Skip to content

Privacy notice

Last updated: 29/10/2026

Draft for review: provisional text, not yet approved.

Data in square brackets is still to be completed.

Data controller

The data controller is [Company name], VAT no. [to be completed], registered office [address], email [privacy email address] ("SWEBY").

Data processed

Browsing data: the systems running the site record technical data (IP address, date and time, requested page, browser) needed for operation and security.

Data sent with the contact form: name, email, optional company and phone, topic and message.

Client data: identification and tax details, contacts, purchased services, orders, payments and invoices, support requests.

Purposes and legal bases

Replying to requests sent from the site (pre-contractual measures requested by the data subject, Art. 6(1)(b) GDPR).

Providing purchased services and managing renewals, payments, invoicing and support (performance of a contract and legal obligations, Art. 6(1)(b) and 6(1)(c) GDPR).

Ensuring the security of the site and services (legitimate interest, Art. 6(1)(f) GDPR).

Retention

Contact form requests are kept for as long as needed to reply and to manage any resulting relationship, and in any case no longer than [24 months].

Accounting and tax data are kept for 10 years as required by law; browsing data only for the time strictly needed for security.

Recipients

Data is processed by SWEBY and by suppliers acting as processors: hosting and servers, email, payment services, e-invoicing and banking, messaging tools used internally to receive notifications. Domains are registered with the relevant registries using the domain holder's data.

Some suppliers may process data outside the European Union: in that case transfers rely on the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

Your rights

You can request access, rectification, erasure, restriction and portability of your data and object to processing by writing to [privacy email address]. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).