Personal data processing notice

Draft pending validation: the structure is complete, but the items highlighted in yellow must be confirmed by the controller before publication. While they remain highlighted, this text is not a valid privacy notice.

1. Data controller

The data controller is Pixel Service & Consulting Srl, VAT and tax ID 01124200328, REA TS-126408, registered office at DA VALIDARE: full registered office address.

For any question about your data you can write to info@datamida.ai or to the certified address DA VALIDARE: PEC address.

Data Protection Officer (DPO): DA VALIDARE: state whether a DPO has been appointed and, if so, their contact details; if not, say so explicitly.

2. What data we collect

When you submit the contact form we collect:

• first and last name;
• email address;
• the text of your message, if you write one;
• the language of the page you wrote from, plus the date and time of submission;
• your IP address, recorded to limit automated submissions and abuse.

The web server also keeps ordinary access logs (IP address, date and time, requested page, user agent), retained by the hosting provider for DA VALIDARE: retention period applied by the provider.

We use no analytics tools, we do not profile visitors and we do not buy contact lists.

3. Why we process it and on what basis

• To answer your request and, if you wish, to start a business relationship. Legal basis: pre-contractual measures taken at the request of the data subject (art. 6(1)(b) GDPR) and the consent given when submitting the form (art. 6(1)(a) GDPR).
• To protect the site from automated submissions and abuse, through a technical session cookie and the temporary recording of your IP address. Legal basis: the controller's legitimate interest in the security of its systems (art. 6(1)(f) GDPR).
• DA VALIDARE: any marketing communications or newsletter: if planned, add them here with separate, optional consent; if not, state so explicitly

Providing your data is optional, but without a name and an email address we cannot get back to you.

4. Cookies and third-party services

The site sets a single technical session cookie named dmsess. It links the contact form to your visit and blocks automated submissions; it expires when you close the browser, it does not track your browsing and it requires no prior consent.

Web fonts are loaded from Google Fonts, which means your IP address is disclosed to Google Ireland Limited. DA VALIDARE: consider self-hosting the fonts to avoid this disclosure entirely, or describe the legal basis and the transfer here

There are no profiling cookies, advertising pixels or analytics tools.

5. Who we share the data with

The data is handled by the controller's authorised staff and may be shared with the suppliers providing our technical services, appointed as processors under art. 28 GDPR:

• hosting provider: DA VALIDARE: company name, location and reference to the processing agreement;
• email provider used to deliver the requests: DA VALIDARE: company name and location;
• DA VALIDARE: any CRM or back-office system the requests are copied into.

The data is never disclosed publicly, sold or transferred to third parties for their own purposes.

6. Transfers outside the European Economic Area

DA VALIDARE: state whether the data stays within the EEA. If a supplier (for example the email service or Google Fonts) involves a transfer to a third country, indicate the safeguard in place: adequacy decision, standard contractual clauses, or another measure under Chapter V GDPR

7. How long we keep the data

• Contact requests: DA VALIDARE: retention period, for example 24 months from the last meaningful contact, unless the contact leads to a contract, in which case statutory terms apply.
• IP addresses used for the anti-spam limit: automatically deleted within one hour of submission.
• Web server logs: DA VALIDARE: period applied by the hosting provider.

8. Your rights

At any time you can ask us for access to your data, its rectification or erasure, restriction of processing, portability, and you can object to processing based on legitimate interest (arts. 15-22 GDPR). You can also withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights write to info@datamida.ai. We reply within one month, extendable by two further months in the cases set out in art. 12 GDPR.

9. Complaint to the supervisory authority

If you believe the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the Member State where you reside.

10. Changes to this notice

We may update this notice to reflect changes in the law or in the services we use. The version in force is always the one published on this page, with the last-updated date shown at the bottom.

Last updated: DA VALIDARE: publication date