Privacy Policy

Who is responsible for your data

The controller of your personal data, that is the company that decides why and how they are processed, is:

ITA EVO is a product of Binotto Group, and this website is published by Binotto S.r.l. The email address above is our contact point for every question about the protection of your personal data, including requests to exercise your rights.

What this policy covers

This policy explains how we process personal data through the website itaevo.com, and in particular:

• the pages of the website and the “Request a quote” form;
• the invitation and booking system for IAA Transportation 2026, available at itaevo.com/events, and the emails it sends;
• the messages you send to the email addresses shown on the website.

Other websites we link to, such as binotto.com and the social media pages of Binotto Group, have their own privacy policies. This policy is based on the EU General Data Protection Regulation 2016/679 (GDPR) and on Italian law; the section Information for specific countries adds what the laws of other countries require.

What data we process and why

For each activity we explain which data we use, for what purpose, on what legal basis under Article 6 GDPR, and for how long we keep them.

Browsing the website

When you open a page, your browser automatically sends our server some technical information, which the server records in its log files.

Data

IP address; date and time of the request; address of the page or file requested, including any parameters in the link (for example the personal code contained in an invitation link); result of the request and amount of data transferred; address of the page you came from (referrer); type and version of your browser and operating system (user agent).

Purpose

Delivering the website, keeping it secure (for example detecting and blocking attacks and abuse) and solving technical problems. The hosting control panel also uses the logs to produce aggregated traffic statistics, which only our administrators can see.

Legal basis

Our legitimate interest in operating a secure and working website (Art. 6(1)(f) GDPR).

Retention

Log files are not kept for a fixed number of days: the server keeps only the most recent files, up to a set total size, and automatically deletes the oldest ones. How long a record is kept therefore depends on the amount of traffic. Logs are kept longer only when needed to investigate a specific security incident or at the request of the authorities.

Required?

Yes: without these data the website cannot be delivered to your browser.

In the same way, the email server that sends the website’s messages records technical data about each message in its logs (sender, recipient, date and time, delivery result), for security and troubleshooting. These logs are also deleted automatically on a rolling basis.

Cookies and your consent choice

The website uses a few technical cookies that are strictly necessary: the session cookie of the invitation and quote system, and a cookie that remembers your choice about analytics cookies. They do not require your consent. The legal basis is our legitimate interest in providing the pages and services you request and our legal obligation to respect your choice (Art. 6(1)(f) and (c) GDPR; Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003). The full list of cookies, their duration and how to manage them are in the Cookie Policy.

Website statistics with Google Analytics (only with your consent)

Only if you accept analytics cookies, the website uses Google Analytics 4, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) together with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). If you do not accept, Google Analytics is not loaded and the website works in exactly the same way.

Data

A random identifier stored in the _ga cookies; the pages you view and their titles; date, time and duration of the visit; the website you came from; browser language, screen resolution, type of device, browser and operating system; approximate location (country, region, city) derived from your IP address; interactions with the pages, such as scrolling to the end of a page, clicking on links to other websites and starting to fill in the quote form. Google Analytics does not receive the content of the form. The page addresses sent to Google, both of the current page and of the page you came from, are stripped of any parameters, so the personal codes contained in invitation links are not sent to Google.

Purpose

Understanding, in aggregate form, how the website is used: which pages are read, where visitors come from, what can be improved. We do not use Google Analytics to identify you, for advertising or to build profiles. Google Signals, which would link the data to Google accounts, is disabled.

Legal basis

Your consent (Art. 6(1)(a) GDPR; Art. 122 of the Italian Privacy Code). You can withdraw it at any time via “Cookie settings” at the bottom of every page; withdrawal does not affect the lawfulness of the processing carried out before.

Retention

The _ga cookies expire 13 months after your last visit (some browsers delete them sooner). In Google Analytics, the data linked to the identifier are kept for no more than 14 months; after that, only aggregated reports remain.

Required?

No. Refusing has no effect on your use of the website.

IP address. According to Google, Google Analytics 4 does not log or store IP addresses: for visitors in the EU, Switzerland and the UK, the IP address is used on European servers only to estimate the approximate location and is then discarded.

Google’s role and transfers. Google processes these data on our behalf under the Google Ads Data Processing Terms, and we have not enabled the sharing of Analytics data with Google for its own purposes. The data may be processed by Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (recognised as providing adequate protection by the European Commission on 10 July 2023), its UK Extension and the Swiss-U.S. Data Privacy Framework; in addition, Google’s data processing terms include the Standard Contractual Clauses approved by the European Commission. To find out more: Google Privacy Policy and how Google uses information from sites that use its services.

