Privacy Policy

Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

In compliance with the provisions of European Regulation 2016/679 (abbreviated as GDPR), WAHU S.r.l. wishes to inform you that the personal data you provide or that we acquire in the course of our activities, necessary to deliver the services offered to you, will be processed in accordance with privacy legislation and the principles of fairness, lawfulness, transparency and protection of your privacy and your rights. We also wish to provide you with the following information:

1 – Data Controller is WAHU S.r.l., via Brodolini, 4 – 47922 – Rimini, in the person of its legal representative pro tempore. The Data Controller, pursuant to Art. 37 of the GDPR, is exempt from the identification and appointment of a Data Protection Officer.

2 – Types of data, purposes and legal basis of the processing

The data voluntarily provided by the Customer are those necessary for the Controller to deliver the available services and are processed lawfully and fairly; they are also collected and recorded for the specific, explicit and legitimate purposes indicated below and are used in processing operations that are not incompatible with those purposes.

Personal data (identifying personal data such as, for example: first and last name, company name, tax code and VAT number, address, telephone / fax, e-mail, banking and payment references) are collected and processed by electronic, manual and paper means for the following purposes:

  1. Planning and organisational management of the requested services.
  2. Fulfilment of the accounting, administrative and tax obligations related to the services provided.
  3. Market analysis and promotional activities. Sending (via email, sms, mms, push messages, messaging functions on mobile devices such as WhatsApp, telefax, telephone calls with an operator, social networks and other automated tools) of commercial communications, advertising and offers for the sale of goods/services of WAHU.

The legal basis that legitimises the purposes of the processing of the data referred to in points a) and b) is the performance of a contract for the supply of services to which the customer is a party, or the carrying out of pre-contractual activities at the customer’s request.

The processing of data for the purpose referred to in point c) takes place only with the specific written consent of the data subject, which may be freely refused without prejudice to the right to obtain the services requested from WAHU by the data subject.

3 – Method of processing. The data are processed both by manual processing in paper format and by electronic or otherwise automated, computerised and telematic tools. The data provided will not be subject to profiling activities.

4 – Nature of the provision of data. The processing of data for the purposes referred to in points a) and b) is essential for the proper fulfilment of accounting, administrative and tax obligations, as well as for the delivery of the requested service. Failure to provide such data may make it impossible to deliver the service and to comply with the related legal requirements.

The granting of consent for the purpose referred to in point c) is optional and failure to provide it will not make it impossible to deliver the requested service. 

5 – Recipients or possible categories of recipients of the personal data

The processing of data is carried out by the Controller’s personnel (employees, collaborators, System Administrators), specifically identified and authorised to process the data in accordance with the instructions given in compliance with current legislation on privacy and data security.

The personal data provided by the Customer may be processed by third parties specifically appointed as Data Processors (pursuant to Article 28 of the GDPR) or as independent Data Controllers, namely:

  • by professionals, companies, associations or professional firms that provide the Controller with assistance or consultancy for administrative, accounting, tax or legal protection purposes;
  • by companies offering server farm services; 
  • by all Public Institutions established by law and, more generally, by all bodies provided for by current accounting and tax legislation as recipients of mandatory communications;
  • by banking institutions for collections and payments.

6 – Transfer of data to a third country or international organisations. As part of the management of the contractual relationship, the transfer of the Customer’s data to non-EU third countries and/or to international organisations, precisely identified in the register of processing activities, may be provided for, solely for reasons related to the correct and timely management of the service.

7 – Retention period of personal data or criteria used to determine that period. The Customer’s personal data will be processed and retained by the Controller for the entire duration of the contractual relationship and, upon its termination for any reason, will be retained for the period provided for – for each category of data – by current accounting, tax, civil and procedural legislation.

8 – Customer’s rights. In your capacity as a data subject and in relation to the processing described in this Information Notice, the Customer may exercise the rights referred to in Articles 7, 15 to 21 and 77 of the GDPR (right of access, rectification, restriction of processing, data portability, objection, withdrawal and complaint). At any time, the data subject may withdraw the consent given for the purpose referred to in point c) without thereby prejudicing the rights previously acquired by the Controller. 

9 – How to exercise rights. The Customer may exercise their rights at any time by sending a registered letter with return receipt to WAHU S.r.l. or an e-mail to the address info@wahuwater.it .

The exercise of rights by the Customer is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, including because of their repetitive nature, the Controller may charge the Customer a reasonable contribution towards costs, in light of the administrative costs incurred in handling the request, or refuse to comply with the request. The data subject has the right to lodge a complaint with the Data Protection Authority in accordance with the procedures it has established.

Cookies and tracking tools

This website uses cookies and similar technologies. In addition to technical cookies, which are necessary for the operation of the site and for which no consent is required, we use the following third-party tools:

  • Google Analytics 4 (Google Ireland Ltd.) – analytics/statistical cookies, to measure visits in aggregate form and improve the site. You can disable it with the add-on: tools.google.com/dlpage/gaoptout.
  • Meta Pixel (Meta Platforms Ireland Ltd. – Facebook/Instagram) – marketing/remarketing cookies, to measure campaigns and show relevant ads. You can manage your preferences from your Facebook/Instagram account settings.
  • WhatsApp / Click to Chat – to allow direct contact via WhatsApp.

You can also manage or disable cookies from your browser settings. At any time you can review or withdraw your consent using the «Manage consent» button on the site, or consult our Cookie Policy for the detailed list of cookies. The data collected through these tools are processed by the respective providers in accordance with their privacy policies; some transfers may take place to third countries in compliance with the safeguards provided for by the GDPR. For analytics and marketing cookies, processing is based on the user’s consent, which can be withdrawn at any time.