PRIVACY & COOKIE POLICY

 

Privacy Notice on the Processing of Personal Data and the Use of Cookies and Other Tracking Technologies

Pursuant to Regulation (EU) 2016/679 (“GDPR”), Italian Legislative Decree No. 196/2003, as amended, and applicable legislation concerning the protection of personal data, electronic communications, cookies and tracking technologies

 

Last updated: September 23, 2026

 

This Privacy & Cookie Policy describes how Free S.r.l. processes the personal data of users who visit and use the following website:

 

https://www.free-print.it

 

This Privacy Notice applies exclusively to the website indicated above and does not apply to websites, platforms, applications or services operated by third parties that may be accessible through links available on the website.

​

1. Data Controller

 

The Data Controller of personal data is:

 

Free S.r.l.
VAT No./Tax Code: 01778510196
Via A. Diaz 6
26013 Crema (CR) – Italy

E-mail: sales@free-print.it

 

The Data Controller determines the purposes and means of processing personal data collected through the website, in compliance with applicable legislation.

 

For any communication regarding this Privacy & Cookie Policy, the processing of personal data, or the exercise of data subject rights, users may contact the Data Controller at the e-mail address indicated above.

​

2. Personal Data Subject to Processing

 

“Personal data” means any information relating to an identified or identifiable natural person.

The following categories of data may be processed through this website.

​

2.1 Data Voluntarily Provided by the User

The website provides tools that allow users to contact Free S.r.l. and request information or quotations.

 

Users may voluntarily provide:

​

• first and last name;

• company name;

• e-mail address;

• subject of the request;

• content of the message;

• any additional information voluntarily included in the request.

 

Providing any information beyond that necessary to submit the request is optional.

Users are encouraged not to submit through the form particularly sensitive information, special categories of personal data within the meaning of Article 9 GDPR, or information unrelated to the request.

 

If such information is nevertheless voluntarily provided by the user, the Data Controller may process it exclusively to the extent necessary to manage the request, in compliance with applicable legislation.

​​

2.2 Browsing Data

During the normal operation of the website, the IT systems and software procedures used to operate the website may automatically collect certain technical information.

By way of example, such information may include:

​

• IP address;

• technical identifiers associated with the device or session;

• date and time of the request;

• URLs of pages visited;

• browser used;

• operating system;

• type of device;

• browser language and settings;

• connection-related information;

• data relating to technical events necessary for the proper functioning of the website;

• information relating to security and the prevention of fraudulent or abusive activities.

 

Such data are normally collected and processed for technical, security, management, maintenance and proper functioning purposes relating to the website and the infrastructure hosting it.

Browsing data may, under certain circumstances and through information held by third parties, allow the user to be identified.

​

2.3 Data Relating to Cookie Preferences

 

Through the cookie consent management system used on the website, information relating to the preferences expressed by users concerning the use of cookies and other tracking technologies may be processed.

​Depending on the technical configuration of the service, such information may include:

​

• the choice made by the user;

• categories of cookies accepted or rejected;

• date and time of the choice;

• version of the Privacy Notice or consent configuration;

• technical information necessary to document and apply the user's choice.

​

2.4 Data Collected Through External Services

If the website contains tools, embedded content, applications or links that involve interaction with third-party services, such third parties may process personal data in accordance with their respective privacy notices.

Their use will also be governed by the terms and privacy policies of the respective providers.

​

3. Methods and Principles of Processing

 

Personal data are processed by electronic means and, where necessary, by paper-based means.

Processing is carried out in compliance with the following principles:

​

• lawfulness, fairness and transparency;

• purpose limitation;

• data minimisation;

• accuracy;

• storage limitation;

• integrity and confidentiality;

• accountability of the Data Controller.

 

The Data Controller adopts appropriate technical and organisational measures in relation to the nature of the data processed and the risks associated with the processing.

Personal data are not used for purposes incompatible with those for which they were collected.

