Privacy policy

Under Articles 13 and 14 of EU Regulation 2016/679 (GDPR). Last updated: October 2026.

1. Data controller

2. What data we process

• Data you send us: your name, company or profession, the package you are interested in and the message you write in the form, plus your phone number when you contact us on WhatsApp or your email address when you write to us.
• Browsing data: technical information collected automatically by the systems that run the website, such as IP address, browser type and pages visited.
• Analytics and marketing cookies: only if you give consent in the banner. Details are in the cookie policy.

3. The contact form

The website form does not store your data on our servers: when you press "Send on WhatsApp", WhatsApp opens with a pre-written message that you can check before sending. The message only reaches us if you decide to send it. WhatsApp is a service of WhatsApp Ireland Limited (Meta group), which processes data under its own policy.

4. Why we process data and on what legal basis

• Answering your requests and preparing a proposal: pre-contractual steps taken at your request (Art. 6.1.b GDPR).
• Delivering the service you bought: performance of a contract (Art. 6.1.b GDPR).
• Tax and accounting obligations: legal obligation (Art. 6.1.c GDPR).
• Statistics and marketing with non-technical cookies: only with your consent (Art. 6.1.a GDPR), which you can withdraw at any time.

5. How long we keep data

• Enquiries that lead nowhere: up to 12 months after the last contact.
• Data about purchased services and tax documents: for the period required by law (usually 10 years).
• Cookies: for the period stated in the cookie policy.

6. Who may receive the data

Data is never sold or given to third parties for their own purposes. It may be processed by providers who help us deliver the service, such as website hosting, email, WhatsApp and, only with your consent, Google for the analytics and marketing tools managed through Google Tag Manager.

7. Transfers outside the European Union

Some providers, such as Google and Meta, may process data outside the EU, especially in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

8. Your rights

At any time you can ask to access, correct or delete your data, restrict or object to its processing, receive it in a portable format, and withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal. Just write to [email protected].

If you believe the processing is not lawful, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority in your own EU country.

9. Changes

This policy may be updated. The date of the last update is shown at the top.