Last updated: April, 2026 This Privacy Notice describes how DELTA MECCANICA S.r.l. (“DELTA”, “we”, “us” or “our”) processes personal data in connection with its website, business relationships, and related services, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law.

1. Data Controller

DELTA MECCANICA S.r.l. Via Fontanelle di Bardano, 20 05018 Orvieto (TR) Italy Tel. +39 0763 316222 Email: info@deltameccanica.com

2. Data Protection Officer (DPO)

For any privacy-related matter, you may contact DELTA’s Data Protection Officer at info@deltameccanica.com

3. Categories of personal data we may collect

Depending on the nature of the relationship with you, we may collect and process the following categories of personal data:

• identification and business information, such as name, company name, registered office, residence or business address, tax code and VAT number;
• contact details, such as telephone number, mobile number and email address;
• information relating to contracts, orders, invoicing, payments and the management of the business relationship;
• accounting and administrative data;
• information relating to your business activity, profession, employees and/or collaborators;
• data you provide when contacting us or requesting information;
• technical browsing data and website usage data;
• cookie-related data, as described in our cookie tools and settings.

• Purposes of processing

We process personal data for the following purposes:

• to establish, manage and perform contractual or pre-contractual relationships;
• to provide products, services, support and assistance;
• to handle orders, deliveries, invoicing and payments;
• to comply with legal, tax, accounting and regulatory obligations;
• to manage disputes, claims and legal proceedings where necessary;
• to ensure security, business continuity, service quality and asset protection;
• to carry out internal administrative and organisational activities;
• to send service-related communications;
• where permitted, to carry out market analysis, customer satisfaction surveys, promotional activities and commercial communications.

5. Legal bases for processing

Depending on the purpose of processing, we rely on one or more of the following legal bases:

• performance of a contract or steps taken at your request before entering into a contract;
• compliance with a legal obligation;
• our legitimate interest in managing and protecting our business, services and legal rights;
• your consent, where required by law.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Whether providing data is mandatory

The provision of personal data required for the performance of a contract or for compliance with legal obligations is mandatory. If such data is not provided, we may be unable to establish or properly manage the relationship with you or comply with applicable obligations. The provision of other data is optional, but failure to provide it may limit our ability to offer services efficiently or respond fully to your requests.

7. How we process personal data

Personal data is processed by authorised personnel and, where necessary, by duly appointed external service providers, using paper-based, electronic and automated tools. We adopt appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

8. Retention period

We retain personal data for as long as necessary to fulfil the purposes for which it was collected. In particular:

• data relating to contractual and business relationships may be retained for the duration of the relationship and for up to 10 years thereafter, where required for legal, accounting, tax or evidentiary purposes;
• data processed for other purposes will be retained only for as long as necessary for those purposes and then deleted, anonymised or archived in accordance with applicable law.

9. Recipients of personal data

Your personal data may be disclosed, where necessary, to:

• employees, collaborators and authorised personnel of Aldena;
• other companies within the Aldena group, including parent companies, subsidiaries and affiliated companies;
• consultants, professionals and external service providers supporting us in administrative, accounting, IT, legal, logistics, communication or other business activities;
• banks, financial institutions and payment-related service providers;
• public authorities, supervisory bodies and other entities where disclosure is required by law or regulation;
• parties involved in the management and performance of the contractual relationship.

Where required by Article 28 GDPR, external providers processing personal data on our behalf are appointed as Data Processors.

10. International data transfers

As a general rule, personal data is processed within Italy and/or the European Economic Area. If personal data is transferred outside the European Economic Area, such transfer will take place in compliance with the GDPR and with appropriate safeguards.

11. Cookies

This website uses strictly necessary cookies required for its operation. Any non-essential cookies are used only where you have provided your consent through the cookie banner and preference management tools made available on the website. For more information, please refer to the website’s cookie settings and any dedicated cookie policy made available online.

12. Data subject rights

Under the GDPR, you have the right, where applicable, to:

• obtain confirmation as to whether we process your personal data;
• access your personal data;
• request the rectification of inaccurate or incomplete data;
• request the erasure of your data;
• request the restriction of processing;
• object to processing;
• receive your data in a structured, commonly used and machine-readable format, where applicable;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with the competent supervisory authority.

To exercise your rights, you may contact us at: info@deltameccanica.com You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

13. Data Processors

Aldena may appoint external companies and service providers as Data Processors for activities involving the processing of personal data on its behalf. Information on the appointed Data Processors may be requested by contacting the Data Controller at info@deltameccanica.com

14. Updates to this Privacy Notice

We may update this Privacy Notice from time to time in order to reflect legal, operational or organisational changes. The updated version will be made available on this page.