Newsletter Privacy Notice

Website notice – Newsletter form notice
Document 109 – Ver. 8.0 of 01-09-2026

According to the European Data Protection Act (art. 13, GDPR 2016/679) the User takes note that Riva Industria Mobili S.p.A. undertakes to process the User’s personal data according to the principles of accuracy, lawfulness and transparency and protection of confidentiality. Therefore, the User is informed that:

A. Types of data

The subject of the processing may be his personal data, such as his email address, as well as data obtainable from tracking pixels collected through the newsletter.

B. Data controller

The Data Controller is Riva Industria Mobili S.p.A., Via Milano, 137, 22063 Cantù (CO), Italy, VAT identification number 01404340133, reachable by phone at +39 031.733094 or by mail at privacy@riva1920.it.

C. Source of personal data

The personal data in the Data Controller’s possession are collected directly from the data subject.

D. Data processing purposes and legal basis

The processing of your data, collected and stored in connection with the completion of this form, has as its legal basis your consent (art. 6, par. 1, letter a) of the GDPR) and is carried out for the following purpose: sending commercial communications by means of newsletters.

Communications by means of e-mail

The newsletter may contain tracking pixels, which collect specific personal data. These pixels have the following legal bases and related purposes:

institutional (art. 6, par. 1, letter c), of the GDPR): legal obligation to forward contractual amendments, security communications, accident notifications, fraud alerts, contribution deadlines;
for technical and security needs (art. 6, par. 1, letter b), of the GDPR): welcome messages, follow-ups following a registration, registration confirmations, notifications relating to operations carried out on a digital platform, account confirmations, password resets or processes necessary to protect the user, order confirmations or transmission of temporary credentials, etc.;
for aggregate and anonymous statistical purposes (art. 6, par. 1, letter f), of the GDPR): to measure the global open rate without identifying the individual recipient, for deliverability and spam prevention;
to evaluate and improve the performance of promotional campaigns based on the observed behaviours (art. 6, par. 1, letter a), of the GDPR);
profiling (art. 6, par. 1, letter a), of the GDPR): to obtain information from reading communications regarding potential tastes, interests and preferences, with the aim of creating commercial profiles (segmentation and personalisation activities).

E. Data recipients

Within the limits relevant to the indicated processing purposes, your data may be communicated, where appropriate, to other entities connected to the processing activities, internal and external to the Data Controller, such as employees and similar entities, partners, consultancy firms, private companies. Your data will not be disseminated in any way.

F. Transfer of data to third countries

The data collected could be subject to transfer to third countries outside the European Economic Area, pursuant to an adequacy decision by the Commission or in presence of appropriate guarantees, to fulfil the purposes set out above.

G. Retention period

The collected data will be kept for a period not exceeding the achievement of the purposes for which they are processed (“storage limitation principle”, art. 5, GDPR) or according to the deadlines provided by the legal regulations. Verification of the obsolescence of the data retained in relation to the purposes for which they were collected is carried out periodically.

H. Rights of the data subject

The data subject always has the right to request from the Data Controller access to your data, rectification or erasure thereof, restriction of processing or the possibility to oppose the processing, to request data portability, to withdraw consent to the processing, by asserting these and the other rights provided for in the GDPR by simple communication to the Data Controller. The data subject may also lodge a complaint with a supervisory authority.

I. Obligation to communicate data

We inform you that the provision of data is optional for some fields and mandatory for others (indicated by an asterisk), and any failure to provide it results in the failure to perform the requested service. With respect to the possible use of tracking pixels based on your consent, the data subject may continue to receive the newsletter without the use of tracking pixels, by selecting the relevant box in the subscription form.

J. Data processing methods

The personal data you provide will be the subject of processing operations in compliance with the above-mentioned legislation and the confidentiality obligations that inspire the Controller’s activity. The data will be processed both with computer tools and on paper media, as well as on any other type of suitable media, in compliance with the appropriate security measures under the GDPR.

K. Automated decision-making processes

Automated decision-making processes are not provided.

The consents given on subscription remain valid until revoked, which may be communicated to the Data Controller at any time at privacy@riva1920.it.