INFORMATION ON THE PROCESSING OF PERSONAL DATA of the users visiting the websites Pursuant to Article 13 of the EU Regulation 2016/679

Why this information?

The information provided below describes, as required by the EU Regulation 2016/679, the processing operations performed on the personal data of the users visiting the following website:


The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above website, but relate to resources outside Xenia’s domain.

Data controller

Visiting the website listed above may result into processing data relating to identified or identified natural persons.
The data controller is Xenia S.r.l. located in Via Dante Alighieri 23/A, 36065 Mussolente (VI), Italy (e-mail:, PEC:, Tel: +39 0424 878446).

Legal basis for the processing

The personal data mentioned on this page are processed by the data controller as they are necessary to offer and provide the required services and for the management of the website based on specific information and, where it is necessary, on the given consent.

Categories of personal data and purposes of the processing

Browsing data


The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.


This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.


These data are necessary to use web-based services and are also processed in order to:

  • extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.);
  • check functioning of the services.


Browsing data are kept for no longer than the period of time necessary to grant the operation of the website, thereafter they will be instantly deleted (except where judicial authorities need such data for establishing the commission of criminal offences).

Data communicated by users


Sending messages, on the basis of the user’s free, voluntary, explicit choice, to Xenia’s contact addresses and filling in and sending the forms within the data controller’s website, entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.


Specific information notices will be displayed on the pages that are used to provide certain services.

Cookies and other tracking devices


No cookies are used to profile users nor are other user tracking systems implemented.


So-called session (non-persistent) cookies are used exclusively to the extent this is necessary to enable secure, efficient browsing. Storage of session cookies in terminal equipment or browsers is under the user’s control, whilst cookie-related information is stored server-side after HTTP sessions in the service logs for no longer than seven days like all other browsing data.

Data recipients

The recipients of the data, collected in the course of visiting the website listed above, have been appointed, by Xenia S.r.l., as data processors, pursuant to Article 28 of the Regulation. They are, indeed, responsible for the processing, for the management of the development services and the provision and operative management of the technology platforms used.


The personal data collected as above are also processed by staff from the Data Controller, acting on specific instructions concerning purposes and arrangements of such processing.

Data subjects’ rights

Data subjects have the right to obtain, where appropriate, access to their personal data as well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing (pursuant to Articles 15 to 22 of the Regulation). To lodge all requests to exercise these rights, contact the addresses abovementioned.

Right to lodge a complaint

If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the control supervisor, represented in Italy by the Italian Data Protection Authority, pursuant to Article 77 of the Regulation, or else to bring a judicial proceeding against the Data Controller pursuant to Article 79 of the Regulation.