​

4. Purposes of Processing

 

Personal data collected through the website may be processed for the following purposes.

​

4.1 Management of Contact Requests

To receive, manage, classify and respond to communications voluntarily submitted by the user through the website.

​

4.2 Management of Quotation Requests

To receive and manage requests relating to the products and services offered by Free S.r.l., process commercial enquiries, and prepare quotations and offers.

​

4.3 Pre-Contractual Activities

To carry out activities requested by the data subject prior to the possible conclusion of a contract or establishment of a commercial relationship.

​

4.4 Management of Commercial Relationships

Where a commercial relationship arises from a contact request, personal data may be processed for the performance, management and administration of the contractual relationship.

​

4.5 Compliance with Legal Obligations

To comply with obligations arising from Italian, European or other provisions applicable to the Data Controller.

​

4.6 Protection of Rights

For the establishment, exercise and defence of the rights of the Data Controller, including in judicial, extrajudicial, administrative or arbitration proceedings.

​

4.7 Security

To ensure the security of the website and its systems, prevent unauthorised access, cyberattacks, fraud, abusive or unlawful activities, and other security incidents.

​

4.8 Maintenance and Improvement of the Website

To ensure the proper functioning of the website, identify any malfunctions, and improve its structure, performance, content and functionality.

​

4.9 Statistical Analysis

Where statistical analysis tools are used, they may be employed to understand how the website is used, measure performance and improve the browsing experience.

Tools that require the user's consent will be activated exclusively in compliance with the applicable legal requirements and, where necessary, after consent has been obtained.

​

4.10 Marketing, Remarketing and Profiling

If marketing, remarketing, personalised advertising or profiling tools are introduced in the future, such tools will be used in compliance with applicable legislation and, where required, only after the user's consent has been obtained.

This Privacy Notice will be updated if the introduction of such tools results in material changes to the processing activities.

​

5. Legal Bases for Processing

 

The processing of personal data is carried out on the basis of one or more of the following lawful grounds provided for under Article 6 GDPR:

​

a) Performance of Pre-Contractual Measures

Where processing is necessary to manage a request from the data subject, provide information, prepare a quotation, or carry out activities requested by the data subject prior to the conclusion of a contract.

​

b) Performance of a Contract

Where processing is necessary to perform a contract or manage a commercial relationship.

​

c) Compliance with a Legal Obligation

Where processing is necessary to comply with an obligation provided for by law or applicable regulations.

​

d) Legitimate Interest

Where processing is necessary for the purposes of a legitimate interest pursued by the Data Controller or a third party, provided that the fundamental rights and freedoms of the data subject do not prevail.

In particular, legitimate interests may concern system security, prevention of fraud and abuse, technical management of the website, protection of the Data Controller's rights, and management of requests received.

​

e) Consent

Where the law requires the consent of the data subject, processing is carried out only after obtaining valid, freely given, specific, informed and unambiguous consent.

Consent may be withdrawn at any time in accordance with the procedures indicated in this Privacy Notice.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

​

6. Nature of the Provision of Data

 

Providing personal data through the contact form is voluntary.

However, certain data are necessary to enable the Data Controller to identify the requester, understand the request and provide a response.

Failure to provide the essential information may make it impossible to respond to the request or prepare the requested quotation.

 

The user is responsible for the accuracy, completeness and truthfulness of the information provided.

​

7. Data Relating to Minors

 

The website is primarily intended for adult and professional users and is not specifically directed at minors.

The Data Controller does not intentionally request personal data from minors.

 

If a minor has provided personal data through the website without the consent required under applicable law, a parent or legal guardian may contact the Data Controller at sales@free-print.it to request verification and, where appropriate, deletion of the data.

​

8. Recipients of the Data

 

Personal data may be disclosed to and processed, within the limits necessary for the purposes indicated in this Privacy Notice, by:

​

• employees, collaborators and personnel authorised by the Data Controller;

• providers of IT and technology services;

• hosting and infrastructure providers;

• e-mail service providers;

• providers of the Wix platform;

• providers of cookie consent management systems;

• providers of maintenance, support and IT security services;

• consultants and professionals;

• banks or other parties potentially involved, where necessary, in the performance of contractual relationships;

• public authorities, entities and organisations legally entitled to receive the data.

