Products Subscriptions Specifications Contact Us

Privacy policy


Information pursuant to art. 13 of Regulation (EU) 2016/679


Dear Customer,

Before providing your personal data, it is necessary that you read a series of information that can help you understand the reasons for which your personal data will be processed, what your rights are and how you can exercise them, in accordance with the provisions of the European Regulation on the protection of personal data 2016/679 and Legislative Decree 196/2003 and subsequent amendments,  the so-called Privacy Code. They also inform you that the processing of your personal data will be based on the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity and confidentiality.


Data Controller

The Data Controller is ROCKET MILANO Srl, Via Achille Grandi, 1, 20060 Truccazzano MI, email privacy@rocket-espresso.com


Personal data subject to processing

Personal Data collected, understood as any information that allows us to identify you directly or indirectly, are the following: Name, Surname, Organization, E-mail.


Purpose and legal basis of the processing

Personal data are processed for:

  1. purposes related to the fulfilment of the request for information made by the site for the technical assistance activity carried out by the Data Controller
  2. Direct marketing activities

The legal basis for the processing of Personal Data for the purposes indicated are:

  • With regard to point 1) the legal basis is art. 6(1)(b) of the GDPR, for the provision of the services or activities requested by the data subject
  • With regard to point 2) the legal basis is art. 6(1)(a) of the GDPR, for the purpose of directly sending advertising material in relation to the Data Controller's products or services

Processing methods

The processing is carried out through automated tools (e.g. using electronic procedures and supports) and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the relevant regulatory provisions.


Safety Precautions

The data are processed lawfully and correctly, adopting the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of the data. The technical and organizational, IT and/or telematic measures used to maintain the data are aimed at the stability and ethical provision of the service.


Recipients or categories of recipients to whom the personal data may be disclosed

The data may be disclosed to employees and collaborators of the Data Controller who, in their capacity as Data Processors, operate in the structure for the provision of the services requested by you and may process your data in compliance with the instructions given by the Data Controller.

Companies or external persons who carry out activities strictly connected and instrumental to the management of the business relationship such as:

  • Dealer;
  • consultants and freelancers, individuals and associates.


Data transfer outside the EU

In the event of data transfer outside the European Union, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with art. 44 et seq. of the GDPR and the applicable legal provisions, stipulating, if necessary, agreements for the transfer of personal data established in third countries that do not guarantee an adequate level of protection of personal data.


Retention period

Personal data will be stored for the duration of the requested technical assistance assignment and, subsequently, for the time in which the Data Controller is subject to retention obligations for the purposes provided for by law or regulation.


Rights of the data subject

You may exercise the rights attributed by EU Regulation 2016/679 by sending the appropriate form (downloadable from the website of the Italian Data Protection Authority) to the contact details indicated above, duly completed.

Your rights are as follows:

  • obtain information in relation to the purposes for which your personal data are processed, the period of processing and the subjects to whom the data are communicated;
  • obtain the rectification or integration of inaccurate personal data concerning you;
  • obtain the erasure of your personal data in the following cases: (a) the data are no longer necessary for the purposes for which they were collected; (b) you have withdrawn your consent to the processing of the data where it is processed on the basis of your consent; (c) you have objected to the processing of personal data concerning you where it is processed for our legitimate interest; or (d) the processing of your personal data is not in accordance with the law. However, we would like to point out that the retention of personal data by joint controllers is lawful if it is necessary to enable you to comply with a legal obligation or to establish, exercise or defend legal claims;
  • obtain that the personal data concerning you are only stored without any other use being made of them in the following cases: (a) you contest the accuracy of the personal data, for the period necessary to allow us to verify the accuracy of such personal data; (b) the processing is unlawful but you still object to the erasure of the personal data by us; (c) the personal data is necessary for the establishment, exercise or defence of legal claims; (d) you have objected to the processing and we are awaiting verification as to whether our legitimate grounds for processing override those of the data subject e) whether there is a public interest;
  • obtain the cessation of processing in cases where your personal data is processed for our legitimate interest and you contest the existence of this interest;
  • receive in a commonly used, machine-readable and interoperable format the personal data concerning you processed by automated means, if they are processed by contract or on the basis of your consent.

Pursuant to EU Regulation 2016/679, you have the right to lodge a formal complaint with the Italian Data Protection Authority (art. 77) in the manner indicated on the Authority's website.


Nature of the data and consequence of failure to communicate

The provision of data is essential for the purpose of processing the same in order to process the requests of the interested party. In the event that the interested parties do not communicate their indispensable data and do not allow the processing, it will not be possible to proceed with the performance and implementation of the proposed services and to follow up on the contractual obligations undertaken, with consequent prejudice to the correct fulfilment of regulatory obligations, such as accounting, tax and administrative obligations, etc.