Privacy Policy

01Data collected and methods of collection

This website (www.sicilyhacklab.it) is a static informational site. There are no contact forms, registration systems or restricted areas.

Personal data may be processed exclusively in the following circumstances:

• Email contact: when the user spontaneously sends a message to info@sicilyhacklab.it or via the "Request a free consultation" link, the data contained in the communication (name, email address, message content) are processed.
• Navigation data: the servers hosting the site may automatically collect IP addresses, browser type, operating system and pages visited, exclusively for technical and security purposes.

02Purposes and legal basis of processing

• Response to contact requests — legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR).
• Management of the commercial relationship — legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Site security — legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).

Providing your data is optional; without it, however, we cannot reply to your request.

03Data recipients

Data are not transferred, sold or disclosed to third parties for marketing purposes. They may be shared exclusively with:

• Technical service providers (e.g. hosting, email) acting as Data Processors pursuant to Art. 28 GDPR.
• Public authorities, in the cases provided for by law.

04Transfer of data outside the EU

Personal data are processed within the European Union. Should services with servers outside the EEA be used, the transfer takes place in compliance with the safeguards provided for by Articles 44–49 GDPR (adequacy decisions or standard contractual clauses).

05Data retention

• Contact data and email communications: retained for the time necessary to handle the request and, in the case of a contractual relationship, for 10 years from the termination of the contract (civil/tax obligation).
• Navigation data: retained for the time strictly necessary for technical purposes, generally no longer than 30 days.

06Cookies and third-party resources

This site does not use profiling cookies, third-party analytics cookies or trackers. Only technical cookies strictly necessary for the operation of the site (e.g. browser preferences) may be set. Consent is not required for such cookies pursuant to Art. 122 of Italian Legislative Decree 196/2003.

This site does not load resources from third-party servers (such as fonts, scripts, maps or social widgets) and does not use on-device storage such as local storage: while you browse, your data is not transmitted to parties other than the hosting provider.

07Automated decision-making and artificial intelligence

We do not carry out any automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

This site does not integrate artificial intelligence systems that interact with users (such as chatbots) and does not generate content using AI while you browse. Should such systems be introduced in the future, users will be informed transparently, as required by Regulation (EU) 2024/1689 (AI Act).

08Site security and vulnerability reporting

We adopt appropriate technical and organisational measures to protect data (Art. 32 GDPR): the site is only reachable over an encrypted connection (HTTPS with HSTS), applies a restrictive Content Security Policy together with additional security headers, and includes no third-party code.

If you find a vulnerability on this site, please report it responsibly by writing to , without exploiting or disclosing it before it has been fixed. Reporting details are also published in the security.txt file.

09Rights of the data subject

Pursuant to Articles 15–22 of the GDPR, you have the right to:

• Access — obtain confirmation that data concerning you are being processed and receive a copy thereof.
• Rectification — request the correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request the deletion of data, subject to legal obligations.
• Restriction — request the restriction of processing in certain cases.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on the controller's legitimate interest.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to:

10Right to lodge a complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome, if you believe that the processing of your data infringes the GDPR.

11Changes to this privacy notice

The Controller reserves the right to update this privacy notice. Changes will be published on this page with an update of the date at the top of the document.