 

Where necessary, parties processing personal data on behalf of the Data Controller are appointed as data processors pursuant to Article 28 GDPR or act as independent data controllers for the activities falling within their competence.

 

Personal data are not sold and are not indiscriminately disclosed to the public.

​

9. Wix Platform

 

The website is created and hosted using the Wix platform.

 

As part of the use of Wix services, Wix may process personal data relating to website users on behalf of the website owner under the conditions established by the applicable data processing agreement.

 

Wix states that, with regard to visitor data processed in connection with website services, the website owner acts as Data Controller and Wix, where applicable, acts as Data Processor.

 

Wix also uses cookies and other technical identifiers necessary for the operation, security, stability and performance of the platform.

 

For further information on the processing of personal data by Wix, users may consult the privacy notice and documentation published by Wix.

 

Wix may use additional sub-processors and companies within its group to provide its services. The list and information relating to sub-processors are available in Wix's documentation.

​

10. Consentik

 

The website uses Consentik GDPR Cookie Banner for Wix to manage consent relating to cookies and other tracking technologies.

​

Consentik allows the website to configure the consent banner, manage cookie categories, provide users with information about cookies and, depending on the configuration and plan used, record and manage users' expressed preferences.

 

The system may also provide functionality for scanning and classifying cookies present on the website and managing the relevant categories.

 

Any processing of personal data carried out by Consentik within its infrastructure takes place in accordance with the procedures and terms applicable to the service used.

 

Where the service involves the transfer of personal data to countries outside the European Economic Area, such transfers will be carried out in compliance with the safeguards and mechanisms required by applicable law.

​

11. Cookies and Other Tracking Technologies

 

Cookies are small text files that may be stored on the user's device while browsing a website.

 

In addition to cookies, similar technologies may be used, including pixels, tags, SDKs, local storage, device identifiers, fingerprinting or other tracking techniques.

 

For the purposes of the applicable rules, Italian legislation also considers relevant technologies other than cookies where they perform similar identification or tracking functions.

 

The website may use such technologies exclusively for purposes compatible with those indicated in this Privacy Notice and in compliance with applicable legal requirements.

​

12. Cookie Categories

 

Cookies and similar technologies may be classified into the following categories.

​

12.1 Necessary or Technical Cookies

They are used exclusively to ensure the proper functioning of the website, security, browsing, session management and the provision of functionalities requested by the user.

These technologies may be used without the user's consent where they are strictly necessary for the transmission of a communication or the provision of the requested service.

​

12.2 Functional Cookies

They allow the website to remember certain preferences or provide additional functionalities.

Where they are not strictly necessary for the operation of the website, they are used only after the user's consent has been obtained, where required by applicable law.

​

12.3 Analytics/Statistical Cookies

They may be used to obtain statistical information about the use of the website, the pages visited, performance and user interactions.

Certain analytics tools may be treated as technical cookies only where they meet the requirements established by applicable legislation and by the relevant supervisory authority.

Where these requirements are not met, their use is subject to the user's consent.

​

12.4 Marketing and Profiling Cookies

They may be used for advertising, remarketing, profiling or campaign measurement activities.

Such tools are used only after the user's consent has been obtained where required by applicable law.

