PRIVACY POLICY

Personal Data Processing Notice

This notice describes how ProWorksite collects, uses, stores, and protects the personal data of users who visit the website, create an account, make a purchase, request support, subscribe to marketing communications, or use the “Sell Your Tools” service.

This notice is provided pursuant to EU Regulation 2016/679, known as the GDPR, and the applicable Italian legislation on personal data protection.

Last updated: 23 July 2026.

1. DATA CONTROLLER

The Data Controller is:

ProWorksite di Rasbici Federico
Sole proprietorship
Strada di Santa Filomena 14
05100 Terni (TR), Italy
VAT number: 01724000557
General and privacy email: Proworksite.info@gmail.com
Phone and WhatsApp: 351 921 8496

Privacy requests and requests to exercise data protection rights may be sent to the email address Proworksite.info@gmail.com.

2. SCOPE

This notice applies to data processed through:

• the ProWorksite website;
• the online store and its checkout;
• the customer account;
• contact forms;
• communications by email, phone, and WhatsApp;
• support, warranty, return, and refund requests;
• newsletter subscriptions;
• the “Sell Your Tools” service;
• shipping, invoicing, and order management activities;
• any interactions with social media channels linked to the website.

3. CATEGORIES OF DATA COLLECTED

Identification and contact data

ProWorksite may collect first name, last name, company name, email address, phone number, residential address, billing address, and shipping address.

Order data

Data relating to purchased products, quantities, prices, discounts, order date, payment status, delivery method, tracking, returns, refunds, replacements, support, and warranty are processed.

Customer account data

When an account is created, ProWorksite may process the email address, login credentials, order history, saved addresses, and user preferences.

Passwords are managed through the technical systems of the ecommerce platform and cannot be viewed in plain text by ProWorksite.

Tax and invoicing data

When required for electronic invoicing, the following data may be collected and processed:

• first and last name or company name;
• address and registered office;
• tax code;
• VAT number;
• recipient code;
• certified email (PEC) address;
• data relating to purchased products;
• amounts, taxes, and information required for tax documentation.

Payment data

During checkout, information required to execute and verify payment is processed, such as the amount, selected method, transaction status, transaction identifier, and any anti-fraud data.

Payment data is processed primarily by Shopify and the payment providers selected by the customer. ProWorksite does not intentionally store the full card number or CVV security code.

Payment methods currently displayed on the website include American Express, Apple Pay, Bancontact, Google Pay, iDEAL/Wero, Klarna, Maestro, Mastercard, MobilePay, PayPal, Shop Pay, UnionPay, and Visa. Actual availability may vary depending on the country, device, amount, and options displayed during checkout.

Technical and browsing data

When visiting the website, the following data may be collected automatically:

• IP address;
• device type;
• operating system;
• browser used;
• language and time zone;
• date and time of the visit;
• pages and products viewed;
• interactions with the website;
• referring page;
• technical identifiers;
• information collected through cookies, pixels, tags, log files, and similar technologies.

Communications and support

When a customer contacts ProWorksite, the content of the request, emails, messages, photographs, videos, documents, and other information necessary to provide support may be processed.

In the event of a return, warranty claim, damage, or malfunction, ProWorksite may collect photographs of the product, packaging, shipping label, serial number, proof of purchase, and a description of the issue.

“Sell Your Tools” service

When a person offers a tool for sale to ProWorksite, the following data may be collected:

• name and contact details;
• photographs of the tool;
• brand, model, and specifications;
• description of its condition and operation;
• serial number, where necessary;
• collection address;
• communications relating to the valuation;
• IBAN bank details, after the offer has been accepted;
• data relating to collection, technical inspection, and payment.

The website describes the service as a process that includes submitting details and photographs, valuation, collection from the customer’s address, technical inspection, and payment by bank transfer to the bank details provided.

Marketing data

When a user subscribes to the newsletter, ProWorksite may process the email address, consent given, subscription date, any preferences, and data relating to the opening of or interaction with communications, to the extent permitted by the applicable settings and law.

4. SOURCE OF THE DATA

Personal data may be collected:

• directly from the data subject;
• while browsing the website;
• when creating an account or using the checkout;
• through forms, email, phone, or WhatsApp;
• from payment providers;
• from the Shopify platform;
• from the BRT courier;
• from technical, accounting, or support providers;
• from social media services or external platforms with which the user chooses to interact.

5. PURPOSES AND LEGAL BASES

Website and account management

Data is processed to enable browsing, provide website features, create and administer the account, and keep the platform secure.

The legal basis is performance of the contract or steps requested by the user and, for security and technical operation, the legitimate interests of the Data Controller.

Purchase management

Data is used to:

• receive and confirm orders;
• process payments;
• prepare and ship products;
• provide updates;
• manage returns, refunds, exchanges, and warranty claims;
• communicate with the customer;
• provide pre-sales and after-sales support.

The legal basis is performance of the contract and pre-contractual steps requested by the data subject.

Shipping

Data required for delivery is disclosed to BRT and any logistics operators involved.

