This policy explains how we process the personal data of visitors to sbaiconsulting.it and of people who contact us, under Regulation (EU) 2016/679 (GDPR).
Data controller
SB AI Consulting, Bergamo (Italy). For any request about your data: info@sbaiconsulting.it.
What data we process
Data sent through the contact form: full name, company (optional), email address and the content of your message.
Browsing data: like any website, the servers hosting it automatically receive some technical information (for example IP address, browser type, requested page, date and time). It is used only to run the website and protect it from abuse and cyber attacks.
The website does not use analytics, profiling or advertising tools and does not load content from third-party services.
Why we process it and on what legal basis
- Replying to your requests and, if you wish, preparing a quote: processing is necessary to act on your request (Art. 6(1)(b) GDPR).
- Website security and operation: legitimate interest in protecting the website and its users (Art. 6(1)(f) GDPR).
- Legal obligations, such as tax obligations, if your request turns into an engagement (Art. 6(1)(c) GDPR).
We do not send newsletters or marketing messages without your explicit consent.
How long we keep it
- Contact requests: for as long as needed to handle them and no longer than 24 months after the last contact, unless a business relationship follows.
- Browsing data: for the technically necessary time, usually a few days.
Who processes data on our behalf
- Cloudflare, Inc. – website hosting and attack protection.
- Aruba S.p.A. – email service.
These providers act as data processors and only process data according to our instructions. Data is never sold or shared with third parties.
Transfers outside the European Union
Cloudflare is based in the United States and may process technical data outside the EU. Transfers rely on the EU-U.S. Data Privacy Framework, which Cloudflare has joined, and on the Standard Contractual Clauses approved by the European Commission.
Your rights
At any time you can ask to access, correct or delete your data, restrict its processing, object to processing based on legitimate interest and receive your data in a structured format (portability) by writing to info@sbaiconsulting.it. We reply within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Providing your data
Filling in the contact form is optional, but without your name, email and message we cannot reply to your request.
Changes
We may update this policy. The date of the last update is shown at the top of the page.