In accordance with Regulation (EU) 2016/679 (“GDPR”), this notice explains how IMPACTAGE S.r.l. processes personal data supplied by users while browsing and using the services available on this website.
1. Data processed and collection methods
Browsing data
The IT systems and software procedures used to operate the website acquire data whose transmission is inherent in the use of the Internet. This may include IP addresses, device domain names, URI addresses of requested resources, request time and method, response size, status code and parameters relating to the operating system and IT environment.
This data is used to ensure the security and correct operation of the website and to produce aggregate statistical information. The legal basis is the Controller’s legitimate interest under Article 6(1)(f) GDPR.
Contact requests
Once the contact form is active, we may collect full name, company, email address, telephone number and message content. Free-text fields are not checked in advance; users should therefore avoid entering unnecessary data or special-category information under Article 9 GDPR.
Processing is necessary to respond to the request and take any pre-contractual steps requested by the data subject under Article 6(1)(b) GDPR. Providing data is optional, but without the necessary information we cannot respond.
2. Retention periods
Contact request data is retained for the time needed to manage the request and, in any event, no longer than three months, unless a contractual relationship begins or legal obligations require otherwise. Technical browsing data is retained only for the period strictly necessary for security and operation.
3. Processing and security
Data is processed mainly by electronic means using procedures designed to protect confidentiality, integrity and availability. Authorised employees and collaborators may process data within their assigned duties and under the Controller’s instructions.
4. Recipients and processors
Where necessary, data may be disclosed to public authorities and parties authorised by law, advisers and professionals, and suppliers supporting website operation, hosting and digital services. When processing data on behalf of IMPACTAGE, such suppliers are appointed as processors under Article 28 GDPR.
5. Data transfers
According to IMPACTAGE’s privacy documentation, data is processed in countries within the European Union. Should the website architecture or suppliers involve transfers to third countries, these will comply with Articles 44 et seq. GDPR and this notice will be updated.
6. Data subject rights
Data subjects may request access, rectification, erasure, restriction and, where applicable, portability; they may also object to processing and not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Requests may be sent to info@impactage.eu or certified email impactage@legalmail.it. IMPACTAGE will respond without undue delay and within GDPR deadlines.
7. Complaints
Anyone who believes that the processing of their data infringes applicable law may lodge a complaint with the Italian Data Protection Authority following the instructions at garanteprivacy.it ↗.