PRIVACY AND PERSONAL DATA
Privacy Policy
This policy explains what personal data we process on sollevita.com, why we process it, how long we keep it and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, ‘GDPR’) and the Italian Personal Data Protection Code (Legislative Decree No. 196/2003, the ‘Privacy Code’).
Last updated: 5 October 2026
On this page
- Controller and contact details
- What data we process
- Health information
- Why we process data and on what legal basis
- Required and optional data
- Who receives the data
- Transfers outside the European Union
- How long we keep data
- Data security
- Your rights
- Complaints to a supervisory authority
- No marketing, no profiling
- Children
- Changes to this policy
Controller and contact details
The controller of the personal data collected through the website sollevita.com is:
Gruppo Pragma Srl
Via Molin Nuovo, 37/42
33100 Udine (UD), Italy
VAT number (P.IVA) 02542110305
Email: info@sollevita.com
Phone: +39 335 636 9216
No Data Protection Officer (DPO) has been designated. For any question about privacy, or to exercise the rights described below, simply use the contact details above.
Sollevita is an assistive riser recliner care chair manufactured in Italy by Arredamenti La Castellana. The website, advice and sales are managed by Gruppo Pragma Srl. In this policy, ‘we’ and ‘us’ mean Gruppo Pragma Srl, and ‘you’ (the ‘data subject’) means the person who visits the website or contacts us.
What data we process
Contact form
The contact form is the only form on the website and appears on several pages, including the contact page. It contains the following fields:
- Name (required);
- Email (required);
- Phone (optional);
- Care situation (required): you choose, from a short list, the situation closest to your own, for example help standing up, bed-to-chair or side transfer, prolonged sitting or comfort, a lie-flat configuration for transfers, or the complete configuration. The options may vary slightly from page to page; the option ‘Not sure yet’ is always available;
- Details (optional): a free-text field where you can describe what you are looking for, for yourself or for a relative, from everyday comfort to care needs;
- Consent checkbox (required): by ticking it you agree to be contacted about your request; next to the box there is a link to this policy.
Together with your request we automatically record the page from which it was sent, an identifier of the position of the form on the page, the date and time of submission and confirmation that the consent box was ticked.
Your request is saved in the website database, on the server that hosts the site. At the same time, an email notification containing the form data and the sender’s IP address is sent to the mailbox info@sollevita.com. The Sollevita team at Gruppo Pragma Srl replies by email or by phone.
Requests by email or phone
You can also write directly to info@sollevita.com or call +39 335 636 9216. In that case we process the data you give us, such as your name, contact details and the content of your message, under the same rules that apply to the form.
Protection against spam and abuse
The form contains a hidden field (honeypot), invisible to people, which blocks automated submissions by spam bots. To limit repeated submissions, the IP address is also used for 10 minutes in hashed form (as a code) rather than in plain text: a maximum of 5 submissions every 10 minutes is allowed.
Technical browsing data
During your visit, the server automatically records the following in its access logs: IP address, date and time, address of the page requested, user agent (information indicating the browser and operating system used) and the page you came from (referrer). This data is used for the security of the website and to resolve technical problems.
A security system (fail2ban) temporarily blocks IP addresses from which repeated failed login attempts originate. A 404 error log stores the addresses of non-existent pages that have been requested, the referring page and the user agent, without the IP address, so that broken links can be fixed.
Cookies
The website uses some technical cookies that are necessary for it to work, for example to remember the language you have chosen and the choice you made in the cookie banner. Google Analytics 4, which produces aggregated statistics on visits, is loaded only if you accept it in the banner. Full details are set out in the Cookie Policy.
Health information
The care situation you select in the form and the free text in the Details field may reveal information about your health or that of a relative. Under the GDPR, such information belongs to the ‘special categories of personal data’ (Article 9), which require a higher level of protection.
- Limited use: we process this information only to answer your request, and for no other purpose.
- Explicit consent: the legal basis is your explicit consent (Article 9(2)(a) GDPR), given by ticking the consent box and sending the form. The same rules apply to health information provided by email or by phone.
- Withdrawal: you can withdraw your consent at any time by writing to info@sollevita.com. From that moment we will no longer use this information; withdrawal does not affect the lawfulness of processing carried out before it.
- Only what is necessary: we recommend that you provide only the information needed to understand the practical situation, without sending medical reports or other clinical details that are not essential. If you prefer not to provide any health information, you can choose the option ‘Not sure yet’ and leave the Details field empty.
- Information about a relative: if your request concerns another person, you may share information about them only if you are entitled to do so, for example because that person agrees or because you are their legal representative (such as their guardian or court-appointed support administrator). We also ask you to inform that person of the content of this policy.
Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering requests for information, advice or a quote sent via the form, by email or by phone | Taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR) |
| Processing health information that you choose to share, about yourself or a relative | Explicit consent (Article 9(2)(a) GDPR), which can be withdrawn at any time |
| Protecting the website: server logs, blocking of repeated login attempts, protection of the form against spam and abuse (including the IP address shown in the email notification), fixing broken links | Legitimate interests of the controller in the security and proper functioning of the website and in preventing abuse (Article 6(1)(f) GDPR) |
| Aggregated statistics on visits using Google Analytics 4 | Consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code), given through the cookie banner; details in the Cookie Policy |
| Managing the purchase and keeping contractual and accounting documents, if your request is followed by a purchase | Performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations relating to accounting and tax (Article 6(1)(c) GDPR) |
Where processing is based on legitimate interests, you may object to it at any time on grounds relating to your particular situation (see ‘Your rights’).
