Privacy Policy

Privacy policy for the website www.usolar.it

Last updated: 17 March 2026

Home – Privacy Policy

1. Data controller

The data controller for personal data is uSolar S.r.l., with its registered office at via Primo Levi 5, 28060 Sozzago (NO), VAT number 03892850128, email info@usolar.it. This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 to users who visit the site, fill out forms, request information, assistance or quotes, interact via chat or WhatsApp, subscribe to the newsletter, or make purchases through the site. Indeed, the GDPR requires informing the data subject, at the time of collection, about the purposes, legal bases, recipients, any transfers, and storage times or criteria.

2. Types of data processed

The Data Controller may process, depending on the services used, identification and contact data such as first name, last name, company name, email, telephone number, address, and other data entered into forms; data contained in messages sent by the user; data relating to commercial requests, quotes, site inspections, and assistance; data necessary for the creation of commercial leads and support tickets; data relating to orders placed on the site, including billing and delivery addresses, order contents, payment status, and related administrative data; browsing data and technical data such as IP address, logs, user agent, browser and device information; data collected via cookies, pixels, tags, and other tracking tools; data connected to newsletter subscriptions; data relating to communications via live chat and WhatsApp Business; geolocation and address autocompletion data collected via the forms, as the geolocation functionality is active on the site's forms to facilitate address entry. WPForms documents that its add-on can acquire location data and use address autocompletion.

3. Purpose of processing

The data is processed to allow navigation and correct website functioning; respond to requests for contact, quotes, and assistance; manage commercial relationships with customers and prospects; create and manage commercial leads in the CRM and assistance tickets; manage newsletters and informational or promotional communications; manage orders, payments, invoicing, and related administrative obligations; enable the use of live chat and communications via WhatsApp; improve form completion through geolocation and address auto-completion; ensure technical security, prevention of abuse, spam, fraud, and unauthorised access; carry out statistical analyses, performance measurement, advertising, remarketing, and conversion tracking via Google and Meta services, within the limits and methods indicated in the Cookie Policy and user consent preferences. Odoo documents that web forms can create opportunities/leads and that the Helpdesk can also receive tickets from website forms, while live chat and WhatsApp integration can be managed within the Odoo ecosystem.

4. Legal basis for processing

The processing is based, depending on the case, on the execution of pre-contractual measures taken at the request of the data subject; on the execution of a contract or activities connected to the order or service requested; on the fulfilment of legal, accounting, tax, and administrative obligations; on the legitimate interest of the Data Controller in the security, organisation, and protection of its business; on the consent of the data subject, when required, in particular for newsletters, marketing, profiling, remarketing, and the use of cookies or non-technical tracking tools. The Guarantor clarifies that technical cookies and certain analytics do not require consent, whereas profiling cookies and other tracking tools may only be used after informed consent.

5. Data grant

The provision of data requested in contact forms, support, quote requests, purchase processes, and service communications is necessary to the extent that such data is used to fulfil the user's request, manage the order, provide the service, or comply with legal obligations. The provision of data for marketing, newsletter, commercial profiling, and advertising tracking purposes is, however, optional. Failure to provide mandatory data may prevent the Data Controller from fulfilling the request or correctly providing the service. The GDPR also requires the data subject to be informed whether the provision of data is necessary and what consequences arise from refusal.

6. Treatment methods

The processing is carried out using IT and telematic tools, in accordance with criteria of lawfulness, fairness, transparency, relevance, and minimisation, and with technical and organisational measures suitable for protecting the data against unauthorised access, loss, alteration, improper disclosure, or destruction. The data are processed by authorised personnel and by suppliers acting on behalf of the Data Controller within the scope of their respective responsibilities.

7. Services and platforms used

For customer and prospect relationship management, uSolar uses Odoo Online, also for the creation of sales leads, the management of support tickets, newsletters, website live chat, and integration with WhatsApp Business. Odoo describes Odoo Online as a cloud platform with private databases hosted and managed by the provider; it also documents the automatic creation of opportunities from web forms, the reception of tickets via forms and live chat, and the management of WhatsApp conversations within the business workflow.

For the uSolar website modules, WPForms is used, with geolocation active to facilitate address entry. Zapier is also used as an external connector for certain automations and data transfers to other company systems, including flows to Odoo where leads or tickets are created. WPForms documentation states that the Geolocation add-on allows for geographical data collection and address autocomplete, and that the Zapier add-on connects forms to numerous web applications.

For the management of company email and the sending/receiving of electronic communications, including any email flows sent from the website via configured systems, uSolar uses Microsoft 365 / Exchange Online. For email security and protection against phishing, malware, spoofing and other threats, it uses Microsoft Defender for Office 365. Microsoft describes Exchange Online as a hosted email service and Defender for Office 365 as an email protection solution and collaboration tools.

