Notice on the processing of personal data - Cookies
Xtra S.r.l., the owner of this webpage, informs you that the personal data of yours that it acquires when you browse this site shall be processed in accordance with the law on the protection of personal data.
With reference to the methods used for the management and processing of your personal data, as a user who consults this site, Xtra provides the following notice pursuant to Article 13 of EU Regulation No. 679/2016:
All modern browsers make it possible for you to decide whether or not you want to block the installation of cookies on your computer or to cancel any that may already have been installed. This also applies to cookies installed following browsing on this site. In this case, failure/refusal to install cookies may render browsing the site difficult or even impossible.
The methods for deactivating the installation of cookies on the most modern browsers are shown below.
2. Period of data storage
Your personal data that are collected and processed once you have started browsing this site shall be stored for the entire period of service delivery and thereafter immediately deleted. Cookies installed via the site are temporary, and are deleted automatically at the expiry shown in this statement. Data collected through services relating to Google Analytics shall be stored for a period of 14 months.
4. Disclosure of the personal data
The disclosure of the browsing data is required in order to supply the requested service (browsing of the site) and is, therefore, compulsory for that purpose: failure/refusal on your part to provide your personal data shall make it impossible for Xtra to allow you to browse this site. The disclosure of your data for other purposes is optional: failure/refusal to provide your data for said other purposes shall not have consequences for you. The installation of technical, analytical cookies from this site is optional (it can be blocked via the browser settings), but it could make the site, or some of its services, unusable.
5. Parties to which your personal data may be disclosed
Any personal data of yours that have been collected shall not be disclosed indiscriminately, but may be communicated to those parties that have the right to access your personal data to ensure compliance with legal and secondary and/or EU regulations, and to the Data Controller’s own personnel, and also to companies (operating in the field of web and digital service provision), which provide services and activities on behalf of the Data Controller, operating as Data processors, to ensure compliance with legal obligations, and for every other organisational and/or administrative requirement that is necessary to provide the requested services.
The names of the additional parties to which your personal data may be disclosed, operating as Data processors, are shown in an up-to-date list available on Xtra (using the data indicated at Point 9).
6. Transfer of data outside the European Economic Area or to international organisations
Xtra shall not transfer your personal data, collected through this site and the tools contained therein, to countries situated outside the European Economic Area or to international organisations.
7. Links to sites or services of third parties
This statement is provided solely for the processing operations carried out on your personal data through this site or the tools available on it, and does not apply to other sites that you may browse through links, the managers of which operate as independent data controllers. Before accessing third-party services, please read their privacy statements carefully.
8. Your rights as the Data Subject
In relation to the aforementioned processing operations carried out on your personal data, you are entitled to exercise at all times those rights set out by EU Regulation No. 679/2016 (GDPR), including, for example, the right to be informed as to:
- the origin of any personal data held that concern you;
- the purposes and methods of the processing operations;
- the logic applied in the case of processing operations carried out using electronic instruments;
- the identification of the Data Controller, the Data Processors and the designated representative.
As the Data Subject, you have the right to obtain:
- access to the data, and their updating, rectification or (where in your interest) completion;
- the erasure, transformation into anonymous form or blocking of access to any data processed in breach of the law;
- the limitation of the processing of those data that concern you, or to request that the Data Controller or the Data Processor reduce the purposes and/or methods for/with which your data are being processed.
You can also request a copy of your data in a standard format (the so-called “Right to data portability”).
As the Data Subject, you also have the right to object, at any time and at no cost, wholly or partially:
- for legitimate reasons, to processing of your personal data, even if the processing operations are still relevant to the purpose for which the data were collected in the first place;
- to processing of your personal data carried out pursuant to Article 6, Paragraph 1 of the GDPR, Letters e. (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”) or f. (“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”) including profiling on the basis of these provisions;
- to processing of your personal data for the purposes of sending advertising or direct sales material or for the completion of market research or commercial communications (direct marketing), including any relevant profiling operations.
You have the right to withdraw your consent for the processing operations when that consent is based on the circumstances described by Article 6, Paragraph 1, Letter a. (when “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”), or by Article 9, Paragraph 2, Letter a. (when “the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”) of EU Regulation No. 679/2016, at any time, without affecting the lawfulness of processing based on the consent before its withdrawal.
Should you consider the processing operations to have been carried out in breach of current legislation, you have the right to lodge a complaint with a supervisory authority, specifically in the Member State in which you habitually reside or work, or the Member State where the alleged breach has taken place. The Italian supervisory authority can be contacted using the contact data on its own website.
9. Data Controller – Contact data
The Data Controller is Xtra S.r.l. with its registered offices at Via San Tomaso, n. 88, CAP 24121, Bergamo (BG), VAT Registration No. 04201100163.
The company can also be contacted at the following email address info@xtra.it.
To exercise the rights listed above, you may submit a request to that end by writing to the following email address xtrasrl@propec.it.
