Privacy policy.

1. Data controller

Netizens s.r.l., Via Aosta 4/A, 20155 Milano, Italy. VAT no. 13279080157. Phone +39 02-83439640.

2. Data processed

• Data provided voluntarily through the contact form: full name, email address and, optionally, company, phone number, subject of the request and the content of the message.
• Browsing data: in the course of their normal operation, the IT systems that run the website collect certain technical data (e.g. IP address, browser type, date and time of the request), which is used to ensure the security and proper functioning of the service.

3. Purposes and legal basis

• Replying to requests sent through the contact form and handling any pre-contractual stage: the legal basis is the performance of pre-contractual measures at the request of the data subject and the consent given through the form (Art. 6(1)(a) and (b) GDPR).
• Website security and prevention of abuse (e.g. automated spam submissions): the controller's legitimate interest (Art. 6(1)(f) GDPR).

The data is not used for marketing purposes, nor disclosed to third parties for their own independent purposes.

4. Whether providing data is mandatory

Providing your name, email address and message is necessary for us to reply to your request; without them we will not be able to follow it up. The other fields are optional.

5. Recipients and providers

The data may be processed on the controller's behalf by providers appointed as data processors:

• Brevo (Sendinblue SAS, France), to send the emails generated by the contact form. The data is processed within the European Union.
• The hosting provider of the website and database, for the technical delivery of the service.

The Contact page includes a Google Maps map (Google Ireland Ltd.), which may collect browsing data in accordance with its own privacy policy: policies.google.com/privacy.

6. Cookies and local storage

The website does not use profiling cookies or analytics tools. It only uses technical cookies needed to access the staff's restricted area, and the browser's local storage to remember the light/dark theme preference.

7. Retention

Data sent through the form is kept for as long as needed to handle the request and any relationship arising from it and, if there is no follow-up, for no longer than 24 months from the last contact. Browsing data is kept only for as long as strictly necessary for security purposes.

8. Rights of the data subject

You may at any time exercise the rights provided for by Articles 15 to 22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent (without affecting the lawfulness of processing based on consent before its withdrawal), by contacting the controller using the details given in section 1. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

9. Changes

This notice may be updated from time to time. The date of the latest update is shown at the top of the page.