The website is hosted on GoDaddy Managed WordPress infrastructure and also uses the CDN provided by GoDaddy for WordPress, in order to improve the website's performance, content delivery, stability, and technical security. GoDaddy documents the existence of a CDN integrated into their Managed Hosting for WordPress and Managed Hosting for WooCommerce plans.

For e-commerce and customer account management, the website uses WooCommerce. WooCommerce provides specific settings for privacy, accounts, and personal data retention. For payments, the website uses Nexi and PayPal; data strictly necessary for the transaction may be communicated to the payment service provider selected by the user. WooCommerce documents the personal data retention settings for orders; Nexi documents its XPay gateway for online payment management; PayPal states that when a user purchases on merchant sites, the merchant may share personal data with PayPal according to PayPal's privacy statement.

The site may also use, depending on the active pages and functionalities, Google and Meta services such as Google Analytics 4, Google Ads, Google Tag Manager / Google tag, Meta Pixel, Google reCAPTCHA, Google Maps, embedded YouTube and/or Vimeo content, as well as Google reviews widgets. Such services may involve the collection of usage data, browsing data, online identifiers, preferences, events, and technical information, as described in the Cookie Policy and in the respective provider notices. For non-technical cookies and trackers, the consent regime provided for by the regulations and guidelines of the Data Protection Authority applies.

8. Live chat and WhatsApp Business communications

uSolar can communicate with users, customers, and prospects via live chat on the website and via WhatsApp Business on 0280887819. The data processed in this context may include telephone number, contact name or identifier, message content, any attachments, date and time of communication, and data useful for commercial or assistance management. These communications can also be managed via Odoo Online. WhatsApp explains that to understand how a company handles information, the user must consult the company's own privacy policy and that many companies use Meta or other suppliers to better store or manage customer communications.

9. Data recipients

The data may be communicated or otherwise processed, within the limits of their respective competences, by authorised personnel of the Data Controller and by providers of technical, infrastructural, managerial, commercial, support, and security services, including, where applicable, Odoo, Microsoft, GoDaddy, Google, Meta/WhatsApp, Nexi, PayPal, Zapier, and any other entities involved in the provision of services requested by the user. Such entities may act as data processors pursuant to Article 28 of the GDPR or as independent data controllers, depending on the role they actually perform.

10. Transfers to third countries

The use of cloud services, communication platforms, analytics tools, advertising, hosting, email, or payment services may involve the processing of data by parties located outside the European Economic Area. In such cases, the Data Controller shall, within their remit, adopt the measures required by applicable legislation and make further information available upon request. The GDPR requires that the data subject also be informed of any transfers to third countries and of the safeguards applied.

11. Retention periods

The data is not stored indefinitely. It is kept for the time necessary for the purposes for which it is collected and, where provided, for any further period required by law or necessary for the defence of the Data Controller's rights. In particular: data relating to contact requests, quote requests, commercial leads, support tickets, chat communications, WhatsApp communications, geolocation collected in forms, and data processed for newsletters and marketing are kept for 24 months from the last significant interaction, unless a contractual relationship is or continues to be established, or for other documented necessity; data relating to orders, payments, invoicing, and administrative and fiscal fulfilments are kept for the period required by law. The EDPB reminds that the retention period or at least the criteria for determining it must be indicated in the privacy policy; WooCommerce also provides specific settings for shop data retention.

12. Cookies and other tracking tools

The website uses cookies and other tracking tools. Some are technical and necessary for the website's operation; others may be used, if active, for statistics, measurement, advertising, remarketing, conversion tracking, and personalisation of content or campaigns. Consent is not required for the installation of technical cookies and certain analytics, subject to the obligation to provide information. Prior user consent is required for profiling cookies and other non-technical tracking tools. User choices can be managed via the banner or the consent management tools present on the website. For details on cookies, durations, providers, and how to withdraw consent, please refer to the Cookie Policy.

13. Data subject rights

The data subject has the right to obtain access to their personal data, rectification, erasure, restriction of processing, data portability, objection to processing in cases provided for by law, as well as the right to withdraw consent at any time for processing based on consent. They also have the right to lodge a complaint with the Data Protection Authority. The GDPR and the EDPB require that such rights are clearly indicated in the privacy notice.

14. Exercise of rights

To exercise your rights or request information regarding the processing of personal data, you can write to info@usolar.it.

15. Changes to this policy

The Data Controller reserves the right to update this notice at any time, also in consideration of regulatory, technical or organisational changes. The updated version will be published on this page, indicating the date of the last update.