Privacy Policy
Privacy Policy
Last updated: October 2025
This information notice is provided pursuant to Regulation (EU) 2016/679 ("GDPR") and D.Lgs. 196/2003 as amended by D.Lgs. 101/2018. It applies to browsing the robyone.it website and using contact/booking services (including any online deposits). For cookies, see the Cookie Policy.
1. Data Controller
Robyone by Abram Germano
Legal and operational headquarters: Via Sospello 123/A – 10147 Turin (TO)
Tax ID 07636130010 – Registration with Turin Chamber of Commerce no. TO-907966
Tel./Fax: 011 7770362
For inquiries and requests, use the form available at the page: www.robyone.it/contatti
The Data Controller independently determines the purposes and methods of processing, as well as the technical and organizational measures to ensure confidentiality, integrity and availability of data.
2. Types of Data Processed
- Identification and contact data (name, surname, telephone);
- Data relating to requests/bookings (request text, date/time, service requested);
- Payment data limited to any deposits (e.g. transaction outcome via third-party providers).
No special categories of data as per Article 9 GDPR (e.g. health, political opinions, biometric data) are collected.
3. Purposes and Legal Bases
- Management of requests and bookings (contact, quote, appointment).
Legal basis: performance of pre-contractual or contractual measures (Article 6, paragraph 1, letter b GDPR). - Management of deposits or payments connected to booked services and related obligations.
Legal basis: contract and legal obligation (Article 6, paragraph 1, letters b and c GDPR). - Sending informational/promotional communications about Robyone services (newsletter, offers), only with prior consent checkbox ticked.
Legal basis: consent (Article 6, paragraph 1, letter a GDPR). - Protection of rights, fraud/abuse prevention and service improvement.
Legal basis: legitimate interest of the Data Controller (Article 6, paragraph 1, letter f GDPR). - Legal, tax and accounting obligations connected to services provided.
Legal basis: legal obligation (Article 6, paragraph 1, letter c GDPR).
4. Processing Methods and Security
Data is processed using electronic and/or paper-based tools in compliance with the principles of lawfulness, fairness, transparency, data minimization, accuracy and storage limitation. Appropriate technical and organizational measures are adopted to prevent unauthorized access, loss, disclosure or destruction of data.
5. Nature of Data Provision
Provision of data marked as mandatory in the forms is necessary to fulfill requests or bookings; failure to provide it prevents the provision of the requested service. Provision for marketing purposes is optional and subject to consent.
6. Recipients and Categories of Subjects
Data may be communicated exclusively to subjects that provide services functional to the stated purposes, including:
- IT service providers/hosting and website maintenance;
- electronic payment providers and credit institutions;
- couriers and transport services (where necessary);
- tax/legal consultants.
These subjects act as Data Processors under Article 28 GDPR or, where applicable, as independent data controllers. Data is not disclosed or transferred to third parties for unauthorized commercial purposes.
7. Transfers Outside the EU
Data is generally processed in EEA Countries. Should a transfer to third countries become necessary for technical reasons (e.g. cloud providers or analytics tools), it will take place in accordance with Articles 44–49 GDPR, adopting appropriate safeguards (e.g. Adequacy Decisions or Standard Contractual Clauses).
8. Data Retention
- Requests/bookings: for the time necessary for management and up to 24 months for organizational and defensive purposes;
- Accounting/tax data: up to 10 years as required by law;
- Marketing: until consent is withdrawn or, in the absence thereof, for a maximum reasonable period (24 months).
9. Rights of the Data Subject
The user may exercise the rights provided by Articles 15–22 GDPR (access, rectification, erasure, restriction, objection, portability), as well as withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to withdrawal. The right to lodge a complaint with the Data Protection Authority is always preserved.
To exercise your rights, you may use the contact form available at: www.robyone.it/contatti
or send a written communication to:
Via Sospello 123/A – 10147 Turin (TO) – Tel./Fax: 011 7770362
10. Cookies and Tracking Tools
The website uses technical cookies and, with prior consent, third-party cookies for analytics and additional features. For details on the types of cookies, legal bases and how to manage/withdraw consent, please refer to the Cookie Policy, drafted in accordance with the Provision of the Data Protection Authority dated 10 June 2021.
11. Changes to This Notice
The Data Controller reserves the right to update this notice to comply with regulatory or technical changes. Any variations will be published on this page and will become effective at the time of publication.