Notice
Privacy policy
Who processes the personal data of people who visit this website or write to the company, which data, why, for how long and with what rights. This is the information notice required by Article 13 of Regulation (EU) 2016/679 (GDPR), updated on 15 October 2026.
Data controller
The data controller is Stil Casa di Marcheselli Angelo & C. s.n.c., Via Milano 195, 46019 Cogozzo di Viadana (MN), Italy — tax code and VAT no. 01764450209, registered with the Mantua Companies Register, REA MN 180100. For any question about your personal data, or to exercise your rights, write to stilcasa@stil-casa.it — for formal communications also to the certified email address (PEC) stilcasa@casellapec.info — or call +39 371 366 7407. The company has not appointed a data protection officer (DPO): for a business like this one it is not mandatory (Article 37 GDPR), and requests are answered directly by the controller.
Browsing data
Like every website, this one receives some technical information from its visitors' browsers: the IP address, the date and time, the page requested and the outcome of the request, the referring site, and the type of browser and operating system. It is recorded in the logs of Vercel, the service that hosts the website. What it is used for: to deliver the pages, to find and fix errors, and to protect the website from abuse and attacks. It is not used to identify visitors and is not combined with other data. Legal basis: the controller's legitimate interest in running the website and keeping it secure (Article 6(1)(f) and Recital 49 GDPR). The assessment of this interest against your rights is available on request. Retention: the logs are deleted automatically after a short period, 30 days at most; longer only if they are needed to establish an offence. This data is sent by your browser itself in order to view the website: without it, the pages cannot be displayed.
Visit statistics
To know how many people visit the website and which pages they look at, the website uses Vercel Web Analytics: a measurement tool that does not use cookies and does not store anything on your device. How it works: for each page viewed, a script served by the website itself sends the page address without parameters, the site you came from, the country, region and city derived from the IP address, the type of device, the browser and the operating system. The IP address is not stored. To count the visits of the same day, Vercel derives from the request a code that it does not associate with your IP address and that it deletes within 24 hours: the next day, nothing links two visits together. What they are used for: only aggregate statistics about this website — the most viewed pages, where visitors come from, which devices they use — to improve it. They are not combined with other data, do not follow your browsing on other websites and are not used to profile anyone. Legal basis: consent is not required, because the tool has the features that the Guidelines of 10 June 2021 (§ 7.2) of the Italian data protection authority, the Garante, require for treating an analytics tool like a technical cookie (Article 122(1) of the Italian Privacy Code). Retention: whatever makes it possible to recognise a visit is deleted within 24 hours; only the aggregate counts remain, available for 12 months. You can ask not to be counted at any time with the button below: your browser remembers it until you clear the website's data. If your browser sends the Global Privacy Control signal, your visits are not counted anyway.
Requests for information
The contact form sends nothing to the website: it opens your email program with the message already written, and the data reaches the company only if you decide to send the email. The same applies if you write to one of the addresses on the website or phone us. Data processed: name, company, email address, telephone number if you give it, the text of the message and anything you choose to attach. What it is used for: to reply to you and follow up on what you ask for — a quotation, a sample, an order. Legal basis: the pre-contractual steps you request (Article 6(1)(b) GDPR); if you write on behalf of a company, the controller's legitimate interest in replying to business contacts (Article 6(1)(f)); for correspondence relating to a business deal, the legal obligation to keep it (Article 6(1)(c)). Retention: 24 months from the last contact if the request has no follow-up; if it leads to a quotation, an order or a contract, the ten years required for business correspondence (Articles 2214 and 2220 of the Italian Civil Code). Providing this data is optional, but without contact details we cannot reply.
Reserved area
The part of the website used to manage its content is reserved for authorised staff, who access it with a password. Visitors do not use it and receive nothing from it; for those who log in there is a single technical session cookie, described in the cookie policy.
Who receives the data
The data is processed by the company's staff who are authorised and instructed to do so (Article 29 GDPR and Article 2-quaterdecies of the Italian Privacy Code) and, on the controller's behalf, by the providers that run the website and the email, appointed as processors (Article 28 GDPR): · Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States — hosts the website and keeps its logs and visit statistics; · Qboxmail S.r.l., Italy — runs the company's email, on servers in the European Union. For some technical data that its service generates by itself, such as the platform's performance and security measurements, Vercel acts as an independent controller, under its own privacy notice. The data may be disclosed to the authorities when the law requires it. It is not published, sold or used for advertising.
Transfers outside the European Union
Vercel Inc. is based in the United States, and the data it processes for the website may also be processed there. The transfer relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795): Vercel is certified under it, as shown by its listing. In addition, Vercel's data processing agreement contains the standard contractual clauses approved by the Commission (Implementing Decision (EU) 2021/914), which would apply if the adequacy decision ceased to be valid. Email stays within the European Union.
Your rights
You can ask at any time: · to know whether and which of your data we process, and to receive a copy (access, Article 15 GDPR); · to have it corrected or completed (rectification, Article 16); · to have it erased (Article 17); · to have its processing restricted (Article 18); · to receive the data you gave us in a commonly used format, or to have it transmitted to another controller (portability, Article 20). Just write to stilcasa@stil-casa.it. We reply free of charge within one month; if the request is complex this may be extended by two further months, in which case we will tell you (Article 12 GDPR). To protect your data we may ask you to confirm your identity.
Right to object
On grounds relating to your particular situation, you can object at any time to the processing based on the controller's legitimate interest: the browsing logs and business emails (Article 21 GDPR). The controller will then stop processing that data, unless it demonstrates compelling legitimate grounds, or the data is needed to establish, exercise or defend legal claims. Just write to stilcasa@stil-casa.it. You can object to the visit statistics without giving reasons and without writing to anyone, with the button in the “Visit statistics” section.
Complaints
If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali — Piazza Venezia 11, 00187 Rome, Italy, https://www.garanteprivacy.it — or with the supervisory authority of the EU country where you live or work (Article 77 GDPR). You can also take legal action (Article 79 GDPR and Article 140-bis of the Italian Privacy Code).
Automated decisions
The website takes no automated decisions and does not profile its visitors (Article 22 GDPR).
Links to other websites
Some links lead to services run by others, which open only if you choose them and have their own rules: · the map of our premises opens on Google Maps in a new tab, where Google's privacy policy applies; · the product configurator is a separate application, with its own privacy notice. The website does not embed content from others — videos, maps, social buttons — and the fonts are served by the website itself.
Changes to this policy
Version of 15 October 2026. If the website changes the way it processes data — for example with a new third-party service — this policy will be updated before the change takes effect, with the new date; important changes will be flagged at the top of the page.