Last updated: July 14, 2025
This privacy policy for IDRA S.r.l. (“IDRA,” “we,” “us,” or “our”), headquartered at Via W. Tobagi, 3, 20068 Peschiera Borromeo (MI), VAT no. 11955900151, describes how and why we may collect, store, use, and/or share (“process”) your personal data when you use our services (“Services”), for example when you:
- Visit our websites: https://www.testineidra.com or https://www.idratrainingheads.com
- Contact us through site forms, email, or WhatsApp.
If you have any questions or concerns, please read this notice carefully to understand your privacy rights and choices. You can contact us at any time at info@idraprofessional.com.
SUMMARY OF KEY POINTS
- We only collect personal data voluntarily provided by users through the contact form.
- We do not collect sensitive data.
- We do not use profiling cookies or tracking tools.
- We do not sell products online or collect data for commercial or advertising purposes.
- Data is processed only to respond to inquiries and manage communications.
- Data may be processed by appointed technical providers.
- The website is intended for adult users.
- You have rights guaranteed by current legislation (GDPR).
INDEX
- What data we collect
- How we process your data
- Legal bases for processing
- When and with whom we share personal data
- Use of cookies and similar technologies
- Data retention period
- How we protect your data
- Children’s data
- Your privacy rights
- Do-Not-Track controls
- Updates to this policy
- How to contact us
- How to access, update, or delete your data
1. What data we collect
We collect only the information voluntarily provided by users via the forms on the website. The collected data includes:
- First and Last Name
- Company/Salon
- Address, City, Province
- Phone number
- Email address
- Free-text message entered by the user
We do not collect sensitive data or receive information from third parties.
2. How we process your data
We process personal data to:
- Respond to inquiries submitted via the contact form;
- Manage communications with users;
- Ensure site security and prevent misuse.
We do not send promotional communications or perform profiling.
3. Legal bases for processing
Pursuant to Regulation (EU) 2016/679 (GDPR), we process personal data only when at least one of the following conditions is met:
- Explicit consent provided through form submission;
- Need to fulfill pre-contractual obligations at the request of the data subject;
- Legitimate interest of the Data Controller in managing communications.
4. When and with whom we share personal data
Personal data is not disclosed or transferred to third parties for commercial purposes. However, for technical and organizational needs, data may be processed by external entities appointed as Data Processors, including:
- Providers of hosting, development, and website maintenance services, such as Miller Tech S.r.l., part of the Miller Group S.r.l.
These entities process data only on the instructions of the Data Controller and in compliance with GDPR requirements.
5. Use of cookies and similar technologies
We only use technical cookies necessary for the correct functioning of the site. No profiling or tracking cookies are used. A plugin is available that allows users to manage cookie preferences on their first visit.
6. Data retention period
Personal data is retained for the time necessary to respond to the inquiry or, if applicable, to fulfill legal obligations. Once the retention period ends, data will be deleted or anonymized.
7. How we protect your data
We adopt appropriate technical and organizational measures to safeguard personal data, preventing unauthorized access, loss, disclosure, or alteration. However, no system can guarantee absolute security.
8. Children’s data
This site is intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware of the accidental collection of such data, we will proceed with its deletion.
9. Your privacy rights
You have the right to:
- Access your personal data;
- Request its correction or update;
- Request its deletion;
- Restrict or object to processing;
- Obtain data in portable format;
- Withdraw previously given consent.
To exercise these rights, you can write to info@idraprofessional.com. We will respond within 30 days as provided by Article 12 of the GDPR.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
10. Do-Not-Track controls
This website does not currently respond to Do-Not-Track signals sent by browsers, as it does not perform tracking.
11. Updates to this policy
We reserve the right to update this policy to reflect regulatory or technical changes. The updated version will be published on this page with the revision date.
12. How to contact us
For any information or request, you can contact us at:
IDRA S.r.l.
Via W. Tobagi, 3 – 20068 Peschiera Borromeo (MI)
Email: info@idraprofessional.com – Tel: 022131966
13. How to access, update, or delete your data
You can request access, correction, or deletion of your personal data by emailing info@idraprofessional.com. Your data will be processed in accordance with your rights and the timeframes set by the GDPR.