Privacy Policy
Last updated: September 27, 2026
This notice describes how the personal data of users who visit the website italiaautomazioni.it (the "Site") is processed. It is provided pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR") and Legislative Decree 196/2003, as amended ("Codice Privacy"), to those who interact with the web services of the Site.
1. Types of data processed
The personal data collected by the Site, either directly or through third parties, includes:
- Browsing data: IP addresses, browser type, operating system, referring URL, pages visited, access times, length of visit. This data is used solely to obtain anonymous statistical information on the use of the Site and to check that it works correctly.
- Data voluntarily provided by the user: first name, last name, email address, phone number, company name and any other information the user chooses to share through the contact forms, the chat or the call booking form.
- Cookies and similar identifiers: see the "Cookies" section below.
Providing data is optional, but failing to provide some of it (e.g. the email address for a booking) may make it impossible to deliver the requested service.
2. Purposes and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Providing the services requested by the user (e.g. booking a call, replying to information requests) | Performance of a contract or of pre-contractual measures (Art. 6(1)(b) GDPR) |
| Replying to requests sent through the chat with the AI assistant | Performance of pre-contractual measures / legitimate interest of the Data Controller in providing assistance (Art. 6(1)(b) and 6(1)(f) GDPR) |
| Compliance with legal obligations (tax, accounting, etc.) | Legal obligation (Art. 6(1)(c) GDPR) |
| Statistical analysis of the use of the Site through Google Analytics 4 and improvement of the user experience | Consent of the data subject (Art. 6(1)(a) GDPR) |
| Measuring the effectiveness of Google Ads advertising campaigns (conversions) and, if authorized, ad personalization | Consent of the data subject (Art. 6(1)(a) GDPR) |
| Installation of third-party cookies and embedded content (e.g. Calendly) | Consent of the data subject (Art. 6(1)(a) GDPR) |
3. Methods and place of processing
Data is processed using computer and telematic tools, with technical and organizational measures designed to ensure its security, confidentiality and integrity (encryption in transit, access controls, periodic backups). The data is not subject to automated decision-making that produces legal effects on the user.
Data is processed at the operational offices of the Data Controller and at any other place where the parties involved in the processing are located. Browsing data and data collected through third-party services may be transferred to countries other than the one where the user is located, including outside the European Union, always in compliance with the safeguards provided for by Articles 44 et seq. of the GDPR (standard contractual clauses, adequacy decisions).
4. Retention period
Data is kept for the time necessary to achieve the purposes for which it was collected, in accordance with the following criteria:
- Contact data collected to provide a service: for the duration of the relationship and for the following 10 years, in order to comply with legal obligations.
- Browsing data and technical logs: for the time necessary for the technical and security purposes of the Site.
- Data collected through cookies: see the "Cookies" section.
5. Third-party services
The Site uses the following services provided by third parties, which may process users' personal data as independent controllers or as processors:
5.1 Calendly
The call booking form is provided by Calendly LLC (USA). When the user accesses the /prenota page and accepts third-party cookies, the Calendly widget is loaded, which collects the data needed for the booking (name, email, any answers to custom questions) and technical data (IP, user agent, functional cookies). Data is transferred to the United States on the basis of the standard contractual clauses approved by the European Commission and/or the EU-US Data Privacy Framework. For more information: https://calendly.com/privacy.
5.2 Google Fonts
The Site uses Google Fonts (Google Ireland Ltd) to load its typefaces. The service involves sending the user's IP address to Google. For more information: https://policies.google.com/privacy.
5.3 Hosting
The Site is hosted on Microsoft Azure Static Web Apps (Microsoft Ireland Operations Limited). Technical access logs may be processed by the hosting provider as a processor. For more information: https://privacy.microsoft.com/en-us/privacystatement.
5.4 Lucide Icons
The icons on the Site are generated by the open-source Lucide library, hosted on the same servers as the Site: loading it does not involve sending data to third parties.
