Privacy Policy

pursuant to art. 13 of EU Regulation no. 679/2016 and RSM Law no. 171/2018

Dear User,
this page describes how the site is managed with regard to the processing of your personal data.
Pursuant to Art. 13 of European Regulation No. 679/2016 on the protection of personal data (hereinafter referred to as “GDPR”) and Art. 13 of RSM Law No. 171/2018 (hereinafter “RSM Law”), we therefore provide the information below in order to give correct and transparent notice about the data collected by our website and how it is used.
This notice is also inspired by Recommendation No. 2/2001, adopted on 17 May 2001 by the European data protection authorities gathered in the Working Party established under Art. 29 of Directive 95/46/EC, which identifies certain minimum requirements for the online collection of personal data — in particular the manner, timing and nature of the information that data controllers must provide to users when they access web pages, regardless of the purpose of the visit.

WHERE DO WE GET YOUR DATA FROM?

The personal data we process is the data you voluntarily provide while browsing our website or using our services — for example, by filling in the forms through which you can contact us or by subscribing to our free newsletter.

WHICH OF YOUR DATA DO WE PROCESS?

The processing will cover the following information:

  • Browsing data:

When you visit our website, we send cookies, or technologies with similar functionality, to your devices, which allow us to monitor your behavior. These cookies retransmit data to our data analysis tools. We are therefore able to track which marketing channel generated your contact (for example Google AdWords, email) and which pages you visited, along with other similar information. We carry out multi-device analysis — that is, we use analytical tools (Google Signals) that allow us to detect whether you have visited our website multiple times using different devices. We also receive information about how you use the site and interact with it, as well as the time spent on the site. Our website’s server also collects basic information about the search performed on your browser at the time you visit the site. This data may include the date and time of your last visit, the date and time of the browser search, your IP address, basic HTTP header information (such as URL referrers and user agent), and previous URLs searched by your browser.

This site also allows you to select certain features that operate on personal data by sharing it with other entities or websites (such as LinkedIn, etc.). These features transmit data to third parties who may use personal information in accordance with their own privacy policies. These features are operated by third parties not affiliated with us, and we strongly recommend that you review their privacy policies.

The use of cookies and other digital tools with similar functionality is described in more detail in our cookie policy, available online in the dedicated section.

  • Personal and contact details:

When you wish to contact us via one of the forms on the site, you will be asked to provide certain personal and contact details so that we can process your requests and respond to the messages sent. Failure to provide the personal data will prevent us from processing your request.

When you freely choose to subscribe to our free newsletter service, we will collect your first name, last name, phone number, email address, company of affiliation, and we will keep a history of the emails we have sent you.

HOW WILL WE PROCESS YOUR DATA?

Processing will be carried out, including but not limited to the use of electronic means, using methods suitable to guarantee the security, protection, and confidentiality of the data, in order to prevent and limit the risk of loss, deterioration, or unauthorized removal of the data.

Processing may include various operations such as: collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure, comparison or interconnection, restriction, erasure, and destruction of data.

FOR WHAT PURPOSES WILL WE PROCESS YOUR DATA?

Your personal data will be processed for the following purposes:

a) to ensure the correct technical functioning of our website and to guarantee its IT security, for example by identifying any areas of the site that are slower or less performant;

b) to be able to handle your message and provide you with a response when you contact us through the contact forms on the site;

c) for soft-spamming: if you have already purchased a product or used one of our services, we may use the email address you provided to send you information about products and services similar to those already purchased, without requiring your consent, unless you object;

d) to send you newsletters and communications containing information about our products and services, where you have given your consent, in order to keep you updated on news and available services;

e) for profiling purposes, aimed at creating individual or aggregate profiles based on your interests and preferences, so as to better understand your needs and send you targeted, personalized communications that are of greater interest to you.

WHAT JUSTIFIES THE PROCESSING OF YOUR DATA?

Except as specified for browsing data, which is essential for the website’s operation, the processing we carry out is based on the following legal grounds:

a) the performance of pre-contractual measures (for the purpose referred to in letter b);

b) the pursuit of the Data Controller’s legitimate interest in maintaining a useful relationship with customers (for the purpose referred to in letter c);

c) the consent freely and duly given by you (for the purposes referred to in letters d) and e).

IS PROVIDING YOUR DATA MANDATORY?

Providing your data for the purposes indicated in the paragraph “For what purposes will we process your data” letters a) and b) is mandatory: without this data it will not be possible to browse our website or receive a response to the requests you send us.

For the purposes indicated in points f) and g), on the other hand, providing the data is optional: you may therefore choose not to share it without this affecting your relationship with our company.

WHO WILL PROCESS YOUR PERSONAL DATA?

