PRIVACY POLICY

 

Personal Data Processing Notice

 

This notice explains how ProWorksite collects, uses, stores and protects the personal data of users who visit the website, create an account, make a purchase, request assistance, subscribe to marketing communications or use the “Sell Your Tools” service.

 

This notice is provided pursuant to Regulation (EU) 2016/679, known as the GDPR, and the applicable Italian legislation on personal data protection.

 

Last updated: 23 July 2026.

 

1. DATA CONTROLLER

 

The Data Controller is:

 

ProWorksite di Rasbici Federico
Sole proprietorship
Strada di Santa Filomena 14
05100 Terni (TR), Italy
VAT number: 01724000557
General and privacy email address: Proworksite.info@gmail.com
Telephone and WhatsApp: 351 921 8496

 

Requests concerning privacy and the exercise of data protection rights may be sent to Proworksite.info@gmail.com.

 

2. SCOPE

 

This notice applies to data processed through:

 

 
• the ProWorksite website;
 
• the online store and its checkout;
 
• the customer account;
 
• contact forms;
 
• communications by email, telephone and WhatsApp;
 
• support, warranty, return and refund requests;
 
• newsletter subscriptions;
 
• the “Sell Your Tools” service;
 
• shipping, invoicing and order-management activities;
 
• any interactions with social-media channels linked to the website.
 

 

3. CATEGORIES OF DATA COLLECTED

 

Identification and contact details

 

ProWorksite may collect first name, surname, company name, email address, telephone number, residential address, billing address and shipping address.

 

Order data

 

We process data relating to products purchased, quantities, prices, discounts, order date, payment status, delivery method, tracking, returns, refunds, replacements, support and warranty.

 

Customer-account data

 

When an account is created, we may process the email address, login credentials, order history, saved addresses and user preferences.

 

Passwords are managed through the ecommerce platform’s technical systems and cannot be viewed in plain text by ProWorksite.

 

Tax and invoicing data

 

Where required to issue an electronic invoice, the following data may be collected and processed:

 

 
• first name and surname or company name;
 
• address and registered office;
 
• tax identification number;
 
• VAT number;
 
• recipient code;
 
• certified email address (PEC);
 
• data relating to the products purchased;
 
• amounts, taxes and information required for tax documentation.
 

 

Payment data

 

During checkout, the information required to execute and verify payment is processed, such as the amount, selected method, transaction status, transaction identifier and any anti-fraud data.

 

Payment data is processed mainly by Shopify and the payment providers selected by the customer. ProWorksite does not intentionally store the full card number or CVV security code.

 

The methods currently displayed on the website include American Express, Apple Pay, Bancontact, Google Pay, iDEAL/Wero, Klarna, Maestro, Mastercard, MobilePay, PayPal, Shop Pay, UnionPay and Visa. Actual availability may vary according to the country, device, amount and options displayed during checkout.

 

Technical and browsing data

 

When the website is visited, the following may be collected automatically:

 

 
• IP address;
 
• device type;
 
• operating system;
 
• browser used;
 
• language and time zone;
 
• date and time of the visit;
 
• pages and products viewed;
 
• interactions with the website;
 
• referring page;
 
• technical identifiers;
 
• information collected through cookies, pixels, tags, log files and similar technologies.
 

 

Communications and support

 

When a customer contacts ProWorksite, we may process the content of the request, emails, messages, photographs, videos, documents and other information required to provide support.

 

For a return, warranty claim, damage or malfunction, we may collect photographs of the product, packaging and shipping label, the serial number, proof of purchase and a description of the problem.

 

“Sell Your Tools” service

 

When a person offers to sell a tool to ProWorksite, the following may be collected:

 

 
• name and contact details;
 
• photographs of the tool;
 
• brand, model and specifications;
 
• description of its condition and operation;
 
• serial number, where necessary;
 
• collection address;
 
• communications relating to the valuation;
 
• IBAN bank details after the offer has been accepted;
 
• data relating to collection, technical inspection and payment.
 

 

The website describes this service as a process comprising the submission of details and photographs, valuation, collection from the customer’s address, technical inspection and payment by bank transfer to the details provided.