​

13. Cookies Currently Usable by the Wix Platform

 

Wix identifies the following, among others, as essential cookies that may be used by its platform:

(Written by order: Name – Purpose – Duration – Category)

​

• XSRF-TOKEN – Fraud detection in calls – Session – Necessary

• hs – Platform security – Session – Necessary

• svSession / SVSession – Security, stability and core website functions – 12 months – Necessary

• SSR-caching – Rendering and performance – 24 hours – Necessary

• TS* – Attack detection – Session – Necessary

• bSession – Measurement of system effectiveness – 24 hours – Necessary

• fedops.logger.sessionId – Monitoring of errors and session issues – 12 months – Necessary

• _wixAB3|* – Platform experiments and functionality – 6 months – Necessary

• server-session-bind – API protection – Session – Necessary

• client-session-bind – API protection – Session – Necessary

• oAuthState – Session identification – Session – Necessary

• wixSession – Security, stability and core functions – 12 months – Necessary

• sec-fetch-unsupported – Security and detection of browser limitations – Session – Necessary

 

The list and durations are based on Wix's current documentation. Wix expressly states that a website may use additional cookies as a result of the addition of applications, integrations, custom code and third-party services.

 

Therefore, the table above should not be interpreted as an immutable list of all cookies that may be present on the website.

​

14. Cookies and Third-Party Services

 

The addition of third-party services or applications to the website may result in the installation of additional cookies or the use of tracking technologies.

 

By way of example, such services may include:

​

• traffic analytics services;

• advertising tools;

• remarketing services;

• social media and social plugins;

• video content;

• maps;

• chat tools;

• contact management systems;

• CRM platforms;

• automation tools;

• security services;

• e-mail campaign platforms;

• payment services;

• marketing tools.

 

If any of these services are activated, the relevant information will be made available through the cookie management system, this Privacy Notice and, where necessary, through links to the privacy notices of the relevant providers.

​

15. Consent Management through Consentik

 

The website uses Consentik as its consent management system.

 

Upon first access, where non-essential tracking technologies requiring consent are present, the user may be shown an appropriate information banner.

 

Depending on the configuration adopted, the banner allows the user to:

​

• accept all cookies;

• reject non-essential cookies;

• access preferences;

• select or deselect cookie categories;

• view more detailed information about the cookies used.

 

Consentik allows the banner to be configured with appropriate controls for rejecting cookies and managing preferences.

​

16. Principles Applied to Consent

 

Consent to cookies and other tracking technologies subject to consent must be expressed through a positive, freely given, specific, informed and unambiguous action.

 

Silence, simply continuing to browse, inactivity or merely viewing the pages do not, by themselves, constitute valid consent.

 

Simply scrolling the page does not constitute valid consent under the applicable guidance of the Italian Data Protection Authority.

 

Non-essential categories must not be activated before the user's choice.

 

Refusing non-essential cookies should not, except in cases expressly permitted by law, prevent access to the website's content and functionality.

​

17. Modification and Withdrawal of Consent

 

Users may modify or withdraw their cookie preferences at any time through the consent management tool available on the website.

 

The possibility of modifying preferences must remain accessible after the user's initial choice.

 

The Italian Data Protection Authority also states that a consent request should not be repeatedly presented in an intrusive manner after the user has made a choice, except in the cases provided for by the applicable guidelines, including the passage of at least six months since the previous display of the banner or other specific circumstances.

​

18. Recording of Consent

 

Where provided for by the technical configuration of the consent management system, users' choices may be recorded for the purpose of demonstrating that consent was obtained, refused or modified.

 

The record may contain technical information relating to the choice, the date and time of the choice, the system configuration and the categories concerned.

 

Consent records are maintained to the extent necessary to demonstrate compliance and properly manage the user's preferences.

​

19. Cookie Duration

 

Cookies may be:

 

Session cookies

which are automatically deleted when the browser is closed;

​

or

 

persistent cookies

which remain stored on the user's device until the expiry date specified by the individual cookie or until they are deleted.

 

The duration varies depending on the individual cookie, the relevant provider and the technical configuration.

 

For Wix cookies, the duration is that indicated in the provider's documentation and, where applicable, in the cookie table made available through Consentik.

​

20. Cookie Information Table

 

The website may make available, through the Consentik system, a detailed table of cookies that may indicate, for each item:

​

• cookie name;

• provider;

• category;

• purpose;

• duration;

• domain or third-party type, where applicable.