Required and optional data
Name, email, care situation and the consent box are required: without them the form cannot be sent and we cannot answer your request.
The Phone and Details fields are optional. If you leave them empty, your request will still be handled: without a phone number we will reply by email and, without details, we may need to ask for some further information to understand the situation. Providing health information is not mandatory.
Technical browsing data is collected automatically for the operation and security of the website. Consent to statistics is optional: if you decline, the website works normally.
Who receives the data
Within Gruppo Pragma Srl, data is processed only by authorised persons, namely the Sollevita team that answers requests. For certain technical services we use providers who process data on our behalf as processors (Article 28 GDPR):
- Hetzner Online GmbH: website hosting; the servers are located in the data centre in Falkenstein, Germany (EU);
- the provider of the email service for the mailbox info@sollevita.com, with servers in the European Union;
- IT providers who carry out the technical maintenance of the website, with access to data only when necessary;
- Google Ireland Limited, for Google Analytics 4, only if you have consented to statistics (Google’s privacy policy).
We do not disclose data to the manufacturer Arredamenti La Castellana or to any other party for their own purposes, and we do not sell personal data. Data may be disclosed to public authorities only where required by law.
Transfers outside the European Union
Form data, server logs and backup copies remain within the European Union.
The only exception concerns Google Analytics 4, which is active only with your consent: in that case, data collected by Google Ireland Limited may be transferred to Google LLC in the United States. This transfer is covered by the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and by standard contractual clauses. More information is available at www.dataprivacyframework.gov.
We make no other transfers of data outside the European Union.
How long we keep data
| Data | Retention period |
|---|---|
| Contact requests (form, email or phone) not followed by a purchase | 24 months from the last contact, then deleted |
| Contractual and accounting documents, if a purchase follows | 10 years (Article 2220 of the Italian Civil Code) |
| Server access logs | Up to 90 days |
| Anti-abuse code based on the IP address | 10 minutes |
| Blocking of IP addresses after repeated failed login attempts | Temporary |
| Log of requested non-existent pages (404 errors), without IP address | For as long as needed to fix broken links |
| Backup copies of the website and database | Up to 30 days, on the same server in the EU, with restricted access |
| Google Analytics 4 data (only with consent) | Up to 14 months |
| Technical and statistics cookies | Durations set out in the Cookie Policy |
Deleted data may remain in backup copies until these are overwritten, that is, for up to a further 30 days.
If you withdraw your consent or ask for your data to be erased, we will delete it even before the end of these periods, except for data that the law requires us to keep.
Data security
To protect data, we take technical and organisational measures, including:
- an encrypted HTTPS connection across the whole website;
- secure configuration (hardening) of the server;
- access to data restricted to authorised persons;
- regular backups.
No system connected to the internet is entirely free of risk: for this reason we recommend that you send through the form only the information that is necessary.
Your rights
Under Articles 15 to 22 of the GDPR, you have the following rights:
- access: to find out whether we process your data and to receive a copy of it (Article 15);
- rectification: to correct or complete inaccurate or incomplete data (Article 16);
- erasure: to have your data erased, for example when it is no longer necessary or consent has been withdrawn, unless the law requires it to be kept (Article 17);
- restriction of processing: to ask for your data to be stored but not used, for example while its accuracy is being checked (Article 18);
- data portability: to receive the data you have provided in a structured, commonly used and machine-readable format, or to have it transmitted to another controller, where processing is based on consent or on a contract and is carried out by automated means (Article 20);
- objection: to object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21);
- withdrawal of consent: to withdraw any consent you have given at any time (Article 7(3)), without affecting the lawfulness of processing carried out before withdrawal. Consent to statistics can be changed or withdrawn on the Cookie Policy page.
How to exercise your rights
Simply write to info@sollevita.com stating your request. Exercising your rights is free of charge, except in the case of manifestly unfounded or excessive requests (Article 12(5) GDPR). We will respond without undue delay and in any event within one month of receiving your request; for complex cases or where there are numerous requests, this period may be extended by a further two months, in which case we will let you know. Where necessary, we may ask for information to verify the identity of the person making the request.
Complaints to a supervisory authority
If you believe that the processing of your data infringes the GDPR, you may lodge a complaint (Article 77 GDPR) with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU Member State in which you habitually reside or work or in which the alleged infringement took place. This is without prejudice to your right to bring proceedings before the courts (Article 79 GDPR).
No marketing, no profiling
We do not use data for marketing purposes, we do not send newsletters, we do not sell data and we do not carry out profiling. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR): every request is read and handled by a member of the Sollevita team.
Children
The website is not directed at persons under 14 years of age. If a parent or another person with parental responsibility believes that a child under 14 has sent us personal data, they can write to info@sollevita.com to ask for it to be deleted.
Changes to this policy
We may update this policy, for example if the services used by the website or the applicable law change. The current version is always published on this page, with the date of the last update shown at the top. If there are significant changes, we will draw attention to them on the website.
For cookies and statistics tools, please see the Cookie Policy.