Quote requests

When you send the “Request a quote” form, the request is saved in the website’s database and forwarded by email to Binotto’s marketing team.

Data

First name, last name, company, country and email address. With the request, the system also records the date and time, your IP address, your browser’s user agent and the address of the page from which the form was sent, without the personal code of invitation links.

Purpose

(a) Answering your request, preparing a quote and following up the business contact that results from it. We do not use these data to send you newsletters.

(b) Protecting the form against spam and abuse, for example by limiting the number of requests from the same network and discarding automated submissions.

Legal basis

(a) Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or, if you write on behalf of a company, our legitimate interest in answering the business requests we receive (Art. 6(1)(f) GDPR).

(b) Our legitimate interest in the security of the service (Art. 6(1)(f) GDPR).

Recipients

Binotto’s marketing and sales staff and, where needed, the Binotto Group company, agent or dealer responsible for your country, only to handle your request (see Who receives your data).

Retention

The request saved in the website’s database, together with the record of the email that forwarded it to our staff, is deleted automatically 24 months after it was sent. The copies of the request in our mailboxes and the correspondence that follows are kept as long as needed to handle your request and, if no contract follows, no longer than 24 months after our last contact with you; then they are deleted. If a contract follows, the data become part of the contract documents and are kept for the periods required by law (for example ten years for accounting records and business correspondence under Article 2220 of the Italian Civil Code).

Submissions blocked by the anti-abuse checks are recorded without the name, company and email address entered (only IP address, user agent, page of origin and reason for the block) and are deleted automatically after 30 days.

Required?

All fields of the form are required: without them we cannot answer you.

Invitations to IAA Transportation 2026

For IAA Transportation 2026 (Hannover, Germany, 15–20 September 2026) we invited business contacts of Binotto Group to a private presentation of ITA EVO at our stand and/or to our evening event of 17 September 2026. This section is addressed to the people who received these invitations. It also serves as the information required by Article 14 GDPR, because we did not collect these data from you.

Source

The business contact records of Binotto and of its sales network, which selected the contacts to invite; some contacts were added manually by our staff.

Data

First name, last name, company, role, business email address, phone number (where available) and preferred language; the Binotto sales representative who follows you and any internal notes; your personal invitation link and your replies (acceptance or refusal, the time slot booked, participation in the evening event, cancellations); your personal admission QR code and the date and time of your check-in at the event; the history of the emails we sent you (address, subject, date, result); the opening of the emails and the clicks on their links (see below).

Purpose

Sending invitations, reminders and confirmations; managing bookings for the private sessions and the evening event; issuing admission QR codes and checking guests in at the entrance; measuring the delivery and effectiveness of our invitations; following up, through your sales representative, the contacts made at the event.

Legal basis

Our legitimate interest in inviting business customers and contacts to our trade fair event, organising it and following up the contacts made there (Art. 6(1)(f) GDPR; Recital 47 GDPR recognises direct marketing as a possible legitimate interest). You can object at any time (see below).

Retention

Until 24 months after the event, that is until the end of September 2028; then the data are deleted. The contact details that Binotto needs for an ongoing business relationship with you or your company are kept in Binotto’s customer records according to the rules of that relationship.

Required?

Replying to the invitation was entirely up to you. Without a booking we could not reserve a session for you or admit you to the evening event.

Measuring email opening and clicks. The emails sent by the invitation system contain a tiny invisible image and personalised links. When your email program loads the image, or when you click a link, the system records the date and time, the IP address and the user agent of your device and, for clicks, the link chosen. We use this information to know whether our invitations reached you and how our communications performed. You can prevent it by not loading images automatically in your email program, and you can object at any time: we will then stop using these data and delete them.

Your right to object. You can object at any time to the use of your data for these purposes, including the measurement of opening and clicks, by writing to marketing@binotto.com, the address given in every email. An objection to direct marketing is always accepted, without the need to give reasons.

Emails and other contacts

If you write to itaevo@itaevo.com, to marketing@binotto.com or to another address shown on the website, or if you call us, we use your contact details and the content of your message to answer you and to manage any follow-up. The legal basis is the steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering the messages we receive (Art. 6(1)(f) GDPR). We keep the correspondence for as long as needed for this and, if no business relationship follows, no longer than 24 months after the last contact. Please do not send us special categories of data (for example health data): we do not need them.

