1. Data controller
The data controller is:
freelance.srl
Registered office: Via Rodari 14E, 20060 Trezzano Rosa (MI), Italy
VAT number, tax code and Milan Companies Register number: 14831830964
REA MI – 2810385
Digital domicile / PEC (certified email): freelance-srl@pec.it
Email: info@freelance.srl
The Controller has not appointed a Data Protection Officer (DPO), as the legal requirements for doing so are not met. For any matter relating to the processing of personal data, you can write to the addresses above.
2. Categories of data processed
2.1 Data voluntarily provided by the user
When you fill in the contact form on the «Contact» page or write to us directly by email or PEC, we will process the data you provide, including:
- first and last name;
- email address;
- company or agency name (optional);
- phone number (optional);
- service of interest and estimated budget (optional);
- the content of your message and any other personal data you choose to include.
The fields marked as mandatory (name, email, message) are necessary to handle your request; if you do not provide them we will be unable to reply. The other fields are optional.
2.2 Browsing data
The IT systems and software procedures that run this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP address, date and time of the request, requested URL, response code, response size, browser type and operating system. This data is recorded in the web server logs solely for technical purposes, aggregate statistics and security, and is deleted or anonymised within a short period, unless needed to investigate offences at the request of the Authorities.
2.3 Cookies
The website does not use profiling cookies. For details of the tools used, see the Cookie Policy.
3. Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Responding to requests for information, quotes or consultations and managing preliminary contacts | Performance of pre-contractual measures taken at the data subject's request (Art. 6.1.b GDPR) and legitimate interest in responding to requests received (Art. 6.1.f) |
| Ensuring the security, integrity and correct diagnostics of the website (server logs) | The Controller's legitimate interest in the security of its systems (Art. 6.1.f GDPR) |
| Fulfilling accounting, tax and legal obligations if a contractual relationship is established | Legal obligation (Art. 6.1.c GDPR) |
| Establishing, exercising or defending legal claims | The Controller's legitimate interest (Art. 6.1.f GDPR) |
The data is not used for marketing, newsletters or profiling. Should the Controller wish to process it for such purposes in the future, it will first request specific consent.
4. Processing methods
Processing is carried out mainly by electronic means, for the time strictly necessary to achieve the purposes for which the data was collected. Appropriate technical and organisational measures are in place to protect the data against unauthorised access, loss, destruction or disclosure. Access to the data is limited to the Controller's authorised personnel and to suppliers appointed as data processors.
5. Recipients of the data
Personal data may be disclosed to:
- the website's hosting and technical maintenance provider, acting as data processor pursuant to Art. 28 GDPR;
- the email service provider used by the Controller to receive and manage contact requests;
- professionals and consultants (e.g. accountants, legal advisers) to the extent necessary to comply with legal obligations or defend a right;
- public authorities, law enforcement agencies and judicial authorities, where required by law or necessary to protect a right.
The data is not disseminated or transferred to third parties for commercial purposes.
6. Transfer of data to third countries
The website loads fonts (web fonts) from Google servers (Google Fonts). Loading these resources involves sending the user's IP address to Google LLC, based in the United States. This transfer takes place on the basis of the safeguards provided for in Chapter V of the GDPR (European Commission Standard Contractual Clauses and Google's participation in the EU-U.S. Data Privacy Framework). More information is available in the Cookie Policy and in Google's privacy policy.
Should the email or hosting provider also process the data outside the European Economic Area, the Controller will ensure that adequate safeguards are in place pursuant to Articles 44 et seq. of the GDPR.
7. Retention period
| Type of data | Retention |
|---|---|
| Contact form data and correspondence, where no contractual relationship exists | Up to 24 months from the last relevant contact, unless needed to defend a right |
| Data relating to a contractual relationship and accounting/tax records | 10 years from the end of the relationship (Art. 2220 of the Italian Civil Code and tax legislation) |
| Web server browsing logs | Maximum 12 months, unless subject to investigation by the Authorities |
8. Rights of the data subject
At any time you have the right to:
- access your personal data and know the purposes for which it is processed (Art. 15);
- request its rectification or completion (Art. 16);
- request its erasure, where applicable (Art. 17);
- obtain restriction of processing (Art. 18);
- receive the data you provided to us in a structured format and request its portability to another controller (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw any consent given, without affecting the lawfulness of processing carried out before its withdrawal.
You can exercise these rights by writing to info@freelance.srl or by PEC to freelance-srl@pec.it. The Controller will respond without undue delay and in any case within one month.
You also have the right to lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali (Italian Data Protection Authority), Piazza Venezia 11, 00187 Rome, Italy – www.garanteprivacy.it.
9. Minors
The website and the services offered are intended for people acting in the course of their professional or business activity and are not intended for minors under 16. The Controller does not knowingly collect data from minors.
10. Changes to this notice
The Controller reserves the right to amend or update this notice, including as a result of regulatory changes. The updated version will be published on this page, with the date of the last update shown at the top.
← Back to home