letter f GDPR. Our legitimate interest is the protection of our website and communication systems against spam, automated attacks and misuse.
Google may process information outside the European Economic Area. Appropriate transfer mechanisms are used where required by applicable law.

12. YouTube

Our website contains embedded YouTube videos provided by Google.
When a YouTube video is activated, information such as your IP address, browser and device information, information about the page being visited, interaction with the video and cookies or similar identifiers may be transmitted to Google.
If you are logged into a Google account, Google may associate your interaction with that account.
YouTube content that is not technically necessary is loaded in accordance with the consent settings selected through our consent management system. The legal basis is Article 6 paragraph 1 letter a GDPR.

13. Google Maps

We use Google Maps to display geographic information and help visitors locate BARBIERI facilities or other relevant locations.
When Google Maps is activated, Google may process your IP address, browser and device information, location related information where available, information about the page from which the map is accessed and interaction with the map.
Google Maps is loaded in accordance with the consent settings selected through our consent management system where consent is required. The legal basis is Article 6 paragraph 1 letter a GDPR.

14. Google services and international transfers

Google services may involve processing by Google entities and infrastructure located outside the European Economic Area.
Where personal data is transferred internationally, appropriate transfer mechanisms and safeguards are used in accordance with applicable data protection legislation.
Google may act independently for certain processing activities carried out in connection with its own services.

15. Stripe payments

Certain dedicated BARBIERI payment pages use Stripe to process online payments. These pages may not be accessible directly through the main website navigation and may be provided to customers when online payment is required.
When you make a payment through Stripe, Stripe may process information including your name, email address, billing information, payment information, payment method information, transaction amount, transaction date, IP address, browser and device information and fraud prevention data.
BARBIERI does not need to receive complete payment card credentials where those credentials are processed directly by Stripe.
The processing of payment information is necessary to process the requested transaction and is therefore based on Article 6 paragraph 1 letter b GDPR. Processing required for accounting, taxation, fraud prevention or statutory record keeping may also be based on Article 6 paragraph 1 letter c GDPR or Article 6 paragraph 1 letter f GDPR.
Stripe may process data outside the European Economic Area. Appropriate safeguards are applied where required by applicable data protection law.

16. Recipients and processors

We disclose personal data only where this is necessary for the purposes described in this Privacy Policy, where required by law or where another valid legal basis exists.
Recipients may include website hosting and infrastructure providers, cloud and security providers, email and communication providers, newsletter and marketing service providers, customer support and chat providers, payment service providers, IT service providers, professional advisers and public authorities where disclosure is legally required.
Where service providers process personal data on our behalf, appropriate data processing arrangements are established where required by Article 28 GDPR.

17. International data transfers

Some service providers used by BARBIERI operate internationally. Personal data may therefore be processed in countries outside the European Economic Area.
Where data is transferred to a country that has not been recognized by the European Commission as providing an adequate level of protection, appropriate safeguards are used in accordance with Chapter V GDPR. These may include Standard Contractual Clauses adopted by the European Commission, an applicable adequacy decision, the EU US Data Privacy Framework where the recipient is validly certified, Binding Corporate Rules or other legally recognized transfer mechanisms.
Where required, additional technical and organizational safeguards are implemented.

18. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected and in accordance with applicable legal requirements.
Contact inquiries are retained for as long as necessary to process the inquiry and any subsequent business relationship. Business correspondence may be retained in accordance with applicable commercial and tax requirements. Newsletter subscriber data is retained until consent is withdrawn or the subscription is terminated, subject to information required to document consent and withdrawal. Payment and accounting information is retained in accordance with applicable statutory requirements. Technical security logs are retained only for as long as reasonably necessary for security, diagnostics and incident investigation.
When personal data is no longer required, it is deleted, anonymized or otherwise removed in accordance with applicable requirements.

19. Data security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.
These measures are reviewed in relation to the nature, scope and purpose of the processing and the associated risks.
No method of transmission over the Internet or electronic storage can, however, provide absolute security.

20. Your rights

Under the GDPR, you may have the right to access your personal data, request rectification or erasure, restrict processing, receive data in a portable format, object to processing, withdraw consent at any time and lodge a complaint with a competent supervisory authority.
These rights may be subject to the conditions and limitations provided by applicable law.
Requests concerning your personal data can be sent to:
info@barbierielectronics.com
We may request appropriate information to verify your identity before responding to a request.

21. Right to object and withdrawal of consent

Where personal data is processed on the basis of Article 6 paragraph 1 letter f GDPR, you have the right to object to processing relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Website consent preferences can be changed through the Cookie Settings. Newsletter consent can be withdrawn using the unsubscribe link contained in our marketing emails or by contacting BARBIERI.

22. Right to lodge a complaint

If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.
For BARBIERI electronics Srl/GmbH, the relevant Italian supervisory authority is:
Garante per la protezione dei dati personali
You may also contact another competent supervisory authority where permitted under the GDPR.

23. Obligation to provide personal data

You are generally not legally required to provide personal data when visiting our website.
Certain information may, however, be necessary to use specific services. For example, an email address is required for us to respond to an inquiry or provide a newsletter subscription. Payment information is required where you choose to complete an online payment.
If required information is not provided, the respective service may not be available.

24. Automated decision making

BARBIERI does not use personal data collected through this website for automated decision making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
Automated technical mechanisms may be used for security purposes, including spam and abuse detection.

25. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our website, services, technical infrastructure or legal requirements.
The current version is always published on this website. The date of the most recent revision is stated at the beginning of this document.