Who receives your data

Your data are accessible only to people who need them for the purposes described above and who are bound to confidentiality:

• authorised Binotto staff: marketing, sales and event staff;
• Binotto Group companies, agents and dealers responsible for your country, when your quote request or your business contact concerns their territory, only to handle it;
• service providers that process data on our behalf:
  • Treelab Agency S.r.l., Via Villaraspa 19, 36061 Bassano del Grappa (VI), Italy, which develops and manages the website, the server, the invitation system and the email server used for the website’s messages, and keeps the backup copies of the server in Italy;
  • Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which provides the servers in Germany on which the website, its database and that email server run;
  • the provider of Binotto’s corporate email service, in Italy, for the messages that reach Binotto’s mailboxes;
  • Google, only if you accept analytics cookies (see Website statistics);
• public authorities, when required by law.

We do not sell your personal data and we do not disclose them to third parties for their own marketing.

Where your data are processed

The website, its database and the email server that sends its messages run on servers in Germany, and the backup copies are kept in Italy. The data processed through this website therefore remain in the European Union, with two exceptions:

• Google Analytics, only if you accept it: data may be transferred to Google LLC in the United States, under the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses (see Website statistics);
• requests handled outside the EU: if your quote request or business contact is handled by a Binotto Group company, agent or dealer located outside the EU, usually in your own country, your data are sent there on the basis of an adequacy decision of the European Commission where one exists or, otherwise, because the transfer is necessary to handle the request you made to us (Art. 49(1)(b) GDPR).

You can ask us for more information on these transfers and on the safeguards applied by writing to marketing@binotto.com.

How long we keep your data

At the end of these periods the data are deleted or made anonymous. Deleted data may remain for a short time in the backup copies of the server, which are overwritten automatically on a rolling basis. We keep data for longer only where the law requires it or where they are needed to establish, exercise or defend legal claims.

How we protect your data

• Every connection to the website is encrypted (HTTPS).
• The website and the invitation system run on servers in data centres in the European Union, managed by our technical provider.
• Access to the management area of the invitation system and of the quote requests is restricted to authorised staff and protected by password.
• The quote form is protected by automatic checks against spam and abuse.
• The website does not load fonts, scripts or other content from third-party servers; the only exception is Google Analytics, and only after your consent.

No system is completely secure. If a security incident affects your data and is likely to result in a high risk for you, we will inform you as required by Article 34 GDPR.

Your rights

You have the right to:

• access your data and receive a copy of them (Art. 15 GDPR);
• have inaccurate data corrected and incomplete data completed (Art. 16);
• have your data erased (Art. 17);
• restrict the processing (Art. 18);
• receive the data you provided to us in a structured, commonly used and machine-readable format and have them transmitted to another controller, where the processing is based on your consent or on a contract (Art. 20);
• object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, and to direct marketing at any time and without giving reasons (Art. 21);
• withdraw your consent at any time, without affecting the lawfulness of the processing carried out before (Art. 7(3)); for analytics cookies, use “Cookie settings”.

How to exercise them. Write to marketing@binotto.com or call +39 0444 593290. It is free of charge. We reply within one month; for complex or numerous requests this period can be extended by two further months, in which case we will tell you within the first month. We may ask you for information to verify your identity.

Complaints. If you believe that we process your data unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the EU or EEA country where you live or work or where the alleged infringement took place (list of authorities).

Automated decisions

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. The automatic checks that protect the quote form may block submissions that appear to be automated or that are repeated too often from the same network: if a request of yours is blocked, you can always write to us at itaevo@itaevo.com.

Children

This website is intended for companies and professionals and is not directed to children. We do not knowingly collect personal data of people under 16. If you believe that a child has sent us personal data, please contact us and we will delete them.

Information for specific countries

We apply this policy to everyone, wherever they are. The following sections add the information required by the laws of some countries, and apply only where those laws apply to us.

United Kingdom

If you are in the UK, the UK GDPR and the Data Protection Act 2018 also apply, and you have the rights described in Your rights. Your data are processed in the European Union, which the UK recognises as providing adequate protection; transfers to Google LLC in the United States (only with your consent) are covered by the UK Extension to the EU-U.S. Data Privacy Framework. You can complain to the Information Commissioner’s Office (ico.org.uk).

Switzerland

If you are in Switzerland, the Federal Act on Data Protection (FADP) also applies. Your data are processed in Germany and Italy, countries that the Federal Council recognises as providing adequate protection, and, for Google Analytics and only with your consent, in the United States under the Swiss-U.S. Data Privacy Framework, in which Google LLC participates. A request handled by a Binotto Group company or dealer in another country is sent there only when this is necessary to handle it. You have the right to information, correction, deletion and data portability, and the right to object to the processing. You can contact the Federal Data Protection and Information Commissioner (FDPIC).

United States: California

This section applies to California residents to the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Binotto.

