Privacy policy

The controller for the processing of personal data within the meaning of Art. 4(7) GDPR is:

ATRIUM GmbH, Griesplatz 6/1, 39011 Lana (BZ), Italy · P.IVA 02747620215 · Phone +39 379 335 5215 · Email info@atrium.bz

A data protection officer is not required by law and has not been appointed. Please address any privacy matters directly to the contact details above.

We process personal data exclusively within the framework of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Italian data protection code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).

Personal data means any information relating to an identified or identifiable natural person — for example a name, address, email address or IP address. We collect only the data required for the respective purpose, and we neither pass it on for advertising purposes nor sell it.

Each time this website is accessed, your browser transmits technically necessary data that our hosting provider stores in server log files. The following is recorded:

This data is used solely to deliver the website, to ensure system security and to analyse errors. It is not combined with other data sources and not evaluated for marketing purposes. Log files are deleted or anonymised after 30 days at the latest.

If you contact us by email or telephone, we process the details you provide — your name, contact data and the content of your enquiry — solely in order to handle and answer your request.

The contact form on this website does not transmit any data to our server. Your entries are processed in your browser only and, on submission, transferred into a prepared message in your own email program. Transmission therefore takes place via your email provider, not via this website.

Please note that unencrypted email communication can have security gaps. If you would prefer to send sensitive information by another route, just let us know.

The processing of your enquiry data is based on Art. 6(1)(b) GDPR where it serves to prepare or perform a contract, and on Art. 6(1)(f) GDPR — our legitimate interest in answering enquiries and in business communication — where there is no contractual relationship.

The processing of access data is based on Art. 6(1)(f) GDPR: our legitimate interest in the technically secure and error-free operation of this website.

Where we ask for your consent for a specific processing operation, Art. 6(1)(a) GDPR is the legal basis. You may withdraw consent at any time with effect for the future.

This website sets no tracking or marketing cookies and uses no analytics tools such as Google Analytics. No usage profiles are created, no behaviour is followed across websites and no data is passed to advertising networks.

The fonts used are served from our own server, so no connection is made to external font providers and no data is transferred to third parties in that context. A cookie banner is therefore not required.

The photographs on this website are delivered through the image network of Unsplash (Unsplash Inc., USA). When an image loads, your browser transmits technically necessary connection data — in particular your IP address — to that provider. The legal basis is Art. 6(1)(f) GDPR (efficient and fast delivery of the website). Further details can be found in Unsplash's privacy policy.

On the contact page we link to Google Maps to help you find us. No map is embedded: data is transmitted to Google only once you deliberately click the link. The subsequent processing is governed by Google's privacy policy.

This website is hosted with a service provider inside the European Union that processes data exclusively on our behalf and on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Within our company, your data is made available only to those people who are responsible for handling your request. It is disclosed to third parties only where this is necessary to perform a contract (for example to certification bodies or public authorities in the course of a commissioned project), where we are legally obliged to do so, or where you have expressly agreed.

Any transfer to countries outside the European Economic Area takes place only to the extent described above for image delivery and is based on the standard contractual clauses adopted by the European Commission.

Enquiries that do not lead to an engagement are deleted no later than twelve months after the last contact. Data from commissioned projects is retained for the duration of the statutory tax and commercial retention periods — in Italy generally ten years.

Server log files are deleted or anonymised after 30 days at the latest.

In relation to the personal data we process, you have the following rights at any time:

If you believe that the processing of your data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority. In Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome (garanteprivacy.it).

You may also contact the supervisory authority in your place of residence or work. We would ask you to contact us first at info@atrium.bz — most concerns can be resolved more quickly that way.

This website is served exclusively over an encrypted HTTPS (TLS) connection, which protects the data transmitted between your browser and the server from being read by third parties.

In addition, we take appropriate technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access. These measures are reviewed continuously in line with technical developments.

We update this privacy policy whenever the legal situation, our services or the technical implementation of this website change. The version published here applies to your visit.

If you have any questions about data protection, you can reach us at info@atrium.bz or by phone on +39 379 335 5215.