top of page

Privacy Policy

Privacy Policy

​

NOTICE ON THE PROCESSING OF PERSONAL DATA

The user’s personal data is processed by Rodj Engineering, the data controller, in accordance with the principles of personal data protection set out in the GDPR (Regulation 2016/679) and applicable national legislation.

 

SOURCE OF PERSONAL DATA

Rodj Engineering collects personal data by recording information:

  • collected directly from the data subject, at the time of initial contact or subsequent communications

  • provided by third parties

​

METHODS AND PURPOSES OF DATA PROCESSING

 

1. We hereby inform you that your data will be processed using the following methods:

  • Mixed – electronic and paper-based

for the following purposes:

  • Compliance with legal obligations relating to commercial relationships

  • General customer analysis

  • Approval of financial statements

  • Procurement

  • Promotional activities

  • Processing, printing, enveloping and dispatch of invoices

  • Provision of the service

  • Management of disputes (contracts, orders, deliveries, invoices)

  • Personnel management

  • Customer management (contracts, orders, shipments and invoices)

  • Sending courtesy communications and/or promotional/informative material

  • Marketing (market analysis and surveys)

  • Offering goods and services via mailing lists

  • Profiling for promotional purposes

  • Activity scheduling (work planning and monitoring)

  • Promotion of publishing products and marketing

  • Contractual relationships with customers/suppliers

  • Market research, statistical studies and checks on customer satisfaction with products

  • Customer satisfaction surveys

  • Consumer and user protection services

  • Payment acceptance service

  • Electronic payment methods (credit and debit cards, e-money)

  • Mail order or telephone sales

In particular, for the purposes specified below, the user’s data will be processed ONLY upon the user’s explicit consent:

  • profiling activities

​

LEGAL BASIS

2. The legal bases on which the processing of general data is founded, in accordance with Article 6 of the GDPR, are:

  • Contract;

  • Consent;

The company processes users’ optional data on the basis of consent, namely through the explicit acceptance of this privacy policy and in accordance with the methods and purposes described below.

​

CATEGORIES OF RECIPIENTS

3. Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be disclosed exclusively for the purposes specified above to the following categories of recipients:

  • Banks and credit institutions;

  • Customer service call centres;

  • Consultants and independent professionals, including those practising in partnership;

  • Authorised persons;

  • External data processors;

  • Internal data processors;

  • Companies and businesses;

 

CATEGORIES OF PERSONAL DATA

4. In accordance with Article 14 of the GDPR, as the data has not been obtained directly from the data subject, the categories of personal data being processed are as follows:

 

  • Tax identification number and other personal identification numbers (health cards);

  • Identification data (business name or company name, or first name and surname of natural persons, registered office address, telephone, fax, email, tax details, etc.);

  • Data relating to economic and commercial activity;

  • Behavioural data (creation of user, consumer and taxpayer profiles, etc.; personality and character trait profiles);

  • Name, address or other personal identification details (first name, surname, age, gender, place and date of birth, home address, work address);

  • Personal data;

​

RETENTION PERIOD

The data retention period is:

The data will be processed for as long as necessary to carry out the existing commercial relationship and for a further ten years from the date of acquisition.

​

RIGHTS OF THE DATA SUBJECT

5. Pursuant to European Regulation 679/2016 (GDPR) and the national legislation in force, the data subject may, in accordance with the procedures and within the limits set out in the applicable legislation, exercise the following rights:

  • request confirmation of the existence of personal data concerning them (right of access of the data subject – Article 15 of Regulation 679/2016);

  • know its origin;

  • receive a comprehensible communication thereof;

  • obtain information regarding the logic, methods and purposes of the processing;

  • request the updating, rectification, supplementation, erasure, anonymisation, or blocking of data processed in breach of the law, including data no longer necessary for the purposes for which they were collected (right to rectification and erasure – Articles 16 and 17 of Regulation 679/2016);

  • the right to restrict and/or object to the processing of data concerning them (Article 18 of Regulation 679/2016);

  • the right to withdraw consent;

  • the right to data portability (Article 20 of Regulation 679/2016);

  • in cases where processing is based on consent, to receive the data provided to the data controller in a structured, machine-readable format commonly used by electronic devices;

  • the right to lodge a complaint with the supervisory authority (right of access by the data subject – Article 15 of Regulation 679/2016).

​

6. The data controller for your personal data is:

 

—

Last updated: 01/05/2026

bottom of page