The information shared may include name, address, phone number, email address, order number, number of parcels, and information required for delivery and tracking.

The legal basis is performance of the contract.

Invoicing and tax obligations

Data is processed to issue electronic invoices, retain documentation, comply with accounting and tax obligations, and respond to requests from competent authorities.

The legal basis is compliance with legal obligations.

Electronic invoices must be retained in accordance with applicable law. Accounting records and invoices are generally retained for ten years.

“Sell Your Tools” service

Data is processed to:

• review the proposal;
• value the tool;
• make an offer;
• arrange collection;
• carry out the technical inspection;
• complete the purchase;
• make payment;
• comply with administrative, accounting, and legal obligations.

The legal basis is taking pre-contractual steps requested by the data subject, performance of the contract, and compliance with legal obligations.

Support, returns, and warranty

Data is processed to assess requests, diagnose issues, arrange collections, repairs or replacements, make refunds, and comply with obligations relating to statutory and commercial warranties.

The legal basis is performance of the contract, compliance with legal obligations, and protection of the rights of the Data Controller and the customer.

Security and fraud prevention

Data may be processed to prevent fraud, abuse, unauthorised payments, unlawful access, disputes, and misuse of the website.

The legal basis is ProWorksite’s legitimate interest in protecting its business, customers, and transactions, as well as compliance with any applicable legal obligations.

Dispute management and protection of rights

Data may be retained and used to manage complaints, disputes, debt recovery, requests from authorities, and judicial or out-of-court proceedings.

The legal basis is the Data Controller’s legitimate interest in establishing, exercising, and defending its rights and, where applicable, compliance with legal obligations.

Newsletter and promotional communications

Marketing communications are sent on the basis of the data subject’s consent.

Consent is optional and may be withdrawn at any time using the unsubscribe link in the emails or by contacting ProWorksite.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Analytics, advertising, and profiling cookies

Non-essential cookies and tracking tools, when active, are used on the basis of consent given through the cookie banner.

Technical cookies required for the operation of the website may be used without consent, without prejudice to the obligation to inform the user. Analytics cookies not configured as technical cookies, as well as advertising or profiling cookies, require prior consent.

6. SHOPIFY

The online store is hosted on the Shopify platform, which provides technical services relating to hosting, checkout, customer accounts, order management, payments, security, fraud prevention, and ecommerce functionality.

Shopify may process personal data as a data processor on behalf of ProWorksite and, for certain services provided directly to consumers, such as Shop or Shop Pay, also as an independent data controller.

For European merchants, the principal contractual entity identified by Shopify is Shopify International Limited, based in Ireland. Shopify may use group companies, infrastructure, and providers located in other countries.

When Shopify Network Intelligence or other enhanced services are enabled, Shopify may process data relating to the user’s activity for personalisation, analytics, service improvement, and relevant advertising, in accordance with its own terms and privacy settings. ProWorksite configures these tools according to the options available in the Shopify admin and the choices made through the cookie banner.

7. PAYMENTS

Data required to execute payment is transmitted to Shopify, financial institutions, payment networks, and the providers selected by the customer.

Payment providers may independently carry out fraud checks, authentication, security checks, authorisation, capture, and settlement of the transaction.

Card payments are processed by the payment provider configured for the store. Shopify Payments uses security and fraud-detection tools, including 3D Secure authentication where applicable.

Individual providers may act as data processors or independent data controllers depending on the service used and their respective privacy notices.

8. INVOICING AND ACCOUNTING

Tax data may be disclosed to:

• the electronic invoicing service provider;
• the Italian Exchange System (Sistema di Interscambio);
• the accountant or tax adviser;
• the Italian Revenue Agency (Agenzia delle Entrate);
• competent authorities;
• providers of legally compliant digital archiving services.

These parties process data only to the extent necessary to provide the services, comply with legal obligations, and retain documentation.

9. COOKIES, ANALYTICS, AND GOOGLE ANALYTICS

The website uses technical cookies required for features such as the cart, checkout, authentication, security, language, country, and user preferences.

The notice currently published on the website also states that Google Analytics is used to analyse how the store is used.

Where Google Analytics or other analytics tools are not configured as technical tools, they are activated only after the user has given consent, where required.

The information may include IP address, device, browser, pages viewed, events, source, and interactions with the website.

The user can accept, reject, or change their preferences through the banner or cookie management tool available on the website.

The duration and characteristics of individual tools are indicated in the cookie banner, available settings, or any dedicated cookie notice.

10. SOCIAL NETWORKS AND WHATSAPP

The website contains links to Facebook, Instagram, and WhatsApp and provides contact channels through these platforms. The website also includes a newsletter subscription section.

When the user selects an external link or contacts ProWorksite through a third-party service, the relevant provider may collect data in accordance with its own terms and notices.

ProWorksite processes messages received through these channels to respond to requests, provide support, and manage pre-contractual or contractual relationships.

For requests containing sensitive data, documents, or financial information, users are advised to use the official email address and send only the data strictly necessary.

