Privacy notice
Last updated: 29/10/2026
Draft for review: provisional text, not yet approved.
Data in square brackets is still to be completed.
Data controller
The data controller is [Company name], VAT no. [to be completed], registered office [address], email [privacy email address] ("SWEBY").
Data processed
Browsing data: the systems running the site record technical data (IP address, date and time, requested page, browser) needed for operation and security.
Data sent with the contact form: name, email, optional company and phone, topic and message.
Client data: identification and tax details, contacts, purchased services, orders, payments and invoices, support requests.
Purposes and legal bases
Replying to requests sent from the site (pre-contractual measures requested by the data subject, Art. 6(1)(b) GDPR).
Providing purchased services and managing renewals, payments, invoicing and support (performance of a contract and legal obligations, Art. 6(1)(b) and 6(1)(c) GDPR).
Ensuring the security of the site and services (legitimate interest, Art. 6(1)(f) GDPR).
Retention
Contact form requests are kept for as long as needed to reply and to manage any resulting relationship, and in any case no longer than [24 months].
Accounting and tax data are kept for 10 years as required by law; browsing data only for the time strictly needed for security.
Recipients
Data is processed by SWEBY and by suppliers acting as processors: hosting and servers, email, payment services, e-invoicing and banking, messaging tools used internally to receive notifications. Domains are registered with the relevant registries using the domain holder's data.
Some suppliers may process data outside the European Union: in that case transfers rely on the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).
Your rights
You can request access, rectification, erasure, restriction and portability of your data and object to processing by writing to [privacy email address]. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).