Privacy policy

Last updated: 15 October 2026

This notice explains how the personal data of visitors and users of the website https://www.example.com are processed, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

The data controller is Example Ltd.

For any privacy request you can write to privacy@example.com.

Which data we process, why and on what legal basis

Browsing data

The systems that run the website collect, during normal use, some technical data (for example IP address, date and time of the request, page visited, browser type) in the server logs. They are used to keep the website working and secure and to investigate any misuse.

• Legal basis: the controller's legitimate interest in the security and proper functioning of the website (Article 6(1)(f) GDPR).
• Retention: for as long as strictly necessary, unless needed to investigate unlawful activities.

Requests through the contact form or by email

If you write to us through the contact form or by email, we process the data you provide (for example name, email, phone number, content of the message) to answer your request.

• Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) or, for general requests, our legitimate interest in replying (Article 6(1)(f) GDPR).
• Retention: for as long as needed to handle the request and then for up to 24 months, unless the request leads to a contract.

Visit statistics

With your consent we use Google Analytics 4 to collect aggregate statistics on how the website is used (pages visited, traffic sources, devices).

• Legal basis: your consent (Article 6(1)(a) GDPR and the national rules implementing Article 5(3) of the ePrivacy Directive 2002/58/EC), given through the cookie banner and withdrawable at any time.
• Retention: according to the settings of the analytics service (state them here, for example 14 months).

Legal obligations and protection of rights

Data may be processed to comply with legal obligations or requests from public authorities and, where necessary, to establish, exercise or defend legal claims.

• Legal basis: legal obligation (Article 6(1)(c) GDPR) and the controller's legitimate interest (Article 6(1)(f) GDPR).
• Retention: for the period required by law or needed to protect the right concerned.

Cookies and other tracking technologies

The website uses cookies and similar technologies, such as browser storage. Technical cookies, which are necessary for the website to work or to provide a service you have requested, do not require consent (national rules implementing Article 5(3) of the ePrivacy Directive). Other cookies (analytics, marketing and those of content from other websites) are set only if you give your consent through the banner.

The complete and up-to-date list of the cookies and services used by the website, with provider, duration and purpose, is in the cookie declaration, which you can view at any time. Some cookies are set by third parties (for example analytics, advertising or embedded content providers): for these, also see the privacy notices of the respective providers.

You can change or withdraw your choices at any time from the cookie preferences. You can also delete or block cookies in your browser settings: if you block technical cookies, some parts of the website may not work.

Whether providing data is mandatory

Providing the data marked as mandatory in the forms is necessary to provide the service you request (for example to answer a request or fulfil an order): without these data we cannot proceed. Providing other data is optional.

Who we share the data with

Data are processed by persons authorised by the controller and may be shared with providers that process them on our behalf as processors (Article 28 GDPR), including:

• [list your providers]

Data may also be disclosed to public authorities where required by law. We do not sell personal data and do not make them public, except for comments published at your request.

Transfers of data outside the European Union

Data are processed within the European Union or the European Economic Area.

Your rights

At any time you can ask the controller for:

• access to your data (Article 15 GDPR);
• rectification of inaccurate or incomplete data (Article 16 GDPR);
• erasure of your data (Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• portability of the data you provided to us (Article 20 GDPR);
• and you can object to processing based on legitimate interest and, in any case, to direct marketing (Article 21 GDPR).

Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7(3) GDPR).

To exercise your rights write to privacy@example.com. We reply without undue delay and in any case within one month (Article 12 GDPR).

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In Italy it is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Automated decision-making

We do not take decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

Security

We adopt appropriate technical and organisational measures to protect data against loss, unlawful use or unauthorised access (Article 32 GDPR).

Changes to this notice

We may update this notice, for example following changes in the law or in the services offered. The version in force is always published on this page, with the date of the last update.