Privacy Policy

1 – Data controller

The controller of the personal data collected through this website is RICLOG, NIE Z4002038C, with registered office at 35008 Las Palmas de Gran Canaria (Las Palmas), Spain.

The contact person for personal data protection is Riccardo Lo Giudice, reachable at info@rilogi.it.

Processing is governed by Regulation (EU) 2016/679 (GDPR) and by Spanish implementing law, in particular Ley Orgánica 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

2 – What data we collect

Browsing data. The systems running this website record, for technical operation only, data whose transmission is implicit in the use of Internet protocols: IP address, browser and operating system type, date and time of the request, page requested. This data is not used to identify visitors and is not cross-referenced with other information.

Data you provide by email. The only data we receive this way is what you choose to send us by writing to the published addresses: the sender’s address and the information contained in the message.

Newsletter subscription. The subscription form asks for an email address; name and company are optional. Together with them we record the wording of the consent you ticked, the moment you gave it, your anonymised IP address and the source that brought you to the page (referrer and any utm_ parameters in the link), so we can tell which campaign a subscription came from.

3 – Purposes and legal basis

Browsing data is processed to keep the website working and secure. The legal basis is our legitimate interest in providing a functioning service protected from abuse (Art. 6.1.f GDPR).

Data sent by email is processed to answer the enquiry and, where a professional relationship follows, to manage it. The legal basis is the performance of pre-contractual or contractual measures requested by the data subject (Art. 6.1.b GDPR).

Newsletter data is processed to send you the messages you asked for. The legal basis is your consent (Art. 6.1.a GDPR), which you may withdraw at any time using the unsubscribe link in every message, without affecting the lawfulness of processing carried out beforehand.

4 – Cookies

The public pages of this website use no profiling, analytics or third-party cookies. There are no tracking systems, advertising pixels or audience measurement tools.

A single technical cookie is set, required for page security (protection against cross-site request forgery). It is flagged HttpOnly and SameSite=Strict, cannot be read by scripts, contains no personal data and is deleted when the browser closes.

In the administration area, accessible to authorised staff only, a further technical session cookie is set to maintain authentication.

Since these are exclusively strictly necessary technical cookies, under Art. 22.2 of Ley 34/2002 (LSSI) no prior consent is required.

5 – Third-party services

Typefaces and all other design assets are served directly from this domain. The website makes no requests to content delivery networks or other external services: no browsing data, IP address included, is communicated to third parties while you read these pages.

The site contains links to external social profiles. They are plain links: no data reaches those platforms unless you choose to follow them.

The website is hosted by Aruba S.p.A., via San Clemente 53, 24036 Ponte San Pietro (BG), Italy, VAT IT01573850516, appointed as processor under Art. 28 GDPR. Its data centres are located in the European Union — Arezzo, Ponte San Pietro and Rome in Italy, Ktiš in the Czech Republic — so no browsing data leaves the European Economic Area.

6 – Retention

Browsing data is kept for as long as strictly necessary for the technical and security purposes described, unless it must be kept longer to establish liability in the event of computer crime against the website.

Email correspondence is kept for as long as needed to handle the enquiry and, where a contractual relationship exists, for the period required by applicable civil and tax obligations.

Newsletter data is kept until you unsubscribe. After that we keep only the proof of consent and of its withdrawal, for as long as needed to demonstrate that we acted lawfully.

7 – Disclosure

Data is neither disseminated nor sold or transferred to third parties. It may be processed on our behalf and on our instructions by the technical service providers listed in section 5, appointed as processors under Art. 28 GDPR. It may also be disclosed to the competent authorities in the cases provided for by law.

8 – Your rights

You may exercise at any time the rights granted by Articles 15 to 22 GDPR: access to your data, rectification, erasure, restriction of processing, portability and objection.

Requests are made by writing to info@rilogi.it, enclosing a copy of an identity document where verification of the requester’s identity is necessary. We reply within one month, extendable by two further months in particularly complex cases.

If you believe the processing infringes the law, you may lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (C/ Jorge Juan 6, 28001 Madrid – www.aepd.es), or with the supervisory authority of the country where you habitually reside.

9 – Changes

This notice may be updated to reflect changes in the law or in the website. The version published on this page is the one in force.