Privacy Policy

Last updated: August 18, 2026

1. Data Controller

The Data Controller responsible for the processing of personal data collected through this website is:

Davide Fiorani
Via Emilia Est 216A
Parma, Italy

For any questions concerning the processing of personal data or the exercise of your rights, you may contact the Data Controller at the email address above.

2. Personal Data Collected

When you contact us through the Contact form on this website, we may collect the following personal data:

First name
Last name
Email address
Subject of the message
Content of the message
Any other personal information that you voluntarily provide in your message.

We ask users not to provide sensitive personal information or other information that is not necessary for their enquiry.

3. Purposes of Processing

Personal data submitted through the Contact form is processed for the following purposes:

to receive and respond to enquiries;
to communicate with you regarding your request;
to provide information about Fireyrod bamboo fly rods, fly fishing and related activities where relevant to your enquiry;
to manage any subsequent communication arising from your request.

Personal data will not be used for unrelated marketing or advertising purposes.

4. Legal Basis for Processing

The processing of personal data submitted through the Contact form is necessary to respond to the enquiry submitted by the user and, where applicable, to take steps at the user’s request prior to entering into a possible contractual relationship.

Where applicable, processing may also be based on the legitimate interests of the Data Controller, provided that such interests do not override the rights and freedoms of the data subject.

The Privacy Policy checkbox in the Contact form confirms that the user has read and understood this Privacy Policy. It does not constitute consent to unrelated marketing communications.

5. Provision of Data

The provision of the personal data marked as mandatory in the Contact form is necessary to submit an enquiry and receive a response.

If the required information is not provided, it will not be possible to submit the Contact form.

Providing additional information that is not necessary to handle the enquiry is voluntary.

6. Methods of Processing and Data Security

Personal data is processed electronically using appropriate technical and organisational measures designed to protect it against unauthorised access, loss, alteration or disclosure.

Personal data is accessed only by persons who need it for the purposes described in this Privacy Policy.

7. Data Recipients

Personal data may be processed by technical service providers involved in the operation, hosting, security and maintenance of this website and its communication services.

In particular, website hosting and related technical infrastructure are provided by Aruba S.p.A.

Such providers may process personal data on behalf of the Data Controller where applicable and in accordance with applicable data protection legislation.

Personal data is not sold or rented to third parties.

Personal data may be disclosed where required by law or where necessary for the establishment, exercise or defence of legal claims.

8. Data Retention

Personal data submitted through the Contact form will be retained for the period reasonably necessary to handle the enquiry and any subsequent communication arising from it.

Personal data may be retained for a longer period where this is necessary to comply with legal obligations or to establish, exercise or defend legal claims.

9. Cookies and Third-Party Services

This website may use technical cookies and similar technologies that are necessary for its proper operation, security and functionality.

The website may also use third-party services, including embedded or linked content such as YouTube videos and links to social media platforms.

Where third-party services use cookies or similar technologies, their processing of personal data is governed by their respective privacy policies and, where required, by the user’s consent through the website’s cookie management system.

10. Social Media

This website contains links to Fireyrod’s social media profiles, including Instagram and Facebook.

These links direct users to external websites and social media platforms. When a user follows such a link and interacts with the relevant platform, personal data may be processed by that platform according to its own privacy policy and terms of use.

11. International Data Transfers

The Data Controller does not intentionally transfer personal data to countries outside the European Economic Area for the purposes described in this Privacy Policy.

Where a service provider used by the website processes personal data outside the European Economic Area, the Data Controller will ensure that any such transfer is carried out in accordance with applicable data protection legislation and using an appropriate legal mechanism.

12. Your Rights

Under the GDPR and applicable data protection legislation, you have the right, where applicable, to:

obtain confirmation as to whether your personal data is being processed;
access your personal data;
request the correction of inaccurate or incomplete personal data;
request the deletion of your personal data;
request the restriction of processing;
object to certain processing activities;
request data portability where applicable.

Where processing is based on consent, you also have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

13. Exercising Your Rights

To exercise your rights or request information concerning the processing of your personal data, please contact:

Davide Fiorani
Email: davide@orme.it

The Data Controller will respond to requests in accordance with the applicable legal requirements.

14. Automated Decision-Making and Profiling

The personal data collected through this website is not subject to automated decision-making or profiling that produces legal effects or similarly significant effects on the user.

15. Changes to this Privacy Policy

The Data Controller may update this Privacy Policy when necessary, for example following changes to the website, the services used or applicable data protection legislation.

The date shown at the beginning of this document indicates when the Privacy Policy was last updated.