top of page


Information pursuant to Articles 13 and 14 of Regulation 679/2016 (GDPR) regarding the use of the website


In compliance with the provisions of EU Regulation 2016/679 (hereinafter GDPR), we hereby provide you with all the information regarding the processing of personal data that you will provide for the use of the website.

1.    Data Controller

The data controller, i.e., the entity that determines the purposes and means of the processing of personal data and can be contacted to exercise the rights recognized by the GDPR, is IMPACTAGE S.r.l., tax code and VAT number 11226380969, with registered office at via Rinaldo Rigola 7, 20159 Milan.

2.    Contact details of the data controller

Impactage Srl can be contacted at the following addresses:
Via Rinaldo Rigola 7, 20159 Milan

3.    Sources and categories of processed data, nature of data provision, and data retention period

The personal data subject to processing is mainly collected from the User when they browse the website or use the services offered through the website.
The data collected by the website is primarily processed electronically using software and procedures suitable to ensure technical and computer security measures.
In this information notice, we will provide you with specific details on how personal data is processed in different sections of the website:

    a) Browsing data

The so-called "browsing" data of the website by users will be processed in compliance with applicable regulations. The computer systems and software procedures used for the operation of this website acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could allow the identification of users through processing and association with data held by the Data Controller or third parties. This category of data includes "IP addresses" or the domain names of computers used by users who connect to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server (successful, error, etc.), and other parameters related to the user's operating system and computer environment. This data is generally used for the sole purpose of obtaining anonymous statistical information on the use of the website and to ensure its proper functioning.
The legal basis for the processing is Article 6(1)(f) of the GDPR - The legitimate interest of the data controller in ensuring the security of the website.

   b) "Contact" section

The website features a contact area ( ) through which the User can submit a contact request to one of our consultants.
This section collects the following types of data:


  • Name and surname;

  • Email address;

  • Phone number;

  • Free-text field for entering the message.

Please note that Impactage Srl cannot perform any preventive control regarding the information entered in the fields freely filled out by the User.
The legal basis for the processing is Article 6(1)(b) of the GDPR - Processing is necessary for the performance of pre-contractual measures taken at the data subject's request.
The data will be kept for the time necessary to contact the requester and, in any case, for a period not exceeding 3 months. After this period, they will be deleted.

4.    Rights of the data subject

As the data subject, the Regulation grants you the following rights, which you can exercise by contacting the Data Controller, who will respond as soon as possible and, in any case, no later than 30 days from your request:

  • Right of access to the data;

  • Right to rectification of the data;

  • Right to erasure of the data, i.e., the right to obtain from the Data Controller the erasure of personal data concerning you without undue delay if one of the following grounds applies:
    - The data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
    - You object to the processing, and there are no overriding legitimate grounds for the processing;The data has been unlawfully processed;
    - The data must be erased to comply with a legal obligation to which the Data Controller is subject;
    - The data has been collected in relation to the offer of information society services.

  • Right to restriction of processing, i.e., the right to obtain from the Data Controller the restriction of processing where one of the following applies:
    - You contest the accuracy of the personal data, and the restriction will be applied for the period necessary to verify the accuracy;
    - The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead;
    - Although the Data Controller no longer needs the data for processing purposes, you require them for the establishment, exercise, or defense of legal claims;
    - You have objected to processing pending the verification of whether the legitimate grounds of the - - Data Controller override your own.

  • Right to data portability;

  • Right to object to the processing;

  • Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.


If you wish to lodge a complaint regarding the methods by which your personal data is processed by the Data Controller or regarding the handling of a complaint you have submitted, you have the right to lodge a complaint directly with the supervisory authority, following the procedures indicated on the website .


bottom of page