Policy Privacy

Last updated: October 16, 2026

1. Introduction

ARCOS Engineering S.r.l. (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of visitors to the Sand Mitigation website.

This Privacy Policy explains how we collect, use, store, and protect personal information when users visit our website, contact us, or interact with our online services.

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), applicable Italian data protection legislation, and other relevant privacy regulations.

By accessing our website, visitors can learn how their personal information is handled and what rights they have regarding its processing.

2. Data Controller

The Data Controller responsible for processing personal data collected through this website is:

ARCOS Engineering S.r.l.

Registered office: Corso Duca degli Abruzzi 62, Turin, Italy

Email: sandmitigation@arcos-engineering.it

Website: https://www.arcos-engineering.it/

For any questions regarding this Privacy Policy or the processing of personal data, users may contact the Data Controller using the email address provided above.

3. Personal Data We Collect

Depending on how visitors interact with our website, we may collect and process the following categories of personal data.

3.1 Information Provided Voluntarily

When users contact us by email or through other communication channels made available on the website, we may collect:

• First and last name
• Company or organization name
• Email address
• Telephone number, if provided
• Information included in messages, requests, or inquiries
• Other personal information voluntarily submitted

This information is collected exclusively for purposes connected with managing communications, responding to inquiries, and providing information about our engineering services.

3.2 Technical and Browsing Data

When visitors access our website, certain technical information may be collected automatically by the systems and software responsible for its operation.

Such information may include:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Pages visited
• Referring website
• Technical information related to website navigation
• Server logs and diagnostic information

This data is generally processed to ensure website functionality, maintain security, diagnose technical problems, and improve the reliability of our services.

3.3 Cookies and Similar Technologies

Our website may use cookies and similar technologies to support its operation and, where applicable, provide additional functionalities.

Detailed information about the cookies used, their purposes, and the available choices is provided in our Cookie Policy.

4. Purposes and Legal Basis of Processing

We process personal data only when there is a valid legal basis under Article 6 of the GDPR.

Responding to inquiries

Personal data provided through email communications is processed to respond to requests for information, technical inquiries, and business communications.

Legal basis: taking steps at the request of the data subject prior to entering into a contract, where applicable (Article 6(1)(b) GDPR), or our legitimate interest in responding to communications (Article 6(1)(f) GDPR).

Website operation and security

Technical data may be processed to ensure the proper functioning of the website, prevent unauthorized access, identify technical problems, and maintain system security.

Legal basis: legitimate interests of the Data Controller (Article 6(1)(f) GDPR).

Compliance with legal obligations

Personal data may be processed when necessary to comply with applicable laws, regulations, or requests from competent authorities.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Analytics and optional technologies

Where analytics, advertising, or other non-essential technologies requiring consent are implemented, the related processing will take place only after obtaining the user’s valid consent.

Legal basis: consent (Article 6(1)(a) GDPR).

Users may withdraw their consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Methods of Data Processing

Personal data is processed using electronic and, where necessary, manual procedures.

We adopt appropriate technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, alteration, disclosure, or destruction.

Access to personal data is restricted to authorized personnel and service providers who require such access to perform their duties.

All processing activities are carried out in accordance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, and confidentiality.

6. Data Retention

Personal data is retained only for the period necessary to fulfill the purposes for which it was collected.

In particular:

Contact requests and communications: Personal data is retained for the time necessary to manage the inquiry and any subsequent professional relationship, subject to applicable legal obligations.

Technical and security logs: Data is retained for a limited period consistent with operational and security requirements, unless longer retention is necessary to investigate security incidents or comply with legal obligations.

Data processed on the basis of consent: Information is retained according to the purposes communicated when consent is collected, until consent is withdrawn or the applicable retention period expires.

At the end of the applicable retention period, personal data will be deleted or anonymized, unless further retention is required by law.

7. Disclosure of Personal Data

Personal data may be disclosed to third parties only when necessary for legitimate operational purposes or to comply with legal obligations.

Such recipients may include:

• Website hosting and infrastructure providers
• IT maintenance and technical support providers
• Email and communication service providers
• Professional advisers, where necessary
• Public authorities, when disclosure is required by law

Where third parties process personal data on our behalf, they are appointed as Data Processors pursuant to Article 28 of the GDPR, where applicable.

We do not sell personal data to third parties.

8. International Data Transfers

Where personal data is transferred to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are implemented in accordance with Chapter V of the GDPR.

Such safeguards may include adequacy decisions issued by the European Commission, Standard Contractual Clauses, or other legally recognized transfer mechanisms.

Information regarding applicable safeguards may be requested by contacting the Data Controller.

9. Data Subject Rights

Under Articles 15–22 of the GDPR, individuals have the right, subject to the conditions established by applicable law, to:

• Access: Request confirmation of whether their personal data is being processed and obtain a copy of such data.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of personal data when the applicable legal requirements are met.
• Restriction: Request that the processing of personal data be restricted in certain circumstances.
• Data portability: Receive personal data in a structured, commonly used, and machine-readable format, where applicable.
• Objection: Object to processing based on legitimate interests, subject to applicable legal conditions.
• Withdrawal of consent: Withdraw previously granted consent at any time.

To exercise these rights, users may contact:

sandmitigation@arcos-engineering.it

We will respond to requests within the time limits established by applicable data protection legislation.

Users also have the right to lodge a complaint with the competent supervisory authority.

In Italy, the supervisory authority is:

Garante per la protezione dei dati personali

Website: https://www.garanteprivacy.it/

10. External Websites and Third-Party Links

Our website may contain links to external websites, professional organizations, or third-party resources.

These websites operate independently and may apply their own privacy policies and data processing practices.

We encourage users to review the privacy policies of external websites before providing personal information.

ARCOS Engineering S.r.l. is not responsible for the privacy practices or content of third-party websites.

11. Data Security

We implement reasonable technical and organizational security measures to protect personal information.

These measures may include secure communication protocols, access controls, system maintenance, and other appropriate safeguards.

Although we take reasonable precautions, no electronic transmission or storage system can guarantee absolute security.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in applicable legislation, website functionality, or data processing practices.

Any updates will be published on this page, together with the revised date of the policy.

We encourage visitors to review this document periodically.

13. Contact Information

For further information regarding this Privacy Policy or the processing of personal data, please contact:

ARCOS Engineering S.r.l.

Corso Duca degli Abruzzi 62
Turin, Italy

Email: sandmitigation@arcos-engineering.it

Website: https://www.arcos-engineering.it/