Last updated: 3 February 2026.
Privacy notice — personal data processing
This notice is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) to users who interact with the website enstructa.com.
1. Data Controller
The data controller is ENSTRUCTA S.r.l., registered office at Via Ludovico Ariosto, V Strada Privata 24, 70043 Monopoli (BA), Italy, VAT/Tax code 09094230720, reachable by certified email (PEC) at enstructa@pec.lsmconsulting.it. Data processing is carried out under the responsibility of Eng. Martino Roberto Liuzzi, legal representative (Sole Director) of the Controller and contact point for data-subject requests.
2. Data collected and purposes of processing
The personal data collected through the contact form on this website are: full name, company (optional), email address, phone number (optional), topic and message text. Such data is processed exclusively to respond to the information or contact request submitted by the user and for any resulting pre-contractual communications.
3. Legal basis for processing
Processing is based on the explicit consent of the data subject (Art. 6(1)(a) GDPR), given by ticking the relevant checkbox in the contact form, as well as on the performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
4. Retention period
Data collected through the contact form is retained for the time strictly necessary to handle the request and, where a contractual relationship is established, for the duration of that relationship and for the following 10 years, in compliance with applicable fiscal and legal obligations, unless a different period is required by law.
5. Recipients and processors
Personal data is processed by authorised staff of ENSTRUCTA S.r.l. Data is transmitted to the following data processors appointed under Art. 28 GDPR: Web3Forms (https://web3forms.com), provider of the contact form submission and forwarding service; Aruba S.p.A. (https://www.aruba.it), provider of the website hosting service. Data is not shared with third parties for marketing or profiling purposes.
6. Transfer of data outside the EEA
The Web3Forms service may involve the transfer of personal data outside the European Economic Area (EEA). Such transfer takes place on the basis of appropriate safeguards under Arts. 44-46 GDPR, such as Standard Contractual Clauses adopted by the European Commission. Please refer to Web3Forms' privacy policy for up-to-date information on the protection measures in place.
7. Data subject rights (Arts. 15–22 GDPR)
The data subject may exercise the following rights at any time: access to personal data (Art. 15); rectification of inaccurate data (Art. 16); erasure of data — 'right to be forgotten' (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); objection to processing (Art. 21); withdrawal of consent given (Art. 7(3)). To exercise these rights, send a request by certified email (PEC) to enstructa@pec.lsmconsulting.it, indicating the right you wish to exercise and the information needed to identify you.
8. Right to lodge a complaint
The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), which is the supervisory authority competent for data protection in Italy, if they believe that the processing of their data infringes the GDPR or applicable national law.