 

Marketing data

 

When a user subscribes to the newsletter, we may process the email address, consent given, subscription date, any preferences and data concerning the opening of or interaction with communications, to the extent permitted by the settings and applicable law.

 

4. SOURCE OF THE DATA

 

Personal data may be collected:

 

 
• directly from the data subject;
 
• while browsing the website;
 
• when an account is created or during checkout;
 
• through forms, email, telephone or WhatsApp;
 
• from payment providers;
 
• from the Shopify platform;
 
• from the BRT courier;
 
• from technical, accounting or support providers;
 
• from social-media services or external platforms with which the user chooses to interact.
 

 

5. PURPOSES AND LEGAL BASES

 

Website and account management

 

Data is processed to enable browsing, use website features, create and administer the account and keep the platform secure.

 

The legal basis is performance of a contract or steps requested by the user and, for security and technical operation, the Data Controller’s legitimate interest.

 

Purchase management

 

Data is used to:

 

 
• receive and confirm orders;
 
• process payments;
 
• prepare and ship products;
 
• provide updates;
 
• manage returns, refunds, exchanges and warranty claims;
 
• communicate with the customer;
 
• provide pre-sale and after-sales support.
 

 

The legal basis is performance of a contract and steps taken at the data subject’s request before entering into a contract.

 

Shipping

 

The data required for delivery is disclosed to BRT and any other logistics providers involved.

 

We may share the name, address, telephone number, email address, order number, number of parcels and information required for delivery and tracking.

 

The legal basis is performance of a contract.

 

Invoicing and tax obligations

 

Data is processed to issue electronic invoices, retain documentation, comply with accounting and tax obligations and respond to requests from the competent authorities.

 

The legal basis is compliance with legal obligations.

 

Electronic invoices must be retained in a manner compliant with applicable law. Accounting records and invoices are generally retained for ten years.

 

“Sell Your Tools” service

 

Data is processed to:

 

 
• review the proposal;
 
• value the tool;
 
• make an offer;
 
• arrange collection;
 
• perform the technical inspection;
 
• complete the purchase;
 
• make payment;
 
• comply with administrative, accounting and legal obligations.
 

 

The legal basis is taking steps at the data subject’s request before entering into a contract, performance of the contract and compliance with legal obligations.

 

Support, returns and warranty

 

Data is processed to verify requests, diagnose problems, arrange collections, repairs or replacements, issue refunds and comply with obligations relating to statutory and commercial warranties.

 

The legal basis is performance of a contract, compliance with legal obligations and the protection of the rights of the Data Controller and the customer.

 

Security and fraud prevention

 

Data may be processed to prevent fraud, abuse, unauthorised payments, unlawful access, disputes and misuse of the website.

 

The legal basis is ProWorksite’s legitimate interest in the security of its business, customers and transactions, as well as compliance with any legal obligations.

 

Dispute management and protection of rights

 

Data may be retained and used to manage complaints, disputes, debt recovery, requests from authorities and judicial or out-of-court proceedings.

 

The legal basis is the Data Controller’s legitimate interest in establishing, exercising and defending its rights and, where applicable, compliance with legal obligations.

 

Newsletter and promotional communications

 

Marketing communications are sent on the basis of the data subject’s consent.

 

Consent is optional and may be withdrawn at any time by using the unsubscribe link in the emails or by contacting ProWorksite.

 

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

 

Analytics, advertising and profiling cookies

 

Cookies and tracking tools that are not strictly necessary are used, when active, on the basis of consent given through the cookie banner.

 

Technical cookies required for the website to operate may be used without consent, without prejudice to the obligation to inform the user. Analytics cookies that are not configured as technical cookies, as well as advertising or profiling cookies, require prior consent.

 

6. SHOPIFY

 

The online store is hosted on the Shopify platform, which provides technical services relating to hosting, checkout, customer accounts, order management, payments, security, fraud prevention and ecommerce functionality.

 

Shopify may process personal data as a processor on behalf of ProWorksite and, for certain services offered directly to consumers, such as Shop or Shop Pay, also as an independent controller.

