Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how ROIERS HUB S.R.L. collects and processes personal data through the website bricomexor.com, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended.

1. Data controller

ROIERS HUB S.R.L. Registered office: Via Alberto Sordi 2, 81030 Lusciano (CE), Italy VAT / Tax code: 04956490611 Email: info@bricomexor.com

The controller has not appointed a Data Protection Officer, as it is not required to do so under Article 37 GDPR. All privacy requests should be sent to info@bricomexor.com.

2. What data we collect

Data you give us directly

Contact and enquiry data: name, email address and the content of your message when you write to us or use a contact form.
Newsletter data: email address, and the date and time of your subscription and of your consent.
Comment or feedback data: name, email address and the text you submit, where commenting is enabled.
Order data, where you buy directly from us: name, billing and shipping address, email address, telephone number, tax code or VAT number where required for invoicing, order details and payment status. We do not receive or store full card numbers: payments are handled by the payment provider.

Data collected automatically

Technical and navigation data: IP address, browser type and version, operating system, device type, pages visited, referring URL, date and time of access. This data is contained in server logs and in cookies or similar technologies. See the Cookie Policy.

3. Why we process it, and on what legal basis

Purpose	Legal basis (Art. 6 GDPR)	Retention
Replying to your enquiries	Steps taken at your request prior to a contract, or legitimate interest in answering (Art. 6(1)(b) or (f))	24 months from the last message
Managing an order, delivery, invoicing and after-sales	Performance of a contract (Art. 6(1)(b))	10 years for accounting records (Art. 2220 Italian Civil Code)
Sending the newsletter	Your consent (Art. 6(1)(a))	Until you unsubscribe, then consent records for 2 years
Security, fraud prevention, technical logs	Legitimate interest (Art. 6(1)(f))	12 months maximum for logs
Statistical and analytics cookies	Your consent (Art. 6(1)(a)), unless anonymised and technically equivalent	See the Cookie Policy
Establishing, exercising or defending legal claims	Legitimate interest (Art. 6(1)(f))	Until the applicable limitation period expires

Providing data marked as mandatory is necessary to complete the relevant request: without it we cannot reply, fulfil an order or send the newsletter. Any other data is optional.

4. Who we share it with

Personal data may be disclosed to:

IT and hosting providers, email and newsletter platforms, analytics providers;
payment service providers, couriers and logistics operators, where you place an order;
accountants, tax advisors and lawyers;
public authorities, where required by law.

These parties act as data processors appointed under Article 28 GDPR, or as independent controllers where they determine their own purposes (for example payment providers and couriers). An up-to-date list of processors is available on request at info@bricomexor.com.

We do not sell personal data.

5. Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where this happens, the transfer is based on an adequacy decision of the European Commission or on the Standard Contractual Clauses adopted by the Commission, together with supplementary measures where necessary. You can request a copy of the safeguards in place by writing to info@bricomexor.com.

6. Your rights

Under Articles 15 to 22 GDPR you have the right to:

access your data and obtain a copy;
rectify inaccurate or incomplete data;
erase your data (“right to be forgotten”), where the conditions are met;
restrict processing;
object to processing based on legitimate interest, and at any time to direct marketing;
data portability, for data processed by automated means on the basis of consent or contract;
withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to info@bricomexor.com. We reply within one month, extendable by two further months for complex requests, as provided by Article 12 GDPR.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

7. Automated decision-making

We do not use your data for automated decision-making producing legal effects concerning you, nor for profiling in that sense.

8. Minors

The website is not intended for children under 14. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, write to info@bricomexor.com and we will delete it.

9. Security

We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access control and regular backups. No system can be guaranteed to be completely secure, but we work to protect your data against accidental or unlawful destruction, loss, alteration and unauthorised disclosure.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in the law or in how the website works. The current version is always published on this page with its date. Material changes will be signalled on the website.