Privacy & cookies

This page explains what personal data the www.ctm.srl website collects, why it collects it, and what rights you have. The site collects very little: here you will find exactly what.

Information provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and the Cookie Guidelines issued by the Italian Data Protection Authority (Garante per la protezione dei dati personali) on 10 June 2021.

1. Data controller

C.T.M. srl
via Palù, 73 — 31020 San Vendemiano (TV), Italy
VAT no. IT03745540264
Email: info@ctm.srl
Certified email (PEC): ctmsrl@pec.ctmsrl.eu
Phone: +39 0438 492400

For any question about your data, write to info@ctm.srl.

2. What data we process and why

This is a company showcase website: there are no accounts, restricted areas or logins. The only processing activities are the ones described below, one by one.

2.1 Contact form

If you fill in the contact form, you send us your full name, your email address, your message and, if you wish, the name of your company or practice and your phone number. Along with your message we receive the language and the address of the page you sent it from, so that we can reply in your language. The box you tick before sending confirms that you have read this policy.

Your data passes through the server that hosts the website, which forwards it as an email to the mailbox info@ctm.srl, managed by the administration office of C.T.M. srl. The site does not store it in any database: it exists only in our mailbox.

• Purpose: to answer your request.
• Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Retention: for as long as needed to handle your request and any business relationship that follows.
• Required data: your name, email and message are needed to reply to you; without them we cannot follow up on your request. Company or practice and phone number are optional.

2.2 Server logs

Like every web server, the one hosting the site automatically records some technical data about requests: IP address, browser type, requested page, date and time. This data is needed to run the site and protect it from abuse.

• Purpose: operation and security of the site.
• Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
• Retention: for a short period, only as long as strictly necessary.

2.3 Analytics

The site uses no analytics or traffic-measurement tools, such as Google Analytics, and does not track your browsing in any way.

2.4 Videos

The moving backgrounds of the pages are short clips hosted on our own website: they involve no external service.

The company film, however, is hosted on Vimeo (Vimeo.com, Inc., New York, United States). Until you press play, a still image hosted by us is shown in its place and your browser does not contact Vimeo. When you start the video, the player is loaded with the “Do Not Track” option enabled, which asks the player not to track the session. From that moment Vimeo receives technical data such as your IP address, and the player, together with the Cloudflare protection service that Vimeo uses, may set technical security cookies, which serve to tell people apart from automated programs.

For this processing Vimeo acts as an independent controller and its own policy applies: vimeo.com/privacy. Vimeo states that it adheres to the EU-U.S. Data Privacy Framework, on which the transfer of data to the United States is based.

2.5 Map

The map on the Contacts page does not load by itself: in its place there is a box with our address. Only if you choose “Show the map” does your browser contact Google, which receives technical data such as your IP address and may set its own cookies. The same applies to the “Open in Google Maps” link, which takes you to Google’s website.

For people located in the European Economic Area, the controller of this processing is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), and Google’s policy applies: policies.google.com/privacy. Google LLC adheres to the EU-U.S. Data Privacy Framework for data transferred to the United States.

2.6 Direct contacts

The site has links to call us or write us an email. When you use them, the site collects no data: the communication goes through your phone or your email program.

3. Cookies: this site uses none

To put it plainly: the www.ctm.srl website sets no cookies: no technical or profiling cookies, whether first-party or third-party, during normal browsing. It does not use any other means of storing information on your device either, such as the browser’s localStorage, and the fonts are hosted on our own domain, with no Google Fonts or other external services.

The only cookies your browser may receive are Vimeo’s or Google’s, and only if you yourself start the video or open the map (sections 2.4 and 2.5).

That is why you will find no cookie banner: under the Garante’s guidelines of 10 June 2021, a banner is needed when a site uses cookies or other tools that require consent. There are none here.

4. Who sees your data

Your data is not sold, transferred or used for marketing purposes, and it is not subject to profiling or automated decision-making. It may be processed only by:

• the administration staff of C.T.M. srl, who manage the info@ctm.srl mailbox where requests arrive, and the staff in charge of answering them;
• the providers that manage the website server and email on our behalf, acting as processors under Art. 28 GDPR;
• the competent authorities, when required by law.

5. Your rights

At any time you can ask C.T.M. srl for:

• access (Art. 15): to know whether we process data about you and receive a copy;
• rectification (Art. 16): to correct inaccurate or incomplete data;
• erasure (Art. 17): to have your data deleted;
• restriction (Art. 18): to restrict processing in the cases provided for;
• portability (Art. 20): to receive the data you gave us in a structured, commonly used format;
• objection (Art. 21): to object to processing based on legitimate interest.

To exercise them, write to info@ctm.srl or to our certified email ctmsrl@pec.ctmsrl.eu: we reply within one month of your request, as required by Art. 12 GDPR. If you believe the processing breaches the law, you also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live or work.

6. Minors

The site is aimed at companies and professionals and does not knowingly collect data from minors. If you believe a minor has sent us personal data through the form, write to us: we will delete it.

7. Changes to this policy

If the site changes, for example with new features that process data, we will update this page and the date below. Changes apply from the moment they are published.

Last revised: 7 October 2026