Privacy Policy

WEBSITE CUSTOMER PRIVACY NOTICE

PROVIDED PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679 (“GDPR”)

SEW-EURODRIVE Sas, a subsidiary of SEW S.r.L & CO, places the utmost importance on the security and confidentiality of the personal data of customers (hereinafter, the “Customers” or “Users”) who visit the website https://www.sew-eurodrive.it/ (hereinafter, the “Website”) in order to use the services available through it (hereinafter, the “Services”) and wishes to provide them with information regarding the processing of their personal data.

1. Data Controller and Data Protection Officer (DPO)

The data controller is SEW-EURODRIVE Sas di SEW S.r.L & CO, with registered office at Via Bernini No. 12, 20033, Solaro (MI), Tax ID No. 00809480155 and VAT No. 00694930967 (hereinafter, the “Company” or “SEW-EURODRIVE”).

For any inquiries regarding the processing of personal data, as well as to exercise the rights recognized by the GDPR and further described in paragraph 7 below, you may contact the Company at the email address privacy@SEW-EURODRIVE.it or by phone at +39 0296980245.

SEW-EURODRIVE has appointed a Data Protection Officer (“DPO”, also known as Data Protection Officer - “DPO”) appointed pursuant to Article 37 of the GDPR, who can be contacted at the following email address: dpo@SEW-EURODRIVE.it .

2. For what purposes does the Company process personal data

Through the Website, the Company collects certain personal data relating to Users, either voluntarily provided by them or collected during the normal operation of the Website, which is processed for the purposes described below, including the ability to select the products and services offered (the “Products”), it being understood that the Website does not constitute an e-commerce platform and that it is not possible to make purchases directly through it.

The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow for the identification of Users. This category of data includes the IP addresses of the computers used by Users connecting to the Website, the URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters related to the operating system used. This data is used solely to obtain anonymous statistical information on the use of the Website and to verify its proper operation, and is deleted immediately after processing. The data may be used to determine liability in the event of any cybercrimes committed against the Website.

The Website also uses cookies and other tracking tools. Please refer to the cookie policy available at the following link. You may also manage your preferences at any time by accessing the footer of the Website, selecting the “Cookie settings” section, and using the preference management panel available there for further information, as well as managing your preferences in this regard at any time.

The following is a summary of the data processing activities carried out by the Company.

3. How We Keep Personal Data Secure

The Company implements appropriate security measures to ensure the protection, security, integrity, and accessibility of Users’ personal data. These security measures are designed to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

All personal data is stored on the Company’s secure IT systems (or in properly archived paper copies) or on those of our suppliers, and is accessible and applicable in accordance with our security standards and policies (or equivalent standards for our suppliers).

4. How Long We Retain Personal Data

The Company retains the User’s personal data only for as long as necessary to fulfill the purposes for which it was collected or for any other legitimate related purpose.

Personal data that is no longer necessary, or for which there is no longer a legal basis for retention, will be irreversibly anonymized or securely destroyed.

If the processing of personal data serves multiple purposes, the data will be deleted or anonymized as soon as the retention period for the last purpose has expired.

The table referred to in paragraph 2 sets out the retention periods for each purpose.

5. With whom we may share personal data

Duly authorized Company employees may have access to personal data, as well as external vendors—who, if necessary, are appointed as data processors—who provide support for the delivery of the Services, including those necessary for the operation of the App. External service providers include, in particular, HubSpot, Inc., as the provider of the CRM platform used by the Company to manage user relationships and activities related to the Services.

You may contact the Company at the following address privacy@SEW-EURODRIVE.it to request access to the list of data processors and other parties to whom we disclose data.

6. Transfers to Third Countries

Your personal data will be processed primarily within the European Economic Area (EEA). However, the Company’s use of certain tools may involve, albeit on a limited basis, the transfer of data to entities located in countries that do not belong to the European Union (EU) or the EEA (hereinafter, “Third Countries”). This is the case with the HubSpot CRM application, provided by HubSpot, Inc., a company incorporated under U.S. law.

These transfers are carried out in compliance with the provisions of Chapter V of the GDPR. Specifically, the transfer of data to HubSpot, Inc. is based on adequate safeguards, such as: the adequacy decision regarding the EU–US Data Privacy Framework, to which HubSpot adheres, and the Standard Contractual Clauses adopted by the European Commission and incorporated into the Data Processing Agreement entered into with HubSpot, where applicable.

These third parties will process personal data either as independent data controllers or as data processors, duly appointed by the Company in accordance with data protection legislation (depending on the role they play in relation to the processing).

You may write to the Company at any time, using the contact information provided below, to inquire about the parties to whom your personal data is transferred and to request a copy of the safeguards adopted for the transfer.

7. Data Protection Rights and the Right to File Complaints with the Supervisory Authority

Every Customer has the right to request from the Company, provided that the legal basis for the request exists:

a) access to personal data, as provided for in Article 15 of the GDPR;

b) the rectification or supplementation of personal data held by the Company that is deemed inaccurate, as provided for in Article 16 of the GDPR;

c) the erasure of personal data for which the Company no longer has a legal basis for processing, as provided for in Article 17 of the GDPR;

d) restriction of the processing of personal data, where one of the circumstances set forth in Article 18 of the GDPR applies;

e) a copy of the personal data provided to the Company, in a structured, commonly used, and automaticly readable format, and the data transmission to another data controller (so-called “data portability”), as provided for in Article 20 of the GDPR;

f) the right to withdraw consent, where the processing is based on that legal basis.

Right to Object: In addition to the rights listed above, the User has the right to object at any time to the processing of personal data carried out by the Company for the pursuit of its legitimate interests. Furthermore, the User may object at any time if personal data is processed for marketing purposes, including profiling to the extent that it is related to such marketing.

If the User exercises the rights described above, the Company will process any personal data provided by the User solely for the purpose of responding to the request. The data processed in this manner will then be retained in a dedicated archive for 2 years from the date the Company sends its final response.

Exercising these rights—which can be done by contacting the Company using the contact information provided in paragraph 1, with the subject line “EXERCISE OF PERSONAL DATA RIGHTS” (specifying which right is being exercised or by written communication via mail to the Data Controller’s address), is free of charge and is not subject to any formal requirements. It is the Company’s responsibility to verify that the User is entitled to exercise the relevant right and to respond, as a rule, within one month.

If the User believes that the processing of their personal data violates the provisions of the GDPR, they have the right to file a complaint with the Data Protection Authority, using the contact information available on the website www.garanteprivacy.it, or to bring the matter before the appropriate courts

Last updated: June 22, 2026

CONSENT FORM

Having read the privacy policy:

• The undersigned ______________________________ authorizes, by checking the corresponding box below, the Company to process my personal and contact information for marketing and communication purposes, including promotional sales initiatives, carried out through automated means of contact (email, text messages, instant messaging, and other mass messaging tools, etc.) and traditional contact methods (e.g., phone calls with an operator).

 YES  NO

Consent is optional;I may revoke my consent to the Company for future marketing communications at any time by contacting the phone number +39 0296980245 or by emailing: privacy@SEW-EURODRIVE.it .

Date and signature

___________________________