Your personal data will be handled by the Data Controller, by authorized and trained staff, and by any consultants who support us with technical activities, acting as Data Processors. The updated list of Data Processors is kept at our offices and may be consulted upon request.

Your data will not be disseminated, but may be disclosed to bodies or authorities responsible for verification and oversight to ensure compliance with legal requirements.

WILL YOUR DATA BE TRANSFERRED OUTSIDE THE EUROPEAN UNION?

Your data will not be transferred outside the European Union unless this becomes necessary for technical/operational reasons, in compliance with applicable law, in which case the required safeguards will be provided.

FOR HOW LONG WILL WE KEEP YOUR DATA?

The browsing data collected will be used only to obtain anonymous statistical information on the use of the site and to ensure its proper functioning, and will be deleted once this information has been processed.

Other personal data will be processed for the time strictly necessary to manage your requests.

If you have requested to receive informational/commercial communications, possibly also consenting to being profiled, we will use your data until you withdraw your consent, and in any case for a maximum period of five years, given the nature of our business and the products and services offered.

WHAT RIGHTS DO YOU HAVE REGARDING THE PROCESSING OF YOUR DATA?

We inform you that, at any time, pursuant to Articles 15-22 of EU Regulation No. 679/2016 and the RSM Law, you may exercise the following rights, where the applicable conditions are met, using the following form:

1) to obtain confirmation as to whether or not personal data concerning you exists and, if so, to access such data and all information relating to the processing thereof (right of access under Art. 15 GDPR and RSM Law);

2) to obtain the correction of inaccurate personal data without undue delay and the completion of incomplete data, including by means of a supplementary statement (right to rectification under Art. 16 GDPR and RSM Law);

3) to obtain the erasure of your personal data without undue delay if: the data is no longer necessary for the purposes for which it was collected or processed; it has been processed unlawfully; it must be erased to comply with a legal obligation; or you object to the processing (right to erasure under Art. 17 GDPR and RSM Law);

4) to obtain restriction of processing in any of the following cases: if you contest the accuracy of the personal data, for the period necessary for the Data Controller to verify its accuracy; if the processing is unlawful and you oppose the erasure of the data and instead request that its use be restricted; if, although the Data Controller no longer needs it for processing purposes, the personal data is necessary for you to establish, exercise, or defend a legal claim; if you have objected to the processing, pending verification as to whether the Data Controller’s legitimate grounds override your own (right to restriction under Art. 18 GDPR and RSM Law);

5) to receive the personal data concerning you in a structured, commonly used, machine-readable format, and to transmit such data to another data controller without hindrance from the controller to whom it was provided (right to data portability under Art. 20 GDPR and RSM Law);

6) to object, in whole or in part, to the processing. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing, including profiling insofar as it is related to such direct marketing. Where personal data is processed for scientific or historical research purposes or for statistical purposes, you have the right to object to the processing on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out in the public interest (right to object under Art. 21 GDPR and RSM Law);

7) to withdraw any consent given, at any time;

8) to lodge a complaint with the Data Protection Supervisory Authority.

HOW CAN YOU CONTACT THE DATA CONTROLLER AND ITS REPRESENTATIVE IN THE EUROPEAN UNION?

To exercise the rights described above, you may contact, at any time, the Data Controller ITTWEB SRL by sending a communication via email to the following address: privacy@ittweb.net, or by registered mail with return receipt to the following address: Strada degli Angariari 25, 47891 Falciano (Republic of San Marino), or its EU representative, Nova Poesis srl (VAT no. 04724110400), reachable at the following email address: rappresentanteue@ittweb.net, or by registered mail with return receipt to the following address: Via Pomposa n. 43/I, 47924 Rimini (RN).

WHO IS THE DATA PROTECTION OFFICER (DPO) AND HOW CAN YOU CONTACT THEM?

The Controller has appointed Attorney Valentina Rabitti and Dr. Nathaniel Casadei as Data Protection Officers, who can be reached by email at: dpo@ittweb.net, or by registered mail with return receipt to the following postal address: Via Pomposa n. 43/I, 47924 Rimini (RN).

VALIDITY OF THIS NOTICE

In compliance with applicable law, the Data Controller reserves the right to make changes to this notice at any time, providing appropriate notification and in any case guaranteeing adequate and equivalent protection of personal data.

Last updated on 04.03.2026

*The icons used in this infographic, shown in varied colors, are drawn from the projects selected as best entries by the Italian Data Protection Authority (Garante) as part of the “Informative Chiare” (“Clear Notices”) contest, available at https://www.garanteprivacy.it/temi/informativechiare and are used under the terms of the following license: https://creativecommons.org/licenses/by/4.0/deed.it.

The Data Controller
ITTWEB SRL