1. Data Controller

YILING MOTORS S.R.L.
Registered office: Viale Montegrappa, 116 – 59100 Prato (PO), Italy
VAT / Tax ID: 02570950978 · Share Capital: € 10,000 fully paid
Telephone: +39 0574 026610
Email: yiling [at] yiling-motors.com

2. Types of Data Processed and Purposes

• Browsing data (Technical system logs)
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain transmission data implicit in the use of Internet protocols (e.g. IP addresses, request timestamps, device parameters). These data are processed solely to ensure proper page delivery and infrastructure security (legitimate interest of the Controller, Art. 6, para. 1, lett. f of the GDPR).

• Data provided voluntarily by the user
The optional and voluntary sending of messages to the email address indicated on the website entails the acquisition of the sender's email address and contact details, processed exclusively to answer the inquiry (pre-contractual or contractual measures, Art. 6, para. 1, lett. b of the GDPR).

• Cookies and tracking tools
This website does not install cookies. Neither persistent nor session technical cookies, third-party cookies, or pixels are present. Pursuant to applicable data protection guidelines, no consent banner or consent registry is required.

3. Processing Methods and Retention

Personal data are processed with electronic tools in compliance with the principles of lawfulness, fairness, and transparency (Art. 5 GDPR) and through the adoption of adequate technical and organizational security measures (Art. 32 GDPR). Technical logs are deleted periodically; data received via email are retained for the time strictly necessary to handle the request or fulfill regulatory obligations.

4. Recipients and International Transfers

Personal data are not disclosed or sold to third parties for commercial purposes. They may only be processed by authorized personnel and third-party technical service providers acting as Processors. For technical service delivery, data may be processed outside the European Union:

• United Kingdom (Hosting and web infrastructure): governed by the Adequacy Decision of the European Commission (Art. 45 GDPR) ensuring an equivalent level of protection to the EU.

• United States (Technology infrastructure and communications): communications data sent to corporate email are processed via US-based servers in compliance with the guarantees provided by the GDPR, relying on the Data Privacy Framework (DPF) EU-USA and/or Standard Contractual Clauses (SCC) approved by the European Commission (Art. 46 GDPR).

5. Data Subject Rights

Pursuant to Arts. 15–22 of Regulation (EU) 2016/679, the data subject may at any time exercise the rights of access, rectification, erasure (right to be forgotten), restriction, portability, or object to processing.

To exercise these rights: write to the Controller at: yiling [at] yiling-motors.com

You also have the right to lodge a complaint with the supervisory authority: Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).