Privacy Policy

1. Data collected and methods of collection

This website (www.sicilyhacklab.it) is a static informational site. There are no contact forms, registration systems or restricted areas.

Personal data may be processed exclusively in the following circumstances:

• Email contact: when the user spontaneously sends a message to info@sicilyhacklab.it or via the "Request a free consultation" link, the data contained in the communication (name, email address, message content) are processed.
• Telephone contact: when the user calls or sends a WhatsApp message to +39 331 144 6293, the data necessary to manage the communication are processed.
• Navigation data: the servers hosting the site may automatically collect IP addresses, browser type, operating system and pages visited, exclusively for technical and security purposes.

2. Purposes and legal basis of processing

• Response to contact requests — legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR).
• Management of the commercial relationship — legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Site security — legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).

3. Data recipients

Data are not transferred, sold or disclosed to third parties for marketing purposes. They may be shared exclusively with:

• Technical service providers (e.g. hosting, email) acting as Data Processors pursuant to Art. 28 GDPR.
• Public authorities, in the cases provided for by law.

4. Transfer of data outside the EU

Personal data are processed within the European Union. Should services with servers outside the EEA be used, the transfer takes place in compliance with the safeguards provided for by Articles 44–49 GDPR (adequacy decisions or standard contractual clauses).

5. Data retention

• Contact data and email communications: retained for the time necessary to handle the request and, in the case of a contractual relationship, for 10 years from the termination of the contract (civil/tax obligation).
• Navigation data: retained for the time strictly necessary for technical purposes, generally no longer than 30 days.

6. Cookies

This site does not use profiling cookies, third-party analytics cookies or trackers. Only technical cookies strictly necessary for the operation of the site (e.g. browser preferences) may be set. Consent is not required for such cookies pursuant to Art. 122 of Italian Legislative Decree 196/2003.

7. Rights of the data subject

Pursuant to Articles 15–22 of the GDPR, you have the right to:

• Access — obtain confirmation that data concerning you are being processed and receive a copy thereof.
• Rectification — request the correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request the deletion of data, subject to legal obligations.
• Restriction — request the restriction of processing in certain cases.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on the controller's legitimate interest.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to:

8. Right to lodge a complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome, if you believe that the processing of your data infringes the GDPR.

9. Changes to this privacy notice

The Controller reserves the right to update this privacy notice. Changes will be published on this page with an update of the date at the top of the document.