5.5 Google Tag Manager
The Site uses Google Tag Manager (Google Ireland Ltd) to centrally manage third-party tags and scripts (e.g. Google Analytics, Google Ads). Google Tag Manager does not collect personal data on its own, but it allows other services to be loaded conditionally. For more information: https://policies.google.com/privacy.
5.6 Google Analytics 4
The Site uses Google Analytics 4 (Google Ireland Ltd) to collect aggregate statistics on how the Site is used (pages visited, session length, approximate geographic origin, device and browser used). Google Analytics uses profiling cookies that are installed only after the user's explicit consent through the cookie banner. Consent Mode v2 is active, which prevents the collection of identifying data without consent. IP anonymization is enabled by default in GA4. Data may be transferred to the United States on the basis of the standard contractual clauses and/or the EU-US Data Privacy Framework. For more information: https://policies.google.com/privacy.
5.7 Google Ads
The Site uses Google Ads (Google Ireland Ltd) to promote its services and to measure how many people who arrived from an ad take an action on the Site (for example booking a call or submitting the contact form). Conversion information is received by Google Ads through Google Analytics 4. Google's advertising cookies are installed only after the user's explicit consent through the cookie banner; with Consent Mode v2, without consent Google receives only aggregate signals with no identifiers. The Data Controller does not send Google data such as name, email or phone number. Data may be transferred to the United States on the basis of the standard contractual clauses and/or the EU-US Data Privacy Framework. For more information: https://policies.google.com/technologies/ads.
6. Cookies
The Site uses technical cookies and, with the user's prior consent, analytics and third-party cookies.
- Technical cookies: do not require consent under Article 122 of the Codice Privacy. They are used to store the user's preferences (e.g. the cookie choice) in the browser's
localStorage. - Analytics cookies (Google Analytics 4): are installed only after the user's explicit acceptance through the cookie banner. They are used to collect aggregate statistics on how the Site is used (e.g.
_ga,_ga_*). Duration: up to 14 months. - Advertising cookies (Google Ads): are installed only after the user's explicit acceptance through the cookie banner. They are used to link a visit that came from an ad to the action taken on the Site (e.g.
_gcl_au,_gcl_aw). Duration: up to 90 days. With the same consent, the Site remembers inlocalStoragethe page where the visit began and the campaign parameters, for 30 days. - Third-party cookies (Calendly): are installed only after the user's explicit acceptance through the cookie banner. Their purpose is to allow the booking calendar to be displayed and used.
The user can change or withdraw their consent at any time with the Manage cookies link, also found at the bottom of every page, or by clearing the browser data for this Site.
7. Rights of the data subject
Pursuant to Articles 15-22 of the GDPR, the user has the right to:
- Obtain confirmation as to whether or not personal data concerning them is being processed, and access it (right of access).
- Obtain the rectification of inaccurate data or the completion of incomplete data.
- Obtain the erasure of personal data ("right to be forgotten").
- Obtain the restriction of processing.
- Receive personal data in a structured, commonly used and machine-readable format (right to data portability).
- Object to the processing of their personal data.
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Lodge a complaint with the competent supervisory authority (in Italy: the Garante per la protezione dei dati personali, the Italian Data Protection Authority, www.garanteprivacy.it).
To exercise their rights, the user can write to info@italiaautomazioni.it. The Data Controller will reply within the time limits set by applicable law (normally within 30 days).
8. Data security
The Data Controller adopts technical and organizational security measures appropriate to protect personal data from unauthorized access, loss, destruction or disclosure. The Site uses encrypted connections (HTTPS/TLS) for all communications.
9. Changes to this notice
The Data Controller reserves the right to make changes to this notice at any time, informing users by publishing them on this page. Users are therefore encouraged to check this page regularly, referring to the "last updated" date shown at the top.
10. Legal references
This notice is drawn up on the basis of multiple legislative systems, including Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 ("Codice Privacy"), as amended by Legislative Decree 101/2018.