Privacy Policy

Last updated: Wednesday, 25 March 2026. This is a translation: in case of discrepancy, the Italian version prevails.

1. Data Controller

The data controller is Francesco Maida, with registered office in Viale 4 Novembre N. 89, 30132 Venezia, Italy – VAT number 04908370275. For any request concerning the protection of personal data you can write to: privacy_3725@cesco.it.

2. Data Protection Officer (DPO)

The Data Protection Officer (DPO) is Francesco Maida, who can be contacted at: privacy_3725@cesco.it.

3. Retention Period

If, following a contact through the Formcarry form, the user becomes a client of the Controller ( Francesco Maida ), the personal data provided (name, email, phone number) will also be kept and processed afterwards for the performance of the contract and for the related administrative, accounting and operational communications. Such data will be kept for the whole duration of the contractual relationship and, afterwards, for the time needed to comply with legal obligations (for example tax and accounting obligations).

In all other cases the data are kept for the time needed to answer requests, and in any case no longer than 12 months, without prejudice to any legal obligations.

4. Purposes and Legal Basis of Processing

Users' personal data are processed for:

  • Anonymous statistical analysis of web traffic (legitimate interest of the controller pursuant to Art. 6(1)(f) GDPR).
  • Technical operation of the website, including hosting and infrastructure services.

No profiling or tracking for commercial purposes is carried out.

5. Analytics Services

Umami Analytics – Umami Software Inc.

  • Personal Data processed: technical cookies and anonymised usage data.
  • Purpose: anonymous analysis of web traffic.
  • Privacy policy: available at this link

Some of the services listed below, if present, may operate through geographically distributed servers, making it difficult to determine the actual location where Personal Data are stored.

6. Hosting and Infrastructure

The website is hosted by OVH VPS based in Milan, Lombardy (Italy).

  • Personal Data processed: various types of data as specified in the privacy policy of the hosting service.
  • Privacy policy:available at this link

Some services may operate through geographically distributed servers, making it difficult to determine the exact location of personal data.

7. Contact Form – Formcarry

The website uses Formcarry as an external service to manage and send contact forms. When you fill in and submit a form, the data entered are transmitted to the Formcarry servers in order to be delivered to the controller by email. The data are then deleted or anonymised once the purpose of contact and reply has been fulfilled.

If, following the contact through Formcarry, the user becomes a client, the data will also be processed for the performance of the contract as indicated in section 3 of this policy.

  • Personal Data processed: name, email, phone number and any other data voluntarily entered in the contact form.
  • Purpose: allowing the Controller to answer users' requests and provide information about the services.
  • Legal basis: performance of pre-contractual or contractual measures at the request of the data subject (Art. 6(1)(b) GDPR).
  • Place of processing: Teijal Inc (Formcarry) is based at N. 3 Germay Dr, Unit 4 – 1278, Wilmington, DE 19804, United States. Data are processed on European servers in accordance with the GDPR.
  • Privacy policy of the service: https://formcarry.com/legal/privacy-policy

8. Data Transfers Outside the EU

Should data be transferred outside the European Union, this will take place in compliance with Articles 44 et seq. of the GDPR and, where necessary, by means of standard contractual clauses.

9. Rights of Data Subjects

As a data subject you can exercise the following rights at any time:

  • Access to your personal data;
  • Rectification or erasure of your data;
  • Restriction of processing;
  • Objection to processing;
  • Data portability;
  • Lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise your rights you can contact the Controller or the DPO at the addresses above.

10. Updates

This policy may be updated at any time. We recommend checking it periodically.