Privacy Notice – Personal Data Processing

Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR)

 

1. Data Controller

The Data Controller is EFT ESPANSI SRL, with registered office at Via della Resistenza 56, 20090 Buccinasco (MI), VAT no. 10141120963.

 

2. Types of Data Processed

The following data may be processed through this website:

  • Personal and contact information (name, email, optional phone number) via the contact form

  • Browsing data (IP address, technical data about browser and device)

  • Cookies (see the Cookie Policy section)

 

3. Purpose of Processing

The collected data are processed for the following purposes:

  • To respond to requests sent via the contact form

  • To comply with legal obligations or exercise rights in legal proceedings

  • To monitor website usage and improve content and security

 

4. Legal Basis

  • Consent of the data subject for information requests submitted via the contact form

  • Legitimate interest for the technical management and security of the website

  • Legal obligations related to regulatory compliance, where applicable

 

5. Processing Methods

Data are processed using electronic and/or paper tools, with technical and organizational measures in place to ensure data security and confidentiality.

 

6. Data Recipients

Data will not be disclosed. They may be shared with third parties (e.g., IT providers, consultants) under confidentiality and data processing agreements.

 

7. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes for which they were collected, and in any case for no longer than 24 months for requests sent via the contact form.

 

8. Data Subject Rights

Data subjects may exercise their rights under the GDPR (access, rectification, erasure, restriction, objection, portability, and lodging a complaint with the Data Protection Authority) by writing to eftespansi@gmail.com.