Privacy Policy

We take care of our visitors’ privacy and consider it necessary to provide them with adequate information about the processing of personal data concerning them. For these reasons, we provide below a privacy notice on the processing of personal data, issued pursuant to Regulation (EU) 2016/679 and, more generally, the applicable legislation on the matter. For the notice relating to video surveillance at the registered office, please follow this link: https://online.custom.biz/informativa-videosorveglianza/.

Who we are

Custom S.p.A. (hereinafter "Custom"), with registered office at Via Isaac Newton no. 4, 43010 - Fontevivo (PR), is a technology company that designs and manufactures OEM (Original Equipment Manufacturer), ODM (Original Design Manufacturer), POS (Point of Sale) products and retail software. In carrying out its business, Custom pays the utmost attention to the security and confidentiality of its users’ personal data and therefore complies with the principles of lawfulness, fairness and transparency set out in European Regulation 2016/679 (hereinafter also “GDPR”).

The Data Controller is Custom S.p.A., with registered office at Via Isaac Newton no. 4 43010 Fontevivo (PR), Email: privacy@custom.it, switchboard +39 0521 680111.

Data Protection Officer

No Data Protection Officer (DPO) has been appointed, as it is not required pursuant to Reg. 2016/679. However, data subjects may contact Custom to exercise their rights under the GDPR by writing to: privacy@custom.it.

What personal data may be collected

The following categories of personal data may be collected, relating to:

  • contact data: information relating to name, place and date of birth, tax code, address, telephone number, mobile number, email address and more;

  • interests: information you provide to us about your interests, including the products you are interested in;

  • use of the website: information relating to how you use the site, open or forward our communications, including information collected through cookies (you can find our cookie notice at the following link: https://www.custom.biz/cookies).

How we collect data

Custom collects and processes personal data in the following circumstances:

  • if you access or register on one of our websites (www.custom.biz - online.custom.biz - www.customlife.com - www.keepupsuite.it - www.custom4u.it - brand.custom.biz - www.fasy.it - careers.custom.biz - www.bizeta.net - www.systemretail.it);

  • if you download or use our Software;

  • when you purchase our products or request assistance;

  • when you fill in one of our forms to request technical information;

  • if you respond to our marketing campaigns, for example by filling in a form, entering data on one of our websites or at trade fairs and events (in such cases, we will process the data only after the data subject has given the relevant consent);

  • if other companies within the Custom Group or business partners lawfully transfer your personal data to us.

Please help us keep your personal data up to date by informing us of any changes. If you provide personal data on behalf of someone else, you must first ensure that the data subjects have read this Privacy Policy.

For what purposes personal data may be used

Providing the data is necessary to manage the relationship with users and, if the data are not provided, Custom will not be able to proceed. The legal bases for processing personal data are listed below:

  1. entering into and performing a contract to which the data subject is a party, or performing pre-contractual measures taken at the data subject’s request, and related obligations: Custom may process contact data for the purposes of potentially entering into and performing contractual relationships, providing the requested services and responding to reports and complaints. It may also use contact data, in particular the email address, to provide information or communications relating to the service (for example, to process purchase orders);

  2. operational management and purposes strictly connected thereto for access to the website, in particular to its restricted areas: Custom collects contact data and website usage data to enable you to access your personal area in order to: (i) download from the personal area the documents relating to the purchased services; (ii) handle other requests made through the website;

  3. marketing, in order to provide commercial or advertising solutions in line with your preferences: Custom may process your contact data and information relating to your interests and purchases, also collected via cookies, for marketing and advertising communications aimed at informing you about promotional sales initiatives, also carried out through automated contact methods (email, sms and other electronic tools). For more information on the use of cookies, please refer to: https://www.custom.biz/cookies. In addition, Custom may process the above data to create advertising campaigns, including through the creation of ads on third-party websites or channels or on landing pages;

  4. marketing activities regarding products and services of Custom Group companies: Custom may process contact data for marketing activities relating to products and services of Group companies, carried out through the methods defined in the previous paragraph, also through its subsidiaries, including, by way of example, Custom Pay S.r.l.;

  5. use in aggregated and anonymous form of data relating to access to the page or completion of forms referred to in the previous paragraphs, for the creation and use of target audiences for a segment of the public, for commercial purposes;

  6. compliance with a legal obligation, regulation or order of the judicial authority to which the Data Controller is subject, or the exercise of a right in judicial proceedings;

  7. pursuit of the legitimate interest of the Data Controller or third parties, in particular the protection of security, including IT security, and the prevention of crimes.

With regard to the marketing activities referred to in points 3 and 4, the legal basis for processing is the data subject’s consent. Failure to provide the consent referred to above may result in the inability to perform, in whole or in part, the contract.

How we keep personal data secure

Custom is ISO27001 certified and uses all security measures necessary to improve the protection and maintenance of the security, integrity and availability of your personal data. All personal data are stored on our protected servers (or paper copies appropriately archived) or on those of our suppliers or business partners, and are accessible and usable according to our security standards and policies (or equivalent standards for our suppliers or partners). Processing takes place at the Data Controller’s premises, indicated above.

Who may access the data

Data are shared only where strictly necessary, with the precautions required in terms of confidentiality. In such cases, the data may be communicated to:

  • employees or collaborators, as persons authorised to process data;

  • companies belonging to the Custom Group, duly appointed as data processors, where necessary;

  • outsourcing service providers and/or business partners, as external data processors, duly appointed;

  • third parties, acting as independent controllers or joint controllers, where required by legal obligations, regulations or orders of the judicial authority.

Transfer of data outside the EU

Should it become necessary to transfer data to companies located in countries outside the European Union, Custom undertakes to:

  • carry out such transfer in accordance with the methods set out in Articles 44 et seq. of the GDPR, including in particular the European Commission’s adequacy decisions or the most recent Standard Contractual Clauses (SCCs);

  • pursue only the purposes indicated therein;

  • communicate such transfer through the most appropriate means, including through this website and this Privacy Policy.

How long we keep information

We keep personal data for the time necessary to achieve the purposes for which they were collected and in any case for no more than 10 years from collection, unless different deadlines are established by law. We limit access to personal data only to those who need to use them for purposes consistent with this policy. Data that are no longer necessary or for which there is no longer a legal basis for retention are irreversibly anonymised or securely destroyed.

Data protection rights

By writing to privacy@custom.it, the user may exercise the following rights:

  • access to personal data;

  • rectification of the data in our possession;

  • erasure of any data for which we no longer have any legal basis for processing;

  • restriction of the way we process personal data, within the limits provided by data protection law;

  • objection to processing where provided for by applicable law;

  • withdrawal of consent, where processing is based on consent;

  • data portability, in order to obtain a copy of the personal data you have provided to us.

The user may also lodge a complaint with the competent supervisory authority based on their habitual residence, place of work or the place where the alleged infringement occurred. For Italy, the competent authority is the Garante per la protezione dei dati personali, which can be contacted at www.garanteprivacy.it. For other States, please check to identify the competent authority.

Rev. 26 January 2026