Personal information we collect. In the last 12 months we have collected these categories of personal information:

• identifiers: name, email address, IP address, cookie identifiers, the personal codes of invitation links;
• personal information listed in Cal. Civ. Code § 1798.80(e): name, phone number, company and role;
• commercial information: the products for which you ask for a quote;
• internet or other electronic network activity: server log data, your interactions with the website (Google Analytics, only with your consent), the opening of our emails and the clicks on their links;
• geolocation data: approximate location derived from the IP address (not precise geolocation);
• professional or employment-related information: company, role and country.

We do not collect sensitive personal information as defined by the CCPA, and we do not use personal information to infer characteristics about you. We collect personal information from you, automatically from your device and, for event invitations, from Binotto’s sales network, for the purposes described in What data we process and why. We disclose it for business purposes to our service providers and contractors (hosting and IT services, email and, only with your consent, analytics) and to Binotto Group companies, agents and dealers in order to handle your requests. Retention periods are listed in How long we keep your data.

No sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

Your rights. You have the right to know what personal information we have collected about you, including the categories and the specific pieces; to delete it; to correct inaccurate personal information; to opt out of the sale or sharing of personal information (we do neither); to limit the use of sensitive personal information (we do not collect it); and not to be discriminated against for exercising these rights. To exercise them, write to marketing@binotto.com or call +39 0444 593290. We confirm receipt within 10 business days and respond within 45 calendar days; when necessary we can extend this by a further 45 days, telling you why. We verify your identity by comparing the information you give us with the information we hold. An authorised agent may submit a request on your behalf with your signed permission; we may ask you to confirm your identity directly with us.

Global Privacy Control. We honour the Global Privacy Control (GPC) signal: if your browser sends it, we treat it as a request to opt out of the sale and sharing of your personal information and as a refusal of analytics cookies, unless you choose otherwise in the cookie settings. As there is no common standard for “Do Not Track” signals, we do not respond to them separately; in any case, analytics cookies are used only with your consent.

“Shine the Light”. We do not disclose personal information to third parties for their direct marketing purposes.

United States: other states

If you live in a U.S. state with a comprehensive consumer privacy law, for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others, you may have, where that law applies to us, the right to confirm whether we process your personal data, to access, correct and delete them, to obtain a copy in a portable format, and to opt out of targeted advertising, the sale of personal data and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data, we do not process them for targeted advertising and we do not carry out such profiling; nor do we sell covered information as defined by Nevada law. Many of these laws do not cover data about people acting in a professional capacity; we will nonetheless handle requests from any U.S. resident. To make a request, write to marketing@binotto.com. If we decline your request, you can appeal by replying to our decision with the subject “Privacy appeal”: we will answer within the time set by the law of your state and, if we reject the appeal, you can contact your state’s Attorney General.

Brazil

If the Brazilian General Data Protection Law (Lei nº 13.709/2018, “LGPD”) applies, the legal bases described in this policy correspond to: consent (art. 7, I) for analytics cookies; the performance of preliminary procedures related to a contract, at your request (art. 7, V), for quote requests; our legitimate interests (art. 7, IX) for security, event invitations and answers to business contacts. Under art. 18 LGPD you have the right to confirmation that we process your data; access; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion of unnecessary or excessive data; portability; information about the public and private entities with which we share your data; information about the possibility of not giving consent and its consequences; withdrawal of consent; and to object to the processing. Your data are processed in the European Union as described in this policy. You can contact us, through our channel for data subjects, at marketing@binotto.com, and you can file a complaint with the National Data Protection Authority (ANPD).

Canada

If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Québec, the Act respecting the protection of personal information in the private sector also apply. We collect, use and disclose your personal information for the purposes described in this policy, with your consent where required; you can withdraw your consent at any time, subject to legal or contractual restrictions. Analytics cookies, which would measure how you use the website, stay off unless you turn them on. Your personal information is stored and processed outside Canada, in Germany and Italy and, for Google Analytics with your consent, in the United States, where it may be accessible to the courts and authorities of those countries under their laws. You have the right to access your personal information and to have it corrected; in Québec you also have the right to data portability. You can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) and, in Québec, the Commission d’accès à l’information (cai.gouv.qc.ca).

Other countries

If you are in another country, your data are processed in the European Union under the GDPR, as described in this policy. If the law of your country gives you further rights, for example to receive specific information about the transfer of your data abroad or to give a separate consent to it, and that law applies to our processing, you can exercise those rights by writing to marketing@binotto.com, and we will comply with them.

Changes to this policy

We may update this policy when our processing changes or when the law requires it. The date and the version at the top of the page show the version in force; if we make significant changes, for example new purposes, we will announce them on the website before they take effect. Previous versions are available on request.