Back
IT | EN

Privacy Policy

Processing of Personal Data (Art. 13-14 EU Reg. 2016/679 - GDPR)

This Privacy Policy describes how Spider S.R.L. collects, processes, protects, and stores personal data provided by retailer users and clients through the B2B Portal (pro.spiderracing.it), in compliance with EU Regulation 2016/679 (GDPR).

1 Data Controller

Spider S.R.L.

Via Lazio 3, 40069 Zola Predosa (BO) – Italia

P.IVA / C.F.: IT03730261207

Privacy Email Contact: info@spiderracing.it

2 Categories of Data Processed

In the operation of the B2B Order Portal, the Controller processes the following categories of data:

  • Company & Billing Data: Company name, VAT number, Fiscal Code, Unique SDI Code, PEC email, registered office address.
  • Account Credentials & Contacts: Login email address, hashed password, primary and secondary notification emails, telephone contacts for shipping.
  • Order History & Discounts: Submitted B2B order requests, items, shipping details, applied price list discount classes.
  • Technical Navigation & Security Data: IP addresses (processed for rate limiting and brute force defense), HTTP session tokens, browser timestamps.

3 Purposes of Processing & Legal Bases

A. B2B Account Verification & Order Fulfillment

Processing is necessary for the execution of pre-contractual measures and commercial B2B orders (Art. 6.1.b GDPR).

B. Legal & Tax Compliance

Required to fulfill accounting, tax, and statutory requirements (Art. 6.1.c GDPR).

C. Portal Security & Fraud Prevention

Based on the legitimate interest of the Data Controller to ensure cybersecurity, rate limiting, and access control (Art. 6.1.f GDPR).

4 Data Retention Period

Personal and B2B order data are stored for the entire active duration of the commercial relationship. Following account termination or order fulfillment, data required by tax laws (invoices, proformas) are retained for 10 years as required by the Italian Civil Code. Security logs (IP login attempts) are retained temporarily for security analysis for up to 90 days.

5 Data Security Measures

Spider S.R.L. adopts state-of-the-art technical and organizational measures to safeguard data against unauthorized access, loss, or alteration. These include password hashing via strong algorithms (bcrypt), encrypted HTTPS/TLS transmissions, CSRF tokens, rate limiting protection, and restricted internal database permissions.

6 Rights of Data Subjects (GDPR)

Pursuant to Articles 15-22 of EU Regulation 2016/679, data subjects have the right to:

  • Obtain confirmation of whether or not personal data concerning them is being processed;
  • Request rectification of inaccurate data or integration of incomplete data;
  • Obtain the erasure of personal data ("right to be forgotten");
  • Request restriction of processing or object to processing for legitimate reasons;
  • Lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).

To exercise any of your rights, contact us at: info@spiderracing.it

Spider S.R.L. – Via Lazio 3, Zola Predosa (BO) – P.IVA IT03730261207

Last Updated: August 2026