Privacy Policy
This Privacy Policy describes the processing of data on the Sun&Service information website. Updated: 22 October 2026, version 2026-10-22-leads-3.
Data controller and contact details
The data controller is S. & S. di Zambetta Giovanni Armando, VAT No. IT-02240320180, with its registered office at Via Giotto 2/D, 27012 Certosa di Pavia (PV). For information and requests concerning your data: . You may also write to the registered office.
Data, purposes and legal bases
- Requests for information, quotations and support: we process the contact details and content you submit to respond to you and handle the pre-contractual or contractual activities you request (Article 6(1)(b) GDPR). The form requires your first name, last name, email, phone number and message; your business name, professional sector / contact type and interests are optional. Without the necessary data, we cannot handle your enquiry through the form. Subsequent enquiries from the same email address are associated with the same contact, retaining the enquiry history.
- Browsing and security: the infrastructure hosting the website may process IP addresses, browser data and technical logs to deliver and protect the service, on the basis of a legitimate interest in security and proper operation (Article 6(1)(f) GDPR).
- Legal obligations: data needed to fulfil applicable legal obligations are processed under Article 6(1)(c) GDPR.
- External content: Elfsight reviews on the homepage and the YouTube player on the ReWax page are embedded and may load when you visit the relevant page. YouTube uses privacy-enhanced mode, which does not eliminate all data processing by the provider.
- Sun&Service news and updates: the optional subscription is available only in the Italian Contact form. The English Contact form does not offer marketing subscriptions and does not add contacts to the promotional list. Enquiry notifications sent through Brevo are separate from marketing subscriptions. Only if you select the optional checkbox in the Italian form do we use your email address for information about new products, articles, service updates and useful Sun&Service communications, on the basis of consent (Article 6(1)(a) GDPR). This option is not preselected and does not affect the handling of your enquiry. We also record a negative choice, the date and time, the wording and the policy version. A contact who has not selected this option will not be subscribed to the list.
Form protection: Cloudflare Turnstile
The Contact form uses Cloudflare Turnstile in managed mode to help prevent spam and automated requests. When you open the form on the official domain, your browser loads the Cloudflare service, which may process your IP address and technical browser and device signals to carry out the check. The website server verifies the token before recording a new enquiry. The website code does not send your name, email, phone number or message content to Turnstile; the database retains only a temporary token hash to prevent reuse. This check protects the form and is separate from optional consent to news and updates. For more information, see the Cloudflare Turnstile Privacy Policy.
How the Contact form works
By selecting “Send enquiry”, the website sends your data to the server and records your contact details, interests, source page, message, date and time, and privacy choices in the Cloudflare D1 database used by the website. After saving the enquiry, it prepares an email notification for Sun&Service through the Brevo transactional service, without opening your email application. The email address you enter is used as the reply-to address. A temporary notification delivery problem does not delete an enquiry that has already been saved. Please do not include health data or unnecessary information about other people.
If you have chosen to receive news and updates through the Italian form, the website sends your email address to Brevo to create or update the contact and add it to the dedicated list. Without this choice, the form does not add you to the list. You may withdraw consent using the unsubscribe link in campaign emails or by contacting the data controller. A subsequent enquiry without the checkbox selected does not by itself withdraw an earlier subscription: use the unsubscribe link or contact the data controller. The system does not automatically reverse unsubscribes already recorded in Brevo.
The English Contact form does not offer a marketing subscription. Sending an enquiry through it does not subscribe you to a promotional list.
Recipients and external services
Data are accessible to the data controller, authorised persons and providers needed for hosting, email and IT support, according to their respective roles. We use Brevo for email notifications and, with consent, management of the updates list. The service receives the data needed for each function: the notification to the controller includes the enquiry details, while list synchronisation uses the email address. Sun&Service does not publicly disclose these data. This version of the website is hosted on ChatGPT Sites; access to the restricted version may require authentication managed by the platform.
When pages containing this content load, your browser may communicate directly with Elfsight or Google/YouTube, also transmitting technical data such as your IP address. Links to WhatsApp and social networks open external services only when you select them. Processing on those services is also governed by the providers’ own privacy policies: Elfsight, Google and YouTube, WhatsApp, Brevo, Cloudflare, OpenAI.
International transfers
External providers may also process data outside the European Economic Area. Information about the countries and mechanisms used, including any adequacy decisions or standard contractual clauses, is available in their privacy policies. You may ask the data controller for information about the safeguards applicable to the processing of your data.
Retention
Contact details, enquiries and correspondence are retained for as long as necessary to respond to and manage your enquiry and any subsequent relationship; retention may continue to comply with legal obligations or to establish, exercise or defend a legal claim. Retention periods for infrastructure logs and external services depend on the respective providers; you may ask the data controller for clarification.
Your rights
In the cases provided for by Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may withdraw consent to updates using the unsubscribe link in campaign emails or by writing to the contact details above, without affecting the lawfulness of earlier processing, and lodge a complaint with the Italian Data Protection Authority. Sun&Service does not use this website to make automated decisions producing legal effects concerning the data subject.
For cookies and external services, see the Cookie Policy (Italian).