Privacy Policy

Data controller

The controller of the personal data collected through this site is Evitouch, with registered office at Via dell’Aquila 12, 03011 Alatri (FR), Italia, VAT no. IT03133680607.

For any request regarding data processing you can write to privacy@evitouch.it or, by certified email (PEC), to evitouch@pec.it. The controller has not appointed a Data Protection Officer (DPO).

Personal data processed

• Browsing data: for the operation and security of the site, the hosting infrastructure collects data whose transmission is implicit in the use of internet protocols (e.g. IP address, browser and device type, date and time of the request, pages visited).
• Data provided voluntarily: the data you enter in the contact form, namely name, email address, subject and message.
• Aggregated statistics: anonymous, aggregated information about site usage, collected without cookies and without identifying you.

Purposes and legal bases

• Responding to requests sent via the contact form — legal basis: pre-contractual measures and/or the data subject’s consent (Art. 6(1)(b) and (a) GDPR).
• Operation, security and proper delivery of the site — legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
• Aggregated, anonymous analysis of visits — legal basis: consent (Art. 6(1)(a) GDPR), given through the banner.

How data is processed

Data is processed using IT and electronic tools, with security measures adequate to prevent its loss, misuse and unauthorised access. The processing involves no automated decision-making or profiling.

Recipients and processors

Data may be processed, on the controller’s behalf and as data processors, by the providers of the technology services needed to run the site:

Vercel Inc. — site hosting and cookieless aggregated analytics (based in the USA). Policy: vercel.com/legal/privacy-policy.

Resend (Plus Five Five, Inc.) — delivery of the emails generated by the contact form (based in the USA). Policy: resend.com/legal/privacy-policy.

Messages sent via the form are delivered to a mailbox of the controller; the relevant email provider processes the data on the controller’s behalf. Data is not disclosed or sold to third parties for commercial purposes.

Transfers outside the EU

Some providers are based in the USA. Any transfers of data outside the European Economic Area take place with appropriate safeguards under Art. 44 ff. GDPR, such as the Standard Contractual Clauses approved by the European Commission and/or the providers’ certification under the EU-US Data Privacy Framework.

Retention period

• Contact-form data: kept for as long as needed to handle the request and, thereafter, for any period required by legal obligations.
• Browsing data: kept only for as long as strictly necessary for security and operation.
• Statistics: processed solely in aggregated, anonymous form.

Your rights

As a data subject you may exercise at any time the rights under Art. 15-22 GDPR:

• access to your personal data;
• rectification of inaccurate data or completion of incomplete data;
• erasure of data (right to be forgotten);
• restriction of processing;
• data portability;
• objection to processing;
• withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights you can write to privacy@evitouch.it or evitouch@pec.it. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.

Nature of data provision

Providing data through the contact form is optional; however, failure to provide the required data makes it impossible to respond to your request.

Cookies

For detailed information on cookies and similar technologies used by the site, see the Cookie Policy.

Changes to this policy

The controller may update this policy. Any changes will be published on this page with the date of last update.