 

Consentik allows users to view a Cookie Information Table associated with the cookie categories.

 

The list of cookies actually detected may vary depending on the configuration of the website and the applications installed.

​

21. Addition or Modification of Services

 

The Data Controller may introduce, modify or remove services, applications, integrations or technological tools from the website.

 

If new tools are introduced that involve the processing of personal data or the installation of non-essential cookies, the Data Controller will, where necessary, update:

​

• this Privacy & Cookie Policy;

• cookie categories;

• the consent management system;

• the relevant notices;

• any links to the privacy notices of third-party providers.

 

This clause does not constitute prior authorisation for the installation of tools subject to consent.

Tools subject to consent will only be activated in compliance with applicable legal requirements.

​

22. Transfer of Data Outside the European Economic Area

 

Some service providers used by the website may operate or process personal data in countries located outside the European Economic Area.

 

Where such transfer constitutes a transfer of personal data subject to the GDPR, it will be carried out in compliance with the conditions established under Articles 44 et seq. of the GDPR.

 

Depending on the specific circumstances, the following may be used:

​

• an adequacy decision issued by the European Commission;

• Standard Contractual Clauses;

• Binding Corporate Rules;

• other safeguards provided for by the GDPR.

 

Specific information concerning transfers and the safeguards adopted may be contained in the privacy notices of the individual providers.

​

23. Retention of Personal Data

 

Personal data are retained for the period necessary to achieve the purposes for which they were collected and, subsequently, for any period necessary to comply with legal obligations or protect the rights of the Data Controller.

 

In particular:

​

Data Relating to Contact and Information Requests

They are retained for the time necessary to manage the request and, subsequently, for a reasonable period generally not exceeding 24 months from the last interaction, unless it is necessary to retain them for a longer period in order to comply with legal obligations, establish or defend a legal right, or where the request leads to a commercial relationship.

​

Data Relating to Quotations and Pre-Contractual Activities

They are retained for the period necessary to manage the request and the related commercial activity and, subsequently, for the period necessary to protect the rights of the Data Controller and comply with legal obligations.

​

Data Relating to Contractual Relationships

They are retained for the duration of the relationship and subsequently for the period required by applicable law, including tax and civil-law requirements.

​

Data Used for Purposes Based on Consent

They are processed until consent is withdrawn or for the period established by the relevant technology, subject to any further legal obligations or retention requirements.

​

Data Relating to Cookie Consent

They are retained according to the configuration of the consent management system and for the period necessary to document the user's choice and properly manage preferences.

​

24. Automated Decision-Making and Profiling

 

As of the date of this Privacy Notice, the website does not use automated decision-making processes intended to adopt decisions producing legal effects or similarly significant effects on users.

 

If profiling tools or automated decision-making processes subject to Article 22 GDPR are introduced in the future, the Data Controller will provide the information required by applicable law, including information concerning the logic involved, the significance and the envisaged consequences of the processing, where required.

 

Any profiling carried out through cookies or marketing tools will be subject to the consent requirements established by applicable law, where applicable.

​

25. Marketing and Commercial Communications

 

Personal data will not be used to send commercial communications through automated means, such as e-mail, SMS or similar technologies, where such activity requires consent, unless the required consent has been obtained in advance or another valid legal basis provided for by law applies.

Any future subscription to newsletters, mailing lists or other commercial communication services will be accompanied by a specific privacy notice and, where necessary, a specific request for consent.

Users may object at any time to the use of their personal data for direct marketing purposes where provided for by applicable law.

​

26. Social Media and External Links

 

The website may contain links to pages, profiles or services available on third-party platforms, including social networks.

The mere presence of a link does not automatically imply that Free S.r.l. transfers personal data to the operator of the relevant platform.

The user's interaction with third-party platforms is governed by the terms and privacy notices of the relevant provider.

Users are encouraged to review the privacy notices of external services before providing them with personal data.

