INFORMATION ON PROCESSING PERSONAL DATA

(pursuant to Articles 13 and 14 of EU Regulation 2016/679 – GDPR)

1. DATA CONTROLLER

The Data Controller is Webofficine (hereinafter the “Controller”), with registered office in Viale Guglielmo Marconi 50/15, Prato 59100, VAT no. 02613570973, which can be reached via web form, or at the registered office address, for any requests regarding the processing of personal data.

2. TYPES OF DATA COLLECTED

1. Contact details: name, email address, phone number, as well as any additional data the user voluntarily enters in the registration forms.
2. Data necessary for the execution of assigned projects: in order to provide the services, the client may provide us with additional personal data (e.g. address, IBAN, personal and corporate information, etc.), required for specific activities related to web development, design, marketing, or other IT services.
3. Browsing data: information automatically collected by the site (e.g. IP address, device and operating system used, pages visited), used for statistical and security purposes, as described in the Cookie Policy.

3. PURPOSES OF THE PROCESSING

The personal data collected are processed for the following purposes:

1. Managing contact requests and quotes: to process information entered in registration and contact forms, respond to information requests, and send quotations and commercial proposals.
2. Execution of the assigned services/projects: to manage the provision of IT services requested by the client, develop websites, apps, or other projects, and carry out all necessary activities to fulfill obligations arising from the contractual relationship.
3. Legal, fiscal, and accounting obligations: to comply with obligations under laws, regulations, and EU directives, as well as orders from competent authorities.
4. Direct marketing: subject to specific consent, to send commercial and promotional communications about Webofficine products/services or initiatives, also via email or equivalent tools.
5. Protection of the Controller’s rights: in case of disputes, debt collection, arbitration, or legal proceedings.

4. LEGAL BASIS FOR THE PROCESSING

• Performance of pre-contractual or contractual measures (Art. 6, par. 1, let. b GDPR): for managing requests, executing projects, and delivering services.
• Compliance with legal obligations (Art. 6, par. 1, let. c GDPR): concerning the retention of accounting and tax documents, as well as responding to requests from the competent authorities.
• Consent (Art. 6, par. 1, let. a GDPR): for sending direct marketing communications (if provided by the user).
• Legitimate interest of the Controller (Art. 6, par. 1, let. f GDPR): to protect its rights in case of legal disputes, challenges, or fraud.

5. PROCESSING METHODS

• The processing is carried out mainly by electronic and telematic means, but may also include paper-based formats, in any case with methods suitable to ensure security, confidentiality, and integrity.
• The Controller adopts appropriate organizational and technical measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of personal data.

6. NATURE OF DATA PROVISION

• Mandatory nature: providing the data required to process requests and deliver services is mandatory; failure to provide such data may make it impossible to deliver the services or handle the contract.
• Optionality and Consent: the data collected for marketing purposes (e.g. email for newsletters or offers) are provided on a voluntary basis, and lack of consent does not compromise access to the main services.

7. DATA DISCLOSURE AND DISSEMINATION

• Data may be processed by Webofficine personnel or by external collaborators, formally designated or authorized (employees, consultants, developers, etc.).
• They may be disclosed to providers of services essential to fulfilling the contract (hosting providers, payment services, accountants, etc.), in compliance with the principle of minimization.
• Personal data will not be disclosed to any unspecified third parties. An updated list of external data processors is available upon request.

8. TRANSFER OF DATA OUTSIDE THE EU

Where it is necessary to transfer personal data to entities or servers located outside the European Economic Area, this will be done in accordance with Articles 44 et seq. of the GDPR, adopting standard contractual clauses or equivalent safeguards.

9. RETENTION PERIOD

• Data provided for the request of quotes and for the provision of services will be retained for the time necessary to meet the purposes indicated (contract, tax obligations, legal protection).
• For marketing, data will be retained until consent is withdrawn and, in any case, for a period appropriate to direct marketing purposes (e.g. two years) unless consent is renewed.
• Data may be further retained for the time necessary to enforce or defend rights in legal proceedings.

10. RIGHTS OF THE DATA SUBJECTS

The data subject may at any time exercise the rights provided for by Articles 15–22 of the GDPR, including:

• Access to data and requesting a copy;
• Rectification of inaccurate data;
• Erasure (or right to be forgotten), where applicable;
• Restriction of processing in certain cases;
• Portability of one’s data, where technically feasible;
• Objection to processing for legitimate reasons and/or for marketing purposes;
• Withdrawal of consent (without prejudice to the lawfulness of processing carried out before the withdrawal);
• Lodging a complaint with the Data Protection Authority (in Italy, www.garanteprivacy.it).

To exercise these rights, you may write to the email address [___] or to the postal address indicated above.

11. UPDATES

This Notice may be subject to changes over time to comply with new legal obligations or to update the services offered. In such cases, updated versions will be published in the privacy section of the Webofficine site, along with the date of the last update.

Date of last update: 04/14/2025
By proceeding with the completion of forms and/or sending information to Webofficine, you declare that you have read this Notice on the processing of personal data.

Cookie Policy

COOKIE POLICY
This Cookie Policy illustrates the use of cookies and similar technologies on the website (“Site”) operated by Webofficine Srls (hereinafter the “Controller” or “Us”). This document supplements the Privacy Notice available on the Site.

1. Data Controller

The Data Controller is Webofficine, with registered office in Viale Guglielmo Marconi 50/15, Prato 59100, VAT no. 02613570973, which can be contacted also via web form for any information regarding the use of cookies and the exercise of your rights.

