Privacy Policy

Types of data processed

Browsing data: the IT systems running this site acquire, during normal operation, some data whose transmission is implicit in the use of Internet protocols (e.g. IP address, browser type, device parameters, request times). This is used only to ensure the security and correct functioning of the site and to derive anonymous statistics.

Data provided voluntarily: if you contact us by email, phone or WhatsApp using the details on the site, we will process the data you provide (name, contact details, message content) solely to respond to your request.

The site contains no data-collection forms and uses no analytics or profiling tools.

Purposes and legal bases

Responding to requests for information and quotes — legal basis: pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).

Ensuring the operation, security and maintenance of the site — legal basis: the controller’s legitimate interest (Art. 6.1.f GDPR).

Complying with any legal obligations — legal basis: legal obligation (Art. 6.1.c GDPR).

Cookies and tracking tools

This site does NOT use profiling cookies or third-party tracking tools requiring consent. Fonts are hosted directly on our server and involve no data transfer to third parties.

The Google map on the Contacts page is not loaded automatically: it appears only after the user explicitly clicks the dedicated button. Only then is the content loaded from Google and may Google cookies be set.

For these reasons no cookie consent banner is present or required.

Data recipients

Data may be processed by parties acting as data processors: the site’s hosting/CDN provider (Cloudflare, Inc.), which processes log/browsing data, and the email service provider. Google LLC processes data only if the user chooses to load the map. Meta Platforms Ireland Ltd. (WhatsApp) processes data only if the user starts a conversation via the WhatsApp link.

Data is not disclosed or sold to third parties for commercial purposes.

Transfers outside the EU

Some providers (Cloudflare, Google, Meta) are based in the United States. Any transfers take place in compliance with the GDPR, on the basis of the EU-US Data Privacy Framework adequacy decision and/or the European Commission’s Standard Contractual Clauses.

Retention period

Browsing data is kept for the time strictly necessary for security and statistical purposes. Data provided voluntarily is kept for the time needed to handle the request and to comply with any legal obligations.

Rights of the data subject

You may ask the controller for access to your data, and for its rectification, erasure, restriction of processing, and portability, and you may object to processing (Arts. 15-22 GDPR), by writing to the controller’s contacts above.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante — www.garanteprivacy.it).

Changes to this notice

The controller may amend or update this notice. Any changes will be published on this page with the relevant update date.