English courtesy translation. The Italian privacy notice remains the authoritative version in the event of any discrepancy.
1. Data controller
The data controller is Full Metals S.r.l., tax code and VAT number 04099720247, REA no. 1559148, with registered office at Piazzale delle Medaglie d'Oro 7, 00136 Rome (RM), Italy, certified email fullmetalssrls@pec.it. For questions about personal-data processing or to exercise your rights, email info@fullmetals.it.
No Data Protection Officer (DPO) has been appointed.
2. Scope of this notice
This notice covers data processed while browsing the Full Metals website, using the contact form, contacting us directly by email or telephone, and downloading published authorisations and certifications. It does not apply to third-party websites reached through external links.
3. Data processed
Data provided for a business enquiry
The form requests the company name, contact person's full name, email address, telephone number and a description of the enquiry. The material category is optional. We may also process information that the user chooses to include in the message or provide during subsequent communications.
Processing of telephone numbers
The telephone number is collected solely to contact the enquirer and provide the requested quotation service, including any clarification required on materials, quantities, collection frequency or site surveys connected with the quotation. It is not used for marketing, profiling or unsolicited promotional communications.
Please do not submit special-category personal data, criminal-offence data or information that is unnecessary for the business assessment.
Technical browsing data
The systems that provide the website may automatically process IP address, request date and time, visited page, browser and device information, technical headers, and data needed for security and troubleshooting. This information is normally contained in hosting-service logs and is not used by Full Metals to profile users.
Downloads of authorisations and certifications
Downloading documents does not require registration and does not cause Full Metals to collect additional information beyond the ordinary technical browsing data generated by the file request.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, carrying out an initial commercial assessment, preparing quotations and arranging site surveys. Telephone numbers are processed solely to provide the requested quotation service. | Taking steps at the data subject's request prior to entering into a contract, Article 6(1)(b) GDPR. |
| Operating, providing and protecting the website, preventing abuse and resolving technical faults. | The controller's legitimate interest in website security and correct operation, Article 6(1)(f) GDPR. |
| Complying with legal obligations or responding to public-authority requests. | Compliance with a legal obligation, Article 6(1)(c) GDPR. |
| Establishing, exercising or defending legal claims. | The controller's legitimate interest in protecting its rights, Article 6(1)(f) GDPR. |
Information received through the form is not used for newsletters, profiling or automated promotional campaigns. Any future marketing use will require a dedicated notice and, where necessary, separate consent.
5. Provision of data
Fields marked with an asterisk are required to identify and respond to the enquiry. Without this information, Full Metals cannot handle the request. The telephone number is mandatory and is used solely to provide the requested quotation service. The material category is optional and omitting it does not prevent submission.
Article 13 GDPR summary
The essential information about the processing of data submitted through the contact form is summarised below.
| Information | Details |
|---|---|
| Purpose | Handling the enquiry, carrying out an initial commercial assessment, preparing a quotation and arranging any site survey. Technical data is processed for security, abuse prevention and website operation. |
| Legal basis | Pre-contractual steps requested by the data subject, Article 6(1)(b) GDPR, for the business enquiry; legitimate interests, Article 6(1)(f), for security and protection of rights; legal obligation, Article 6(1)(c), where applicable. The form does not require marketing consent. |
| Recipients | Authorised Full Metals personnel, the website technician, email and support providers, Resend and its subprocessors, OpenAI and its subprocessors, and public authorities where required by law. Data is neither sold nor publicly disclosed. |
| International transfers | OpenAI and Resend may process data outside the European Economic Area, particularly in the United States. Depending on the circumstances, transfers rely on adequacy decisions or Standard Contractual Clauses; the safeguards and relevant links are set out in section 9. |
| Retention | Enquiries and correspondence are retained for 12 months after the last contact, then deleted or anonymised, unless the relationship continues, a legal obligation applies or retention is needed to protect a right. Technical and service data follows the periods set by provider agreements. |
| Provision and consequences | Company name, contact name, email, telephone number and enquiry description are required; the material category is optional. Without the required information, the form cannot be submitted and Full Metals cannot handle the enquiry or prepare a quotation. There are no further consequences and no marketing consent is required. |
6. How the contact form works
When the user submits the form, the data is sent over an HTTPS connection to the website's contact endpoint, which performs the necessary technical checks and forwards it to Resend (Plus Five Five, Inc.), the email-delivery provider. Resend then delivers the message to info@fullmetals.it. The contents are not stored in a website application database; after delivery, the message is handled in the email systems used by Full Metals. The hosting provider and Resend may process message contents, transmission metadata and technical data to the extent necessary for delivery, security, troubleshooting and operation of the service.
7. Retention
Business enquiries and related correspondence are retained for 12 months after the last contact, then deleted or anonymised, unless the relationship continues, legal obligations apply, or retention is necessary to protect a right. Technical data is retained only for the periods necessary for security, operation and support, in accordance with the settings and agreements applicable to the hosting and email-delivery services. Resend retains service data in accordance with the applicable plan, settings and agreements and states in its Data Processing Addendum that customer data is deleted within 90 days after termination of the service, subject to legal obligations.
8. Recipients and authorised persons
Within the limits of their respective duties, data may be processed by:
- expressly authorised Full Metals personnel;
- the technician responsible for website management and maintenance, subject to confidentiality obligations and, where applicable, appointed as a processor;
- email and technical-support providers, to the extent required to provide their services;
- Resend (Plus Five Five, Inc.), acting as a processor to forward the form contents to the Full Metals email inbox, together with its authorised subprocessors;
- OpenAI, which hosts the website through ChatGPT Sites and processes hosted data on behalf of the controller, together with subprocessors used for infrastructure, security and content delivery;
- public authorities or other parties where disclosure is required by law.
Personal data is neither publicly disclosed nor sold.
9. International transfers
ChatGPT Sites does not currently guarantee exclusively European data residency. Where hosted data is transferred outside the European Economic Area, OpenAI states that it uses an adequacy decision or agreements incorporating Standard Contractual Clauses approved by the European Commission. Further information is available in the ChatGPT Sites Data Processing Addendum.
Resend states that its primary processing operations take place in the United States and that it uses the European Commission's Standard Contractual Clauses for transfers outside the European Economic Area that are not covered by an adequacy decision. Further information is available in the Resend Data Processing Addendum and its subprocessor list.
10. Data-subject rights
Where Articles 15–22 GDPR apply, data subjects may request access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. They may also withdraw consent, where given, without affecting the lawfulness of processing before withdrawal.
Requests may be sent to info@fullmetals.it. Data subjects may also lodge a complaint with the Italian Data Protection Authority.
11. Automated decisions and updates
Full Metals does not use the website to make decisions based solely on automated processing and does not conduct profiling. This notice will be updated when website features, services or processing methods change. The date of the latest revision appears at the top of this page.