2. What are cookies

Cookies are small text files that websites visited by the user send to their device (computer, tablet, smartphone), where they are stored to be sent back to the same sites upon subsequent visits. Cookies allow the Site to recognize the user's device, offering a personalized browsing experience, storing preferences, and improving the Site’s performance.

In addition to cookies, the Site may use other tracking technologies (e.g. pixel tags, web beacons, clear GIFs). In this Policy, when we refer to “cookies,” we include all such technologies in general.

3. Types of cookies used

3.1 Technical or strictly necessary cookies

These cookies are essential for the proper functioning of the Site and do not require user consent. Without these cookies, some sections or features of the Site may not work properly. This category includes, for example:

• Session or navigation cookies, necessary for managing logins or completing online purchases;
• Functional cookies, which allow the saving of preferences (e.g. language).

3.2 Analytical cookies

They are used to collect information, in aggregate or non-aggregate form, on how users interact with the Site. They help us understand user interactions and improve content and services.

• Matomo:
  The Site uses Matomo, an analytics platform that can be installed “on-premise” (on our servers) or provided via cloud.
  • If on-premise and with anonymized IP addresses: the data collected are considered “first-party analytical cookies” and, under certain configurations, may not require consent (if the cookies are anonymized and do not enable profiling).
  • If with non-anonymized features or if Matomo collects data in a more invasive manner, user consent is required before installing such cookies.
• Google Analytics:
  The Site uses Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses cookies to analyze the use of the Site, generate reports, and provide us with other information related to usage and browsing.
  • IP anonymization: if enabled, it reduces the likelihood of personally identifying the user.
  • Data transfer to the US: Google may store data on servers located in the United States. For the use of Google Analytics that is not strictly anonymized, consent is required in light of decisions by European regulators regarding the compliance of such tracking tools.

Important: For the installation of non-anonymized analytical cookies (or if the data collected are used for additional purposes), the user’s prior consent is required through a banner or other opt-in mechanism.

3.3 Profiling or third-party marketing cookies

These cookies are designed to create user profiles and are used to send advertising messages based on the preferences shown during browsing. The Site may integrate third-party features that set these cookies, such as:

• Embedded YouTube videos: when viewing a YouTube video, YouTube may set cookies that track preferences, video history, and interactions.
• Social network widgets and plugins (e.g. Facebook, Twitter, LinkedIn, Instagram): they allow interaction with social networks through the Site (e.g. “Like” or “Share” buttons) but may set cookies to track user behavior across different sites. These cookies are only set if the user consents.

The user’s prior consent is required to use these cookies.

4. Legal basis for processing

• Technical cookies: performance of a service requested by the user (Art. 6(1)(b) GDPR) and the legitimate interest of the Controller to ensure the functionality and security of the Site (Art. 6(1)(f) GDPR). They do not require consent.
• Analytical and profiling cookies: user consent (Art. 6(1)(a) GDPR), collected via a banner and manageable at any time by the user.

5. How to provide consent

When accessing the Site, a banner appears informing the user about:

• The presence of technical cookies (automatically installed, without requiring consent);
• The ability to accept or decline analytical (non-anonymized), profiling, and third-party cookies;
• A link to this Cookie Policy for more information.

The user can manage their preferences:

1. By accepting all cookies (e.g. “Accept All” button).
2. By declining non-technical cookies (e.g. “Reject” button).
3. By customizing choices (accepting only certain categories).

Preferences regarding the use of cookies can be changed at any time, for example via a “Manage cookie preferences” link in the Site’s footer or in the browser settings.

6. Managing cookies through the browser

The user can manage or disable cookies through their browser settings. Disabling technical or functional cookies may cause some parts of the Site to malfunction. Below are links to instructions for the most common browsers:

• Chrome
• Firefox
• Safari
• Edge
• Internet Explorer

7. Transfers of data outside the EU

Some providers (e.g. Google, YouTube, Social Networks) may have servers or offices in countries outside the European Economic Area (e.g. the United States). In such cases, we ensure that the transfer takes place in accordance with Articles 44 et seq. of the GDPR, adopting Standard Contractual Clauses or equivalent safeguards. In any case, any processing is subject to your explicit consent.

8. Retention period

Cookies have a duration that varies depending on the type and the preferences selected:

• Session cookies: they expire when the browser is closed.
• Permanent cookies: they remain stored until the expiration date or until the user manually deletes them.

Any data collected may be retained for the time strictly necessary to achieve the indicated purposes and then deleted or anonymized.

9. User rights

The user may, at any time and without formalities, exercise the rights set forth in Articles 15–22 of the GDPR, including:

• Access to personal data processed;
• Rectification of inaccurate or incomplete data;
• Erasure (right to be forgotten) where the conditions apply;
• Restriction of processing where applicable;
• Objection to processing based on legitimate interest;
• Withdrawal of consent, where provided, without affecting the lawfulness of processing prior to withdrawal;
• Lodging a complaint with the Data Protection Authority (in Italy www.garanteprivacy.it).

To exercise your rights or obtain more information, you can write us via web form.

10. Updates to the Cookie Policy

This Policy may be subject to changes or updates. In such cases, we will inform you using appropriate methods (e.g., a banner on the Site or an email, if appropriate) and the updated version will always be available on our Site, showing the date of the last update.

Date of last update: 04/14/2025
By continuing to browse the Site or clicking “Accept” on the banner, the user declares that they have read this Cookie Policy and consent, where required, to the installation of cookies.