11. RECIPIENTS OF THE DATA

Personal data may be disclosed, to the extent necessary, to the following categories of recipients:

• Shopify and affiliated companies;
• payment providers, banks, and payment networks;
• BRT and other logistics operators;
• electronic invoicing and digital archiving providers;
• accountants and tax advisers;
• hosting, email, security, and technical support providers;
• newsletter, analytics, and marketing providers, when active;
• social media and messaging service providers chosen by the user;
• technicians responsible for repairing or inspecting products;
• legal and professional advisers;
• judicial, tax, administrative, or public security authorities where required by law.

Providers that process data on behalf of ProWorksite are authorised and, where necessary, bound by agreements compliant with applicable law.

12. INTERNATIONAL TRANSFERS

Some providers, Shopify group companies, or technical infrastructure may be located outside the European Economic Area.

In such cases, transfers are carried out on the basis of an adequacy decision, Standard Contractual Clauses, other safeguards provided by the GDPR, or applicable derogations.

The GDPR does not prohibit storage or processing outside Europe, but it requires transferred data to be protected in accordance with the applicable rules.

The data subject may request information about the safeguards applied by writing to Proworksite.info@gmail.com.

13. RETENTION PERIOD

Data is retained for as long as necessary for the purposes for which it was collected and subsequently for the period required by law or necessary to protect rights.

In particular:

• data relating to orders, invoices, and accounting is normally retained for ten years;
• account data is retained until the account is deleted, except for information required to comply with legal obligations or defend rights;
• data relating to returns, warranty, support, and disputes is retained for the time necessary to handle the matter and subsequently for the applicable limitation periods;
• data relating to the “Sell Your Tools” service is retained for the time necessary for valuation, collection, inspection, payment, and administrative obligations;
• marketing data is retained until consent is withdrawn or until it is no longer necessary, subject to periodic reviews;
• technical data, logs, and cookies are retained for the periods specified by the platform settings and the individual tools;
• data required to manage litigation may be retained until the dispute has been finally resolved.

A request for deletion does not result in the deletion of data that ProWorksite must retain for tax, accounting, or legal obligations or to defend a right.

14. MANDATORY OR OPTIONAL PROVISION OF DATA

Providing the data required to purchase, pay, receive delivery, obtain an invoice, use the warranty, or sell a tool is necessary in order to provide the requested service.

Failure to provide such data may prevent the contract from being concluded or performed.

Providing data for newsletters, marketing, and non-essential cookies is optional. Refusal does not prevent users from browsing the essential parts of the website or making a purchase, except for features that depend on the specific consent.

15. AUTOMATED DECISION-MAKING

ProWorksite does not normally make decisions based solely on automated processing that produce legal effects or similarly significant consequences for the data subject.

Shopify, payment providers, and anti-fraud providers may, however, use automated systems to assess transaction risk, authenticate payments, or prevent abuse.

If a payment is declined or an order is subject to review, the customer may contact ProWorksite for support, without prejudice to the fact that some decisions may depend directly on the bank or payment provider.

16. RIGHTS OF THE DATA SUBJECT

Where provided by the GDPR, the data subject may request:

• confirmation as to whether their personal data is being processed;
• access to the data and information about the processing;
• rectification of inaccurate data;
• completion of incomplete data;
• erasure of data;
• restriction of processing;
• data portability;
• objection to processing;
• withdrawal of consent;
• information about recipients and international transfers;
• human intervention in cases involving relevant automated decision-making.

The right to data portability applies in the cases provided by law, in particular where automated processing is based on consent or a contract. The data subject may object to direct marketing at any time.

To exercise these rights, write to:

Proworksite.info@gmail.com

ProWorksite may request reasonable information to verify the identity of the requester and prevent unauthorised access.

17. COMPLAINT TO THE SUPERVISORY AUTHORITY

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the competent supervisory authority in their country.

Lodging a complaint does not prevent the data subject from first contacting ProWorksite to request clarification or attempt to resolve the matter.

18. DATA SECURITY

ProWorksite adopts reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure, or destruction.

Security is also managed through the tools made available by Shopify and by payment, shipping, and technical service providers.

No IT system or Internet transmission can guarantee absolute security. In the event of a personal data breach, ProWorksite will take the measures required by applicable law.

19. LINKS TO EXTERNAL WEBSITES

The website may contain links to social networks, review platforms, manufacturers’ websites, payment providers, or other external services.

ProWorksite does not control how these parties process personal data. Before using an external service, users are advised to read its privacy notice.

20. CHANGES TO THIS NOTICE

ProWorksite may amend this notice to reflect:

• changes in the law;
• new website features;
• new providers or applications;
• changes to payment methods;
• changes in marketing and analytics activities;
• organisational or commercial changes.

The updated version is published on the website together with the date of the latest update.

Where changes are significant, ProWorksite may provide additional notice through the website or the available contact details.

21. CONTACTS

For information, requests, or to exercise rights relating to personal data protection:

ProWorksite di Rasbici Federico
Strada di Santa Filomena 14
05100 Terni (TR), Italy
VAT number: 01724000557
Privacy email: Proworksite.info@gmail.com
Phone and WhatsApp: 351 921 8496