Your data and your rights. This notice covers the DPM Tapes website, purchases including guest checkout, and Customer Area services.
1. Controller and contact details
The controller is Dipiemme Srl, Italian tax and VAT number 07286650630, registered office at Via S. Tommaso d'Aquino 33, 80133 Naples; operating office at Zona ASI Aversa Nord, Consorzio Sinè, 81032 Carinaro (CE), Italy. For personal data enquiries: info@dpmtapes.it or certified email dpmtapes@registerpec.it. Website contact details: web@dpmtapes.it, telephone +39 081 5707893.
2. Data processed and its sources
We receive the information you enter in forms or provide to our staff: name, contact details, any company and role, tax and delivery details, requested products, messages and attachments. For accounts and purchases we process protected credentials, access checks, requests, orders, documents and payment results. Business contacts may be provided by the customer company. Browsing involves technical data such as IP addresses, server requests and information needed for sessions and security.
3. Purposes and legal bases
We use data to respond to enquiries and technical requests, prepare quotations, verify Customer Area access, and manage purchases, deliveries, support and payments. The legal basis is performance of the contract or requested pre-contractual measures; for company contacts, our legitimate interest in managing the relationship with that company. Accounting and tax requirements and requests from authorities are based on legal obligations. Account protection, abuse prevention, operational continuity and the defence of rights are based on our legitimate interest in protecting our systems and business, taking individuals' rights into account. Submitting a form does not automatically subscribe you to advertising or newsletters.
4. Required data and optional features
Required fields allow us to handle your request or provide the service: without this information we may be unable to reply, deliver goods or authorise access. Attachments, photo search and remembering a device are optional. Provide only relevant information; avoid health data, identity documents that have not been requested, and unnecessary personal data about other people. Acknowledging this privacy notice is not consent to marketing.
When using photo search, photograph only the product. Before submission, the feature indicates whether it uses local analysis or OpenAI; DPM does not keep the original image in a photo archive. Any processing by the external provider is subject to that service's terms and does not imply a promise of zero retention by the provider.
5. Who receives the data
Data is accessible to authorised staff and, for their respective tasks, infrastructure, hosting, email, maintenance and security providers; professionals handling administrative obligations; carriers and payment operators. We share only what is needed for the service or required by law and do not sell personal data. Providers act as processors or independent controllers depending on the activity.
When you use checkout, Stripe or PayPal and the selected payment method process the data needed for the transaction and fraud prevention. Where available, Google address suggestions or validation services receive address information; OpenAI receives the image when you request photo search using external analysis. External images, videos and links are described in the cookie policy. Providers' notices also explain their own processing and international transfers.
6. Transfers and provider information
Some services may involve processing outside the European Economic Area. Each provider's notices and terms describe locations and safeguards, such as adequacy decisions or standard contractual clauses where applicable. You can contact the controller to ask which recipients are involved in your request and for information about applicable safeguards or how to obtain a copy. A service being available does not mean that all data is stored in the European Union.
Analytics may involve Google LLC and other recipients outside the EEA. Google states that it participates in the EU-US Data Privacy Framework; transfers to certified companies rely on the applicable adequacy decision and, where needed, the standard contractual clauses identified in Google’s agreements. You may ask the controller for information and a copy of safeguards. Cookie consent does not replace these safeguards.
7. How long data is kept
Retention depends on the purpose and type of data: enquiries are processed to handle and follow up the contact; account and relationship data to provide the service and close outstanding matters; commercial, tax and accounting records for legally required periods. For enquiries that do not progress, we consider the last contact and the need to retain a record of the request. Security logs and records are assessed against the time needed to prevent or investigate abuse and incidents. Disputes may require retention until they are resolved and for the periods needed to protect legal rights. Session or cart expiry concerns their use and does not establish simultaneous deletion of every record or backup. You can ask us for information about the retention of your data.
8. Automated functions and assistance
The website performs technical access, availability and payment checks and updates request statuses. It does not carry out advertising profiling. You can contact DPM staff to request a review of an account, request or order outcome; automated checks do not replace your rights.
9. Exercising your rights
Where provided by the GDPR, you may request access, rectification, erasure, restriction, portability and objection to processing, particularly on grounds relating to your situation when the basis is legitimate interest. Where processing relies on consent, you may withdraw it without affecting processing carried out before withdrawal. Write to the controller's contacts; we may request information needed to verify your identity. You will receive a response within one month, subject to a reasoned extension where legally permitted. You may complain to the Italian data protection authority or the competent supervisory authority without having to contact us first.
10. Optional website statistics
Only after consent do we use Google Analytics 4 to measure public page and product usage and clicks on phone or email contacts. The legal basis is Article 6(1)(a) GDPR and, for tools on your device, Article 122 of the Italian Privacy Code. Consent is optional and can be withdrawn through Privacy preferences; refusal does not restrict purchases or other services. We do not send form values, customer identifiers, payments or private area pages to Analytics. Pseudonymous identifiers and technical data do not amount to complete anonymity.
Google Ireland Limited and suppliers identified in the Analytics terms process data under the applicable service terms. Events and user data are retained for 14 months without restarting the user period on each activity; aggregate reports may last longer. Statistical cookies last up to 180 days and your choice lasts six months. The technical choice log is retained for 12 months without IP addresses, user agents or customer references. The cookie policy describes individual tools and withdrawal.
Last updated: 30 October 2026.