This Privacy Policy describes how 2A srl (hereinafter "Oxypeak", "we", "our") processes the personal data of users (hereinafter "you", "your") who interact with the website www.oxypeak.it (the "Site"), in compliance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
1. Categories of data processed
Oxypeak processes only the data strictly necessary for the functioning of the Site. Specifically:
- Browsing data: IP address, browser type, operating system, pages visited, date and time of access. These are collected automatically by the hosting infrastructure for security and statistical purposes in aggregate form.
- Local preference data: language choice (English/Italian) stored in your browser via local storage, to keep your preference across visits. No personal information is sent to our servers.
- Email contact data: if you choose to contact us by clicking the email links present on the Site, we receive your email address and the contents of your message. The use of email is voluntary and at your initiative.
2. Purposes and legal bases of processing
- Provision of the Site: legal basis is the legitimate interest of the Data Controller in delivering the requested service (Art. 6.1.f GDPR).
- Site security and prevention of misuse: legal basis is the legitimate interest of the Data Controller (Art. 6.1.f GDPR).
- Response to your requests via email: legal basis is the performance of pre-contractual measures taken at your request (Art. 6.1.b GDPR).
3. Data retention
Browsing data are retained for the time strictly necessary to fulfil the purposes described above (typically up to 12 months for web server logs). Email correspondence is retained for the time necessary to handle your request and comply with legal obligations.
4. Recipients of data and transfer outside the EU
Your data are processed by personnel of the Data Controller authorised to do so, and may be communicated to:
- Hosting providers that operate the technical infrastructure of the Site, acting as Data Processors under Art. 28 GDPR.
- Public authorities when required by law.
Data are processed primarily within the European Union. Where data are processed outside the EU by a Data Processor (e.g. for content delivery), the transfer is governed by Standard Contractual Clauses approved by the European Commission or other adequate safeguards under Chapter V GDPR.
5. Your rights
Under Articles 15 to 22 of the GDPR you have the right to:
- access your personal data
- request rectification or erasure
- request the restriction of processing
- object to the processing
- request data portability
- withdraw your consent at any time, where consent was the legal basis
- lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it)
To exercise your rights, write to adriano.dipaco@oxypeak.it.
6. Cookies
For details about cookies and similar technologies used by the Site, please consult our Cookie Policy.
7. Updates to this Policy
This Privacy Policy may be updated from time to time. The most recent version is always available at this URL.
Last update: April 2026