Privacy policy

Last updated: 16 September 2026

This policy describes how we process personal data collected through the massanopackaging.com website, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

Asta Box di Massano Guido, with registered office at Strada Comunale Donna Grigia, 23, 14034 Castello di Annone (AT), Italy — VAT number 00804780054. MASSANO is the brand under which Asta Box di Massano Guido offers its jewelry packaging products and services; for the purposes of this policy, the data controller for data collected through this website is Asta Box di Massano Guido.

Contact: info@astabox.it

2. Data Protection Officer (DPO)

Guido Massano — info@astabox.it. You can contact the DPO for any request regarding the processing of your personal data.

3. What data we collect and why

3.1 Contact form

Data collected: full name, company (optional), email, phone (optional), message, any attachment, browsing language.

Purpose: to respond to your request for information or a quote.

Legal basis: performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

3.2 Restricted Area access request form

Data collected: company name, VAT number, contact person's name, email, phone (optional), country (optional), business type (optional), message (optional).

Purpose: to verify and activate access to the Restricted Area dedicated to clients, resellers and professional partners.

Legal basis: performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

3.3 Commercial communications (optional)

If you select the relevant checkbox in the forms above, we use your email address to send you communications about MASSANO products, news and initiatives.

Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to info@astabox.it, without affecting the lawfulness of processing carried out before withdrawal.

4. Providing your data

Providing the data marked as required in the forms is necessary for us to respond to your request: without it, we will not be able to follow up. Consent to commercial communications is always optional.

5. How we store and protect your data

Data is stored on Supabase infrastructure, with servers in the European Union (Ireland), with appropriate technical and organizational security measures (access restricted to authorized personnel, encrypted connections). We do not currently use a third-party service for automated email delivery: requests are handled directly by our team from the data stored.

6. Retention period

We retain request data for 24 months from the last contact, unless a longer retention period is required by law (for example tax or accounting obligations, if the request leads to a contractual relationship) or you ask us to delete it sooner.

7. Disclosure and transfer of data

We do not sell your data or share it with third parties for their own commercial purposes. It may be processed by providers acting as data processors on our behalf (for example database hosting), always within the European Union: we do not transfer data to countries outside the EU.

8. Your rights

At any time you can exercise, by writing toinfo@astabox.it, the rights set out in Articles 15-22 of the GDPR: access to your data, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali,www.garanteprivacy.it).

9. Cookies

The website uses technical cookies strictly necessary for its operation. Any analytics cookies (Google Analytics) are activated only with your explicit consent, via the banner shown on your first visit: no profiling cookie is ever active. More details, including how to review your choice, are available in theCookie Policy.

10. Changes to this policy

We may update this policy from time to time; the last update date is shown at the top of the page.