 

For European merchants, the principal contracting entity identified by Shopify is Shopify International Limited, based in Ireland. Shopify may use group companies, infrastructure and providers located in other countries.

 

When Shopify Network Intelligence or other Enhanced Services are enabled, Shopify may process data relating to the user’s activity for personalisation, analytics, service improvement and relevant advertising, in accordance with its own terms and privacy settings. ProWorksite configures these tools according to the options available in the Shopify admin and the choices expressed through the cookie banner.

 

7. PAYMENTS

 

The data required to make a payment is transmitted to Shopify, financial institutions, payment networks and the providers selected by the customer.

 

Payment providers may independently carry out anti-fraud checks, authentication, security checks, authorisation, capture and settlement of the transaction.

 

Card payments are processed by the payment provider configured for the store. Shopify Payments uses security and fraud-detection tools, including 3D Secure authentication where applicable.

 

Individual providers may act as processors or independent controllers depending on the service used and their respective privacy notices.

 

8. INVOICING AND ACCOUNTING

 

Tax data may be disclosed to:

 

 
• the electronic-invoicing service provider;
 
• the Italian Exchange System (Sistema di Interscambio);
 
• the accountant or tax adviser;
 
• the Italian Revenue Agency;
 
• the competent authorities;
 
• compliant digital-archiving providers.
 

 

These parties process data only to the extent necessary to provide their services, comply with legal obligations and retain documentation.

 

9. COOKIES, ANALYTICS AND GOOGLE ANALYTICS

 

The website uses technical cookies required for features such as the cart, checkout, authentication, security, language, country and user preferences.

 

The notice currently published on the website also states that Google Analytics is used to analyse how the store is used.

 

Where Google Analytics or other analytics tools are not configured as technical tools, they are activated only after the user has given consent, where required.

 

The information may include the IP address, device, browser, pages viewed, events, source and interactions with the website.

 

Users may accept, reject or change their preferences through the cookie banner or the cookie-management tool available on the website.

 

The duration and characteristics of individual tools are indicated in the cookie banner, the available settings or any dedicated cookie notice.

 

10. SOCIAL NETWORKS AND WHATSAPP

 

The website contains links to Facebook, Instagram and WhatsApp and provides contact channels through those platforms. The website also contains a newsletter subscription section.

 

When a user selects an external link or contacts ProWorksite through a third-party service, the relevant provider may collect data in accordance with its own terms and notices.

 

ProWorksite processes messages received through these channels to respond to requests, provide support and manage pre-contractual or contractual relationships.

 

For requests containing sensitive data, documents or financial information, users are advised to use the official email address and send only the data that is strictly necessary.

 

11. RECIPIENTS OF THE DATA

 

Personal data may be disclosed, to the extent necessary, to the following categories of recipient:

 

 
• Shopify and affiliated companies;
 
• payment providers, banks and financial networks;
 
• BRT and other logistics providers;
 
• electronic-invoicing and digital-archiving providers;
 
• the accountant and tax advisers;
 
• hosting, email, security and technical-support providers;
 
• newsletter, analytics and marketing providers, when active;
 
• social-media and messaging providers selected by the user;
 
• technicians appointed to repair or inspect products;
 
• legal and professional advisers;
 
• judicial, tax, administrative or public-security authorities where required by law.
 

 

Providers that process data on behalf of ProWorksite are authorised and bound, where necessary, by agreements compliant with applicable law.

 

12. INTERNATIONAL TRANSFERS

 

Some providers, Shopify group companies or technical infrastructure may be located outside the European Economic Area.

 

In such cases, transfers are made on the basis of an adequacy decision, Standard Contractual Clauses, other safeguards provided for by the GDPR or applicable derogations.

 

The GDPR does not prohibit storage or processing outside Europe, but requires transferred data to be protected in accordance with the applicable rules.

 

The data subject may request information on the safeguards applied by writing to Proworksite.info@gmail.com.

 

13. RETENTION PERIOD

 

Data is retained for the time necessary for the purposes for which it was collected and subsequently for the period required by law or necessary to protect rights.

