Dear User,
applicable legislation requires adequate information to be provided regarding the processing of personal data collected through this website (hereinafter also referred to as the “Service” or the “Website”). This Privacy Policy describes how the personal data of users and visitors who browse and use the Duolacton website is managed and processed.
This information is provided pursuant to EU Regulation 2016/679 (hereinafter the “GDPR”) and subsequent amendments. The validity of this information is limited exclusively to this Website and does not extend to any other external websites that may be accessed through hyperlinks.
In accordance with applicable legislation:
The Data Controller is the company/entity that owns the Duolacton trademark (whose full identification and contact details are provided on the website).
The Data Subject is the user/visitor who browses the Website or uses its services.
The Data Controller shall process Personal Data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimisation, accuracy, integrity and confidentiality.
The computer systems and software procedures used to operate this Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, domain names of the computers used by users, URI/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server, and other parameters relating to the user’s operating system and IT environment).
This data is used solely to obtain anonymous statistical information regarding the use of the Service and to verify its proper functioning. The data may be used to establish liability in the event of hypothetical cybercrimes against the Website. Except in such cases, web contact data is not retained for more than 7 days.
A cookie is a small text file stored on the user’s device when visiting a website. In accordance with the provisions issued by the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), users are informed that the Duolacton website uses exclusively Technical Cookies (which do not require the user’s prior consent).
Browsing and session cookies: These ensure the normal browsing and use of the Website and the management of restricted areas or authentication. They are not stored persistently and are deleted when the browser is closed.
Functionality cookies: These allow users to browse the Website according to a series of selected criteria (such as language preferences), in order to improve the service provided.
Anonymised analytics cookies: These are used to collect aggregated information on the number of users and how they visit the Website, solely for statistical purposes.
Technical cookies currently in use:
ASP.NET_SessionId: Used to manage the user session. Expires when the browser is closed.
SPID_SessionId (if applicable): Used to manage the authentication session. Duration: 1 hour.
No cookies are used to transmit personal information, nor are profiling cookies used to track users.
Browsing the Website does not require the optional provision of personal data. However, the optional, explicit and voluntary sending of messages through contact forms, email or other contact details provided on the Website will result in the subsequent acquisition of the sender’s address (necessary to respond to requests) and any other personal data included in the communication.
Note: The communication of personal data relating to a minor must be made by the person exercising parental responsibility.
1. Purposes of Processing:
To enable users to browse and use the services provided by the Duolacton Website;
To respond to requests for information, support or contact submitted by the user;
To comply with legal, accounting, tax or administrative obligations;
To manage any disputes or to establish, exercise or defend a legal claim before the courts.
2. Legal Bases:
Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) for browsing and managing user requests;
Compliance with a legal obligation (Art. 6(1)(c) GDPR);
Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) in ensuring website security, proper functioning and, where applicable, the establishment, exercise or defence of legal claims.
4.1. Personal data will not be subject to indiscriminate dissemination.
4.2. Personal data may be disclosed to third parties exclusively for the purposes indicated above, belonging to the following categories:
Technical service providers, hosting providers and IT companies appointed, through a specific agreement, as Data Processors pursuant to Art. 28 GDPR;
Employees and collaborators expressly authorised and instructed by the Data Controller to process personal data;
Competent authorities and law enforcement agencies where required by law.
Personal Data shall be retained for the period strictly necessary to achieve the purposes for which it was collected:
Browsing data: maximum 7 days (except where required for the investigation of crimes);
Data provided through forms/email: for the time necessary to process the request and for any subsequent administrative or legal activities.
The provision of Browsing Data is necessary and automatic to allow the Website to be accessed and used.
The provision of Data Voluntarily Provided by the User (e.g. through a contact form) is optional; however, failure to provide such data may prevent the Data Controller from responding to the requests submitted.
As a Data Subject, pursuant to Articles 15–22 of the GDPR, you have the right to:
Request access to your personal data and obtain a copy thereof;
Request the rectification of inaccurate data or the completion of incomplete data;
Request the erasure of your data (right to be forgotten) in the cases provided for by law;
Request the restriction of processing;
Object at any time to the processing of your personal data on grounds relating to your particular situation;
Request data portability;
Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it.
Where appointed, the Data Protection Officer (DPO) may be contacted using the contact details provided in the contact/company information section of the official Duolacton website.
This Privacy Policy may be subject to amendments and updates over time as a result of the entry into force of new legislation or updates to the Service. Users are invited to consult this page periodically.
Last updated: 31 August 2026