​

27. Security

 

The Data Controller adopts reasonable and appropriate technical and organisational measures in relation to the nature of the processing activities carried out in order to protect personal data against:

​

• unauthorised access;

• loss;

• destruction;

• alteration;

• unauthorised disclosure;

• unlawful processing;

• security incidents.

 

Despite the adoption of security measures, no IT system or transmission over the Internet can be considered absolutely secure.

In the event of a personal data breach subject to the obligations established by the GDPR, the Data Controller will take the measures required by applicable law.

​

28. Data Subject Rights

 

The data subject may exercise, where provided for by applicable law, the rights recognised under Articles 15-22 GDPR. In particular, the data subject may request:

​

Access

To know whether the Data Controller is processing personal data concerning them and to obtain a copy of such data and the information required by law.

​

Rectification

To correct inaccurate data or complete incomplete personal data.

​

Erasure

To obtain the deletion of their personal data in the cases provided for by law.

​

Restriction

To obtain restriction of processing in the cases provided for by the GDPR.

​

Objection

To object to the processing of their personal data in the cases provided for by law, including processing for direct marketing purposes.

​

Data Portability

To receive the personal data provided to the Data Controller in a structured, commonly used and machine-readable format and, where technically feasible and provided for by applicable law, to transmit such data to another controller.

​

Withdrawal of Consent

To withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

The exercise of certain rights may be subject to the limitations provided for by applicable law.

​

29. How to Exercise Your Rights

 

To exercise their rights or obtain information regarding the processing of personal data, users may send a request to:

​

Free S.r.l.
Via A. Diaz 6
26013 Crema (CR) – Italy

sales@free-print.it

 

The request should, to the extent reasonably possible, enable the Data Controller to identify the data subject and specify the right they wish to exercise.

The Data Controller will respond within the time limits provided for by the GDPR and applicable legislation.

​

30. Right to Lodge a Complaint

 

ùA data subject who believes that the processing of their personal data violates applicable legislation has the right to lodge a complaint with the competent supervisory authority.

 

For Italy, the Italian Data Protection Authority (supervisory authority) is:

 

Garante per la protezione dei dati personali

 

The data subject may also exercise any other rights recognised under applicable European and national legislation.

​

31. Links to Third-Party Providers' Privacy Notices

 

Where the website uses third-party services that process personal data or install their own cookies, users may consult the relevant privacy and cookie notices of the providers concerned.

 

The main technology providers used to operate the website may include, depending on the configuration:

​

Wix

The relevant privacy documentation is available on the provider's website.

​

Consentik

The relevant privacy and cookie documentation is available on the provider's website.

 

If additional third-party services subject to specific information requirements are introduced, the relevant references will be added or made available through the cookie management system.

​

32. Browser Cookies

 

Users may also modify their browser settings to accept, reject or delete cookies.

Disabling technical or necessary cookies may, however, impair the functioning of certain parts of the website.

Browser-based management does not necessarily replace the preferences expressed through the website's consent management system.

For information on how to manage cookies, users may consult the official documentation of the browser being used.

​

33. Updates to the Privacy & Cookie Policy

 

This Privacy Notice may be amended or updated at any time to reflect:

​

• changes in legislation;

• guidance or decisions of competent authorities;

• technical changes to the website;

• the introduction or removal of services;

• the introduction or modification of cookies;

• changes to the purposes or methods of processing;

• organisational changes affecting the Data Controller.

 

The updated version will be published on the website together with the relevant update date.

In the event of material changes, the Data Controller will, where necessary, adopt additional information measures required by law.

 

Users are therefore encouraged to consult this page periodically.

​

34. Contact Details

 

For any information regarding this Privacy & Cookie Policy, the processing of personal data, or the exercise of rights provided for by applicable legislation:

 

Free S.r.l.
VAT No./Tax Code: 01778510196
Via A. Diaz 6
26013 Crema (CR) – Italy

E-mail: sales@free-print.it

​

​

Last updated: September 23, 2026