Last updated: 11 October 2026
Privacy policy
This text is a template and should be reviewed by a legal adviser before publication.
1. Data controller
The data controller is SITOVIA, Via Magenta 10, 20066 Melzo (MI), Italia — email: info@sitovia.it.
2. Data we collect
- Data you provide through the quote form, consultation booking, email, phone or WhatsApp: name, company, email, phone, message content, requested date and time.
- Technical browsing data (IP address, browser type, pages visited) processed by the hosting provider's servers for security and operation of the site.
- Your cookie preferences, stored on your device.
3. Purposes and legal bases
- Replying to enquiries and sending quotes — pre-contractual steps at your request (Art. 6(1)(b) GDPR).
- Managing appointments and contracts — performance of a contract (Art. 6(1)(b)).
- Complying with legal obligations, e.g. tax — legal obligation (Art. 6(1)(c)).
- Site security and abuse prevention — legitimate interest (Art. 6(1)(f)).
- Analytics and marketing, only if enabled — consent (Art. 6(1)(a)), which you can withdraw at any time.
4. Processing and retention
Data is processed electronically with appropriate security measures. Enquiries that do not lead to an engagement are kept for up to 24 months; contractual and tax records for 10 years as required by Italian law.
5. Recipients
Data may be processed by providers acting as processors: website hosting (Hostinger International Ltd.), email services and, if used, WhatsApp (Meta Platforms Ireland Ltd.). Data is never published or sold.
6. Transfers outside the EU
Where a provider transfers data outside the European Economic Area, this is based on European Commission adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses.
7. Your rights
You may at any time request access, rectification, erasure, restriction, portability and object to processing (Arts. 15–22 GDPR) by writing to info@sitovia.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Mandatory data
Fields marked as required are necessary to reply to your request; without them we cannot follow up.