Privacy Policy

Data controller

Marco Povolo — Verona (VR), Italy. Email: info@vesalto.com

Personal data processed

• Data provided voluntarily through the contact form: first and last name, email address, company (optional), phone number (optional), the content of the message and any attached files.
• Browsing data collected in aggregate, anonymous form by the hosting infrastructure for statistical and security purposes (e.g. pages visited, source, device type), without directly identifying the user.

Purposes and legal basis

• Responding to and managing requests sent through the form: performance of pre-contractual measures taken at the data subject’s request (Art. 6(1)(b) GDPR) and/or consent given by submitting the form (Art. 6(1)(a) GDPR).
• Aggregate statistics and website security: the controller’s legitimate interest (Art. 6(1)(f) GDPR).

How data is processed

Data is processed using electronic tools, adopting technical and organisational measures appropriate to ensure its security and confidentiality.

Recipients and data processors

To deliver the service, the controller relies on suppliers acting as data processors: Web3Forms (receiving and forwarding the form messages), Netlify (website hosting) and Umami (aggregate, anonymous browsing statistics, without cookies). Data is not disclosed or transferred to third parties for promotional purposes.

Transfer of data outside the EU

Some of the suppliers indicated above may process data outside the European Union. In such cases the transfer takes place on the basis of the safeguards provided by the GDPR, in particular the Standard Contractual Clauses adopted by the European Commission.

Retention period

Request data is kept for as long as necessary to handle the request and any developments in the relationship, and in any case no longer than 24 months from the last contact, unless other legal obligations apply. Aggregate browsing data is kept for the period set by the hosting provider.

Rights of the data subject

At any time the data subject may exercise the rights provided by Articles 15-22 GDPR: access, rectification, erasure, restriction, objection and data portability, as well as withdraw any consent given, by writing to info@vesalto.com. They also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

The website uses only technical cookies. For more information see the Cookie Policy.