In accordance with Article 13 of EU Regulation 2016/679 (General Data Protection Regulation – GDPR), we inform you that any personal data you provide through the contact form on this website will be processed in compliance with the principles of lawfulness, fairness, and transparency.

1. Data Controller

The Data Controller is [Your company name / legal entity], with registered office at [full address], VAT number [number], e-mail [email address], and telephone [phone number].

2. Data Collected

When you fill out the contact form, you may provide the following personal information (as examples):

• full name
• e-mail address
• phone number
• any other data voluntarily included in the message field

Providing this data is necessary to allow us to process and respond to your inquiry.

3. Purpose and Legal Basis for Processing

The personal data you provide will be processed for the following purposes:

• Purpose Legal Basis Notes
• To respond to your inquiry submitted through the contact form Performance of pre-contractual measures requested by you (Art. 6 (1)(b) GDPR) Primary purpose
• To send promotional communications or newsletters (only if explicitly requested) Freely given consent (Art. 6 (1)(a) GDPR) Optional

4. Data Retention

Your personal data will be kept for the time strictly necessary to respond to your request. In general, contact form data will be stored for a maximum period of [e.g. 3–5 years], unless longer retention is required by law.
If you have consented to receive promotional communications, your data will be retained until you withdraw your consent.

5. Data Recipients

Your data may be shared, where necessary, with:

• employees and collaborators of our company duly authorized to process data;
• technical service providers involved in website operation (e.g. hosting providers, e-mail service providers, software maintenance);
• competent public authorities, when required by law.

All such parties will act as data processors or authorized persons under the Controller’s supervision, and in full compliance with applicable data protection laws.

6. Data Transfers Outside the EU

Your data may be stored or processed on servers located within the European Union or in countries outside the EU.
In cases of transfers to non-EU countries, such processing will occur only where adequate safeguards are in place (such as EU Commission adequacy decisions or Standard Contractual Clauses).

7. Data Subject Rights

Under Articles 15–22 of the GDPR, you have the right to:

access your personal data;

request rectification or update of inaccurate or incomplete data;

request erasure (“right to be forgotten”), where applicable;

request restriction of processing;

object to processing;

obtain data portability;

withdraw your consent (where consent is the lawful basis) at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us by e-mail at [data controller’s email] or by post at the address indicated above.

8. Right to Lodge a Complaint

If you believe that your data have been processed unlawfully, you have the right to lodge a complaint with the competent Supervisory Authority (in Italy: www.garanteprivacy.it
), or with the authority in your country of residence, or take legal action before the competent courts.

9. Changes to This Policy

We may update this Privacy Policy periodically in response to legal or organizational changes. The latest version will always be available at [URL of your privacy page]. Any substantial updates will be communicated on this website or via e-mail (if applicable).