1. Data controller and DPO.
The data controller is Rait 88 s.r.l. (P.IVA 02099701001), with registered office in Rome (RM), Via Nomentana 761, zip code 00137.Contact email: info@rait88.com - Tel.: +39 06 2292740 / +39 06 2292770. A Data Protection Officer (DPO) has been appointed, Avv. Francesco Mambrini, who can be contacted by email: dpo@rait88.com.
2. Types of data processed
Only personal identification and contact data provided through the appropriate communication section of the website will be processed, such as: first and last name (where indicated), email address, telephone number (optional). The data subject is requested to: not to enter data in excess of the minimum necessary for the request; not disclose data belonging to special categories under Article 9 GDPR (e.g., data relating to health, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data relating to sexual life or sexual orientation, racial or ethnic origin); not provide personal data referring to third parties, unless this is strictly necessary and the data subject has previously acquired a suitable legal basis that legitimizes the communication to the Data Controller, assuming all related responsibility.
3. Purpose of processing and legal basis
Data are processed to: manage and respond to requests for information, reports, contact requests, quotes or other communications however related to the activity of Rait 88 s.r.l.; carry out any activities consequent and closely related to the request (e.g. further clarification, followup on the same subject). The main legal basis for processing is the consent of the data subject (Art. 6, para. 1, lett. a, GDPR), manifested by sending the request. Further processing may be carried out, if necessary, to: fulfill legal obligations to which the Data Controller is subject (Art. 6(1)(c) GDPR); protect a legitimate interest of the Controller in judicial or extrajudicial proceedings (Art. 6(1)(f) GDPR). Data will not be used for marketing or profiling purposes, unless otherwise specifically informed and separately consented.
4. Nature of provision and consequences of refusal
The provision of contact data is optional, but necessary in order to process the requests received.Failure to provide essential data (e.g., email address) will make it impossible for the Controller to follow up on the communication.
5. Method of processing and recipients
Processing is carried out using mainly electronic methods, in accordance with the principles of lawfulness, correctness, transparency and minimization, and is carried out by personnel authorized by the Data Controller. The data may be communicated to: entities that provide IT and hosting services, electronic mail or technical maintenance of the site, appointed as Data Processors pursuant to Article 28 GDPR; consultants and professionals who assist the Data Controller for needs strictly related to the management of requests or the protection of their rights. The data will not be disseminated.
6. Data Retention.
Personal data will be kept for the time strictly necessary to handle and acknowledge the request and, where necessary, for further limited periods necessary to: fulfill legal obligations, document the activity carried out or protect the rights of the Data Controller. In any case, data will be permanently deleted no later than three months after collection, unless otherwise required by law to be retained or necessary to protect rights in court. After this period, the data will be irreversibly deleted or anonymized.
7. Transfer of data to third countries
There is no systematic transfer of data to countries outside the European Union.Should it become necessary to use providers located in third countries, they will be chosen from among entities offering adequate guarantees under the GDPR (e.g., European Commission adequacy decisions, standard contractual clauses).
8. Rights of the data subject
The data subject may at any time exercise, within the limits and under the conditions provided by the GDPR, the following rights: access to personal data; rectification of inaccurate data or integration of incomplete data; deletion of personal data ("right to be forgotten"), in the cases provided for in Article 17 GDPR; limitation of processing, in the cases provided for in Article 18 GDPR; portability of data, where applicable (when the processing is based on consent or a contract and is carried out by automated means); objection to processing for reasons related to one's particular situation, when the legal requirements are met; revocation of consent at any time, without affecting the lawfulness of processing based on consent given before revocation. To exercise these rights, you can contact the Data Controller or the DPO at the addresses indicated in Section 1. The data subject also has the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
Date of update: February 6, 2026