With reference to the methods used for the management and processing of your personal data, as a user who consults this site, Xtra provides the following notice pursuant to Article 13 of EU Regulation No. 679/2016:
1. Types of data collected, purposes, legal basis for the processing operations and period of data storage
1. Cookies
What are cookies?
Cookies are small text strings that the sites you visit send to your computer (normally your browser), where they are stored and then re-transmitted back to the sites when you visit them again.
1. Cookies
What are cookies?
Cookies are small text strings that the sites you visit send to your computer (normally your browser), where they are stored and then re-transmitted back to the sites when you visit them again.
To withdraw your consent for the installation of all cookies and disable them, click
To give your consent to the installation of all types of cookies and enable them, click
To give your consent to the installation of all types of cookies and enable them, click
Types of cookies used by this site.
Technical and analytical cookies with limited potential to identify you.
Technical cookies are those used for the sole purpose of transmitting a communication on an electronic communications network, or, to the extent strictly necessary for the supplier of a company service, transmitting the information explicitly requested by the subscriber or the user with a view to providing said service. Analytical cookies, on the other hand, are used to analyse and measure use of the website by users. Analytical cookies are similar to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users to the site and on how they visit it. The legal basis that legitimises the processing of personal data for this purpose is set out in the circumstances described by Article 122 of D.lgs No. 196/2003 – i.e. processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into a contract.
Technical cookies are those used for the sole purpose of transmitting a communication on an electronic communications network, or, to the extent strictly necessary for the supplier of a company service, transmitting the information explicitly requested by the subscriber or the user with a view to providing said service. Analytical cookies, on the other hand, are used to analyse and measure use of the website by users. Analytical cookies are similar to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users to the site and on how they visit it. The legal basis that legitimises the processing of personal data for this purpose is set out in the circumstances described by Article 122 of D.lgs No. 196/2003 – i.e. processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into a contract.
- Cookie name: aft
Technical cookie: this cookie to certify the user who makes requests to the server. Prevents form data from being sent to other websites
Technical cookie: this cookie to certify the user who makes requests to the server. Prevents form data from being sent to other websites
Type of data processed: unique alphanumeric code.
Expiry of the cookie: session.
Expiry of the cookie: session.
- Cookie name: ckp
Technical cookie: this tool records the user's acceptance of cookies.
Type of data processed: user’s cookies data (tech,stat,profile).
Expiry of the cookie: 6 months.
Technical cookie: this tool records the user's acceptance of cookies.
Type of data processed: user’s cookies data (tech,stat,profile).
Expiry of the cookie: 6 months.
- Cookie name: _GRECAPTCHA
Google reCAPTCHA technical cookie: this cookie prevents spam e-mails being sent from forms on the site.
Type of data processed: user’s data.
Expiry of the cookie: 6 months.
Type of data processed: user’s data.
Expiry of the cookie: 6 months.
Google’s analytical cookies with limited potential for identification.
- Cookie name: _ga
Google Analytics cookie: this cookie uses a unique ID to generate anonymous statistical data about the user's use of the website.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 2 years.
Privacy Policy.
- Cookie name: _ga
Google Analytics cookie: this cookie uses a unique ID to generate anonymous statistical data about the user's use of the website.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 2 years.
Privacy Policy.
- Cookie name: _ga=[*]
Google Analytics cookie: this cookie is used to verify the status of the user's browsing session.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 2 years.
Privacy Policy.
Google Analytics cookie: this cookie is used to verify the status of the user's browsing session.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 2 years.
Privacy Policy.
- Cookie name: _gat
Google Analytics cookie: this cookie limits the frequency of requests on the site.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 1 minute.
Privacy Policy.
Google Analytics cookie: this cookie limits the frequency of requests on the site.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 1 minute.
Privacy Policy.
- Cookie name: _gali
Google Analytics Cookie: this cookie uses a unique ID to generate anonymous statistical data about the user's use of the website.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: session.
Privacy Policy.
Google Analytics Cookie: this cookie uses a unique ID to generate anonymous statistical data about the user's use of the website.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: session.
Privacy Policy.
- Cookie name: _gid
Google Analytics Cookie: this cookie uses a unique ID to generate anonymous statistical data about the user's use of the website.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 24 hours.
Privacy Policy.
Google Analytics Cookie: this cookie uses a unique ID to generate anonymous statistical data about the user's use of the website.
Type of data processed: browsing data, anonymized IP address, user origin.
Expiry of the cookie: 24 hours.
Privacy Policy.
Disabling cookies.
All modern browsers make it possible for you to decide whether or not you want to block the installation of cookies on your computer or to cancel any that may already have been installed. This also applies to cookies installed following browsing on this site. In this case, failure/refusal to install cookies may render browsing the site difficult or even impossible.
The methods for deactivating the installation of cookies on the most modern browsers are shown below.
Without prejudice to the above, the Data Controller hereby informs you that you can make use of Your Online Choices. Through this service, you can manage the tracking preferences of most advertising tools. The Data Controller recommends that you use this resource in addition to the information provided in this document.
