Last Updated: August 24, 2026

This page describes how personal data is processed for users who consult the website cisapublisher.com, purchase books and publications on our e-commerce platform, or contact us using the provided contact details. This privacy policy is provided pursuant to Article 13 of EU Regulation 2016/679 (GDPR) and applies exclusively to this website.

1. DATA CONTROLLER

EUROWASTE SRL
Via Beato Pellegrino 23, 35137 Padova (PD)
VAT ID: 03331010284
Email: [email protected]
Phone: +39 049 8726986

For any clarification or to exercise your rights regarding your personal data, you can write to: [email protected].

2. WHAT DATA WE COLLECT AND WHY

A. Account registration and online purchases (e-commerce)

• Data collected
  First name, last name, shipping and billing address, affiliation or institutional entity (if applicable), Tax Code / VAT number, and email address.
• Purpose
  To enable the creation of a personal account, manage the checkout process, process and ship ordered books, provide customer support, and comply with all legal, administrative, accounting, and tax obligations.
• Legal basis
  Performance of a sales contract or pre-contractual measures taken at your request (Art. 6(1)(b) of the GDPR) for order management; compliance with a legal obligation (Art. 6(1)(c) of the GDPR) for invoicing and accounting requirements.
• Retention period
  Data required for account management is retained until a deletion request is made by the user. Accounting and tax records related to placed orders are retained for 10 years, as required by Article 2220 of the Italian Civil Code.

B. Data provided voluntarily via email or phone

• Data collected
  Email address, name, and any personal information or details included in the email message or communicated by phone.
• Purpose
  To respond to direct inquiries sent to our contact addresses and process information requests.
• Legal basis
  Performance of pre-contractual or contractual measures taken at your request (Art. 6(1)(b) of the GDPR).
• Retention period
  24 months from the last contact or resolution of the request, unless a contractual relationship arises (in which case statutory retention periods apply).

• Navigation Data
  IP address, browser type, operating system, access times, pages visited, and server status codes.
• Purpose
  To ensure proper site functionality, maintain system security, and detect technical anomalies or security breaches.
• Legal basis
  Legitimate interest in the security and operation of the website (Art. 6(1)(f) of the GDPR).
• Retention period
  System logs are overwritten via automatic rotation approximately every 30 days, unless longer retention is necessary to investigate cybercrimes.

3. PAYMENT DATA

All financial transactions for purchasing books are processed via secure third-party payment gateways (e.g., banking networks, credit cards, or PayPal). EUROWASTE SRL does not collect or store full credit card numbers or payment credentials on its servers.

4. DATA RECIPIENTS

Personal data is neither published nor sold to third parties. It may be communicated to external parties acting as Data Processors (Art. 28 GDPR) or independent Data Controllers strictly for necessary website and e-commerce operations:

• Hosting & IT service providers
  For website hosting, server maintenance, and email services.
• Shipping & courier companies
  For delivering physical books to the address specified during purchase.
• Payment service providers
  For processing online financial transactions.
• Tax, administrative, and legal consultants
  For accounting compliance, tax obligations, and protecting legal interests.
• Public authorities & entities
  Where required by law or judicial order.

5. COOKIES

This website uses only first-party technical cookies, which are essential for core e-commerce functionality (such as saving items in the shopping cart or maintaining an active account login session).
No profiling cookies or third-party tracking tools are used. Consequently, under applicable law (Art. 122 of the Italian Privacy Code and the Italian Data Protection Authority Guidelines of June 10, 2021), a prior consent banner is not required.

6. YOUR RIGHTS

As a data subject, you may exercise your rights under Articles 15–22 of the GDPR at any time by requesting EUROWASTE SRL to:

• access your personal data and obtain a copy (Art. 15).
• rectify inaccurate data or complete incomplete data (Art. 16).
• erase your personal data or account, within statutory tax retention limits (Art. 17).
• restrict processing under specific conditions (Art. 18).
• receive your data in a structured, commonly used, and machine-readable format (portability, Art. 20).
• object to processing based on legitimate interest (Art. 21).

To exercise any of these rights, please send a written request to: [email protected].

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a formal complaint with the competent supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali – garanteprivacy.it) or seek judicial remedy.