 

In particular:

 

 
• data relating to orders, invoices and accounting is normally retained for ten years;
 
• account data is retained until the account is deleted, except for information required to comply with legal obligations or defend rights;
 
• data relating to returns, warranty claims, support and disputes is retained for the time necessary to handle the matter and thereafter for the applicable limitation periods;
 
• data relating to the “Sell Your Tools” service is retained for the time necessary for valuation, collection, inspection, payment and administrative obligations;
 
• marketing data is retained until consent is withdrawn or until it is no longer necessary, subject to periodic reviews;
 
• technical data, logs and cookies are retained for the periods specified in the platform settings and those of the individual tools;
 
• data required to manage litigation may be retained until the dispute has been finally resolved.
 

 

A request for erasure does not result in the deletion of data that ProWorksite must retain for tax, accounting or legal obligations or to defend a right.

 

14. MANDATORY OR OPTIONAL PROVISION OF DATA

 

Providing the data required to purchase, pay, receive a shipment, obtain an invoice, use a warranty or sell a tool is necessary to provide the requested service.

 

Failure to provide such data may prevent the contract from being entered into or performed.

 

Providing data for newsletters, marketing and non-essential cookies is optional. Refusal does not prevent users from browsing the essential parts of the website or making a purchase, except for features that depend on the specific consent.

 

15. AUTOMATED DECISION-MAKING

 

ProWorksite does not normally make decisions based solely on automated processing that produce legal effects or similarly significant consequences for the data subject.

 

Shopify, payment providers and anti-fraud providers may, however, use automated systems to assess transaction risk, authenticate payment or prevent abuse.

 

If a payment is declined or an order is subject to verification, the customer may contact ProWorksite for assistance, without prejudice to the fact that certain decisions may depend directly on the bank or payment provider.

 

16. DATA SUBJECT RIGHTS

 

In the cases provided for by the GDPR, the data subject may request:

 

 
• confirmation as to whether their data is being processed;
 
• access to the data and information about the processing;
 
• rectification of inaccurate data;
 
• completion of incomplete data;
 
• erasure of the data;
 
• restriction of processing;
 
• data portability;
 
• objection to processing;
 
• withdrawal of consent;
 
• information on recipients and international transfers;
 
• human intervention in cases of relevant automated decision-making.
 

 

The right to data portability applies in the cases provided for by law, particularly where automated processing is based on consent or a contract. The data subject may object to direct marketing at any time.

 

To exercise these rights, please write to:

 

Proworksite.info@gmail.com

 

ProWorksite may request reasonable information to verify the requester’s identity and prevent unauthorised access.

 

17. COMPLAINT TO THE SUPERVISORY AUTHORITY

 

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the competent supervisory authority in their country.

 

Lodging a complaint does not prevent the data subject from first contacting ProWorksite to request clarification or attempt to resolve the matter.

 

18. DATA SECURITY

 

ProWorksite implements reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure or destruction.

 

Security is also managed through the tools provided by Shopify and by payment, shipping and technical-service providers.

 

No computer system or Internet transmission can, however, guarantee absolute security. In the event of a personal data breach, ProWorksite will take the measures required by applicable law.

 

19. LINKS TO EXTERNAL WEBSITES

 

The website may contain links to social networks, review platforms, manufacturers’ websites, payment providers or other external services.

 

ProWorksite does not control how these parties process personal data. Before using an external service, users are advised to read its privacy notice.

 

20. CHANGES TO THIS NOTICE

 

ProWorksite may amend this notice to reflect:

 

 
• changes in legislation;
 
• new website features;
 
• new providers or applications;
 
• changes to payment methods;
 
• changes in marketing and analytics activities;
 
• organisational or commercial changes.
 

 

The updated version is published on the website together with the date of the latest update.

 

Where changes are significant, ProWorksite may provide an additional notice through the website or the available contact details.

 

21. CONTACT DETAILS

 

For information, requests or the exercise of rights relating to personal data protection:

 

ProWorksite di Rasbici Federico
Strada di Santa Filomena 14
05100 Terni (TR), Italy
VAT number: 01724000557
Privacy email: Proworksite.info@gmail.com
Telephone and WhatsApp: 351 921 8496