2. Period of data storage
Your personal data that are collected and processed once you have started browsing this site shall be stored for the entire period of service delivery and thereafter immediately deleted. Cookies installed via the site are temporary, and are deleted automatically at the expiry shown in this statement. Data collected through services relating to Google Analytics shall be stored for a period of 14 months.
3. Methods of processing
Any personal data collected shall be processed, retained and analysed using electronic tools and shall be stored both in electronic format and in hard copy, organised into databases, and on any other appropriate type of media.
Specific security measures are implemented to prevent the loss, illegal or unfair use of the data, or unauthorised access to them.
The processing of your personal data carried out by Xtra does not involve any automated decision-making.
Any personal data collected shall be processed, retained and analysed using electronic tools and shall be stored both in electronic format and in hard copy, organised into databases, and on any other appropriate type of media.
Specific security measures are implemented to prevent the loss, illegal or unfair use of the data, or unauthorised access to them.
The processing of your personal data carried out by Xtra does not involve any automated decision-making.
4. Disclosure of the personal data
The disclosure of the browsing data is required in order to supply the requested service (browsing of the site) and is, therefore, compulsory for that purpose: failure/refusal on your part to provide your personal data shall make it impossible for Xtra to allow you to browse this site. The disclosure of your data for other purposes is optional: failure/refusal to provide your data for said other purposes shall not have consequences for you. The installation of technical, analytical cookies from this site is optional (it can be blocked via the browser settings), but it could make the site, or some of its services, unusable.
5. Parties to which your personal data may be disclosed
Any personal data of yours that have been collected shall not be disclosed indiscriminately, but may be communicated to those parties that have the right to access your personal data to ensure compliance with legal and secondary and/or EU regulations, and to the Data Controller’s own personnel, and also to companies (operating in the field of web and digital service provision), which provide services and activities on behalf of the Data Controller, operating as Data processors, to ensure compliance with legal obligations, and for every other organisational and/or administrative requirement that is necessary to provide the requested services.
The names of the additional parties to which your personal data may be disclosed, operating as Data processors, are shown in an up-to-date list available on Xtra (using the data indicated at Point 9).
6. Transfer of data outside the European Economic Area or to international organisations
Xtra shall not transfer your personal data, collected through this site and the tools contained therein, to countries situated outside the European Economic Area or to international organisations.
7. Links to sites or services of third parties
This statement is provided solely for the processing operations carried out on your personal data through this site or the tools available on it, and does not apply to other sites that you may browse through links, the managers of which operate as independent data controllers. Before accessing third-party services, please read their privacy statements carefully.
8. Your rights as the Data Subject
In relation to the aforementioned processing operations carried out on your personal data, you are entitled to exercise at all times those rights set out by EU Regulation No. 679/2016 (GDPR), including, for example, the right to be informed as to:
- the origin of any personal data held that concern you;
- the purposes and methods of the processing operations;
- the logic applied in the case of processing operations carried out using electronic instruments;
- the identification of the Data Controller, the Data Processors and the designated representative.
As the Data Subject, you have the right to obtain:
- access to the data, and their updating, rectification or (where in your interest) completion;
- the erasure, transformation into anonymous form or blocking of access to any data processed in breach of the law;
- the limitation of the processing of those data that concern you, or to request that the Data Controller or the Data Processor reduce the purposes and/or methods for/with which your data are being processed.
You can also request a copy of your data in a standard format (the so-called “Right to data portability”).
As the Data Subject, you also have the right to object, at any time and at no cost, wholly or partially:
- for legitimate reasons, to processing of your personal data, even if the processing operations are still relevant to the purpose for which the data were collected in the first place;
- to processing of your personal data carried out pursuant to Article 6, Paragraph 1 of the GDPR, Letters e. (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”) or f. (“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”) including profiling on the basis of these provisions;
- to processing of your personal data for the purposes of sending advertising or direct sales material or for the completion of market research or commercial communications (direct marketing), including any relevant profiling operations.
You have the right to withdraw your consent for the processing operations when that consent is based on the circumstances described by Article 6, Paragraph 1, Letter a. (when “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”), or by Article 9, Paragraph 2, Letter a. (when “the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”) of EU Regulation No. 679/2016, at any time, without affecting the lawfulness of processing based on the consent before its withdrawal.
Should you consider the processing operations to have been carried out in breach of current legislation, you have the right to lodge a complaint with a supervisory authority, specifically in the Member State in which you habitually reside or work, or the Member State where the alleged breach has taken place. The Italian supervisory authority can be contacted using the contact data on its own website.
9. Data Controller – Contact data
The Data Controller is Xtra S.r.l. with its registered offices at Via San Tomaso, n. 88, CAP 24121, Bergamo (BG), VAT Registration No. 04201100163.
The company can also be contacted at the following email address info@xtra.it.
To exercise the rights listed above, you may submit a request to that end by writing to the following email address xtrasrl@propec.it.