Privacy Notice
Provided under Article 13 of Regulation (EU) 2016/679 (GDPR) to users of the website officina-digitale.net.
This site uses no analytics, profiling or behavioural advertising systems, and sets no tracking cookies. The data we process is the technical data needed to run the site, plus whatever you give us voluntarily when you get in touch. Every processing activity is described below, without exception.
This is an English translation, provided for convenience. The authoritative version of this notice is the Italian one: in the event of any discrepancy, the Italian text prevails.
1. Data controller and contact details
The data controller is:
- Officina Digitale S.r.l.
- Viale Trento e Trieste, 10 — 31100 Treviso (TV), Italy
- VAT IT03603080262
- Email: privacy@officina-digitale.net
For any matter concerning the processing of your personal data, including exercising the rights described in section 9, you can write to the email address above.
2. What data we process, and why
2.1 Browsing the site
When you visit the site, the servers hosting it automatically record some technical information, as happens with any website: your IP address, the date and time of the request, the page requested, and your browser and operating system. This data sits in our hosting provider's logs and is used to deliver the site, keep it secure and diagnose faults. We do not use it to identify you or to build browsing profiles.
2.2 Contact form
If you fill in the form on the home page, we process the data you enter: name, company, email address, area of interest and the text of your message. We use it solely to answer your enquiry and for any follow-up that arises from it.
2.3 Urgent incident report (SOS page)
If you fill in the form on the emergency page, we process: name, company, email address, phone number, incident type and your description of what happened. We use it to take on the report and to contact you.
Please do not enter personal data in this form that is not needed — in particular third-party data, access credentials or data falling within the special categories under Article 9 GDPR. A general technical picture is enough to describe an incident; the details are handled through the secure channel we will point you to.
2.4 Support chat
The site includes a chat service provided by 3CX and connected to our phone system. The chat component starts when the page loads, but no personal data is transmitted until you start a conversation. If you do, we process the content of the messages and any identifying or contact details you choose to share within them, in order to assist you.
2.5 Protecting forms against automated submission
The site's forms are protected by Cloudflare Turnstile, a system that distinguishes people from automated programs. To do so, the service analyses certain technical information about your device and your interaction with the page. The purpose is solely to prevent automated message submission: it involves no profiling and is not used for advertising purposes.
On the urgent incident form the check comes with a safeguard: if for any reason it does not complete, the page immediately shows you the phone number to call. Reporting an incident must never depend on an automated check working.
2.6 Legal claims and statutory obligations
The data collected may be processed to establish, exercise or defend a legal claim, and to comply with obligations imposed by law or requests from the authorities.
3. Legal bases for processing
| Processing | Legal basis | Note |
|---|---|---|
| Browsing the site (technical logs) | Legitimate interest — Art. 6(1)(f) | Interest in delivering the site, keeping it secure and preventing abuse |
| Contact form | Pre-contractual steps — Art. 6(1)(b) | Responding to a request that comes from you |
| Urgent incident form | Performance of a contract or pre-contractual steps — Art. 6(1)(b) | Taking on the report |
| Support chat | Pre-contractual steps or performance of a contract — Art. 6(1)(b) | Processing begins only if you start the conversation |
| Anti-bot protection of forms | Legitimate interest — Art. 6(1)(f) | Interest in keeping the contact channels usable by preventing automated abuse |
| Technical information on your device | Technical necessity — Art. 122, Italian Legislative Decree 196/2003 | Strictly necessary to provide the service requested: no consent required |
| Legal claims and statutory obligations | Legal obligation and legitimate interest — Art. 6(1)(c) and (f) | — |
None of the processing described in this notice relies on consent. Consequently, you are not asked for prior consent simply to browse the site.
4. Whether providing data is required
Providing the technical data described in section 2.1 is necessary: without it the site cannot be delivered.
Providing data through the forms and the chat is entirely voluntary. The fields marked as required in the forms are, however, essential for us to act on your request: if you leave them blank we cannot reply. Not providing data has no other consequence and in no way limits your use of the site.
5. Information stored on your device
The site sets no profiling cookies and uses no tracking tools. It stores a minimal amount of technical information in your browser, all of it necessary for the site to work, listed one by one in the Cookie Policy, which forms an integral part of this notice.
6. Recipients and processors
Your data is not disclosed publicly or sold to third parties for commercial purposes. It may be accessed by the controller's authorised staff and is processed by the providers listed below, who act as processors under Article 28 GDPR on the basis of specific agreements:
| Provider | Service | Data involved | Location |
|---|---|---|---|
| Netlify, Inc. | Website hosting and content delivery | Technical access logs, including IP address | United States |
| Formspree, Inc. | Receiving and forwarding contact forms | Data entered in the forms | United States |
| 3CX | Support chat and phone system | Content of conversations started by the user | European Union |
| Cloudflare, Inc. (Turnstile) | Anti-bot verification of forms | Technical information on device and interaction | United States |
Data may also be disclosed to public authorities where required by law, and to our professional advisers where necessary to protect a legal right.
7. Transfers to third countries
Three of the providers listed in section 6 — Netlify, Formspree and Cloudflare — are based in the United States. Using their services therefore involves a transfer of personal data outside the European Economic Area.
These transfers take place on the basis of the safeguards set out in Chapter V of the GDPR: the adequacy decision relating to the EU–U.S. Data Privacy Framework, where the provider has certified under it, or the standard contractual clauses adopted by the European Commission under Article 46 GDPR, incorporated into the respective data processing agreements.
You can ask us at any time for information about the safeguards applied to each transfer, by writing to the address given in section 1.
8. Retention periods
| Data | Retention |
|---|---|
| Technical access logs | For as long as needed for diagnostics and security, according to the terms applied by the hosting provider |
| Requests sent through the forms | For as long as needed to handle the request and, if a relationship begins, for its duration and the subsequent limitation periods |
| Chat conversations | For as long as needed to provide the support requested and to record its outcome |
| Data processed under statutory obligations | For the period imposed by the applicable rule |
At the end of the retention period the data is deleted or irreversibly anonymised.
9. Your rights
In relation to data concerning you, you have the right to:
- access the data and obtain a copy of it (Art. 15);
- request rectification if it is inaccurate or incomplete (Art. 16);
- request erasure in the cases provided for (Art. 17);
- request restriction of processing (Art. 18);
- receive the data in a structured, commonly used format and transmit it to another controller (Art. 20);
- object to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21).
To exercise these rights, simply write to privacy@officina-digitale.net. The request is free of charge and we will reply without undue delay and in any case within one month of receipt, a deadline that may be extended by a further two months where the request is particularly complex, in which case we will tell you.
10. Complaint to a supervisory authority
If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it). Your right to bring proceedings before the courts is unaffected.
11. No automated decision-making or profiling
We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
12. Security measures
We apply technical and organisational measures appropriate to protect data against unauthorised access, loss, destruction or disclosure. The site is delivered exclusively over an encrypted connection (HTTPS) and applies a Content Security Policy that restricts loadable resources to the domains strictly necessary for it to work.
13. Changes to this notice
This notice may be updated, in particular if the services used by the site change. The date at the top of the document always indicates the version in force. When changes affect the processing described here, the notice shown on the site is displayed again, including to people who had already dismissed it.