Privacy Policy

This English translation is provided for convenience only; in case of discrepancies the Italian version prevails.

1. Data Controller

MICROSPOT S.R.L.

Address: VIA DEL LAVORO 28 - 20084 - LACCHIARELLA (MI)

VAT number (Partita IVA): 03559660968

Tax code (Codice Fiscale): 03559660968

EU VAT number: IT03559660968

REA: 1683612

Email: info@microspot.it

PEC: microspot@gigapec.it

2. Categories of Data Collected

2.1 Data provided voluntarily

Contact data: first name, surname, email address, telephone number
Company data: company name, VAT number, registered office address
Communications: content of messages sent via forms or email

2.2 Data collected automatically

Browsing data: anonymised IP address, browser, operating system
Technical data: device type, screen resolution, language
Cookies: as detailed in the Cookie Policy

2.3 Google Analytics 4 (privacy-compliant configuration)

IP anonymised

Google Signals disabled

Data retention: 14 months

Google Consent Mode v2 enabled

No sharing with other Google products

Google Search Console: It does not collect users’ personal data; it only provides aggregated data on the website’s performance.

3. Purposes and Legal Basis of Processing

Purpose	Legal Basis	Retention
Handling of contact requests	Pre-contractual measures (Art. 6.1.b)	24 months
Newsletter and communications	Explicit consent (Art. 6.1.a)	Until withdrawn
Statistical analysis of the website	Legitimate interest (Art. 6.1.f)	14 months
Legal/tax obligations	Legal obligation (Art. 6.1.c)	10 years
Website security	Legitimate interest (Art. 6.1.f)	6 months

4. Recipients of the Data

Your data may be disclosed to:

Google LLC (Google Analytics, Search Console) - USA
Hosting and cloud service providers - EU
Tax and legal advisers - Italy
Competent authorities where required by law

All providers act as Data Processors bound by agreements pursuant to Art. 28 GDPR

5. Transfers of Data outside the EU

Google Services (USA)

Data may be transferred to the USA. Safeguards applied:

EU-US Data Privacy Framework (decision of 10/07/2023)
Standard Contractual Clauses (SCC 2021/915)
Technical measures: encryption, IP anonymisation

Note: The Data Privacy Framework is subject to ongoing review. Should it be invalidated, we will rely on Standard Contractual Clauses and supplementary measures.

6. Your Rights (Arts. 15-22 GDPR)

Right of Access

Obtain confirmation and a copy of your data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

"Right to be forgotten" - have your data deleted

Right to Restriction

Restrict processing in specific cases

Right to Data Portability

Receive your data in a structured format

Right to Object

Object to processing for marketing purposes

How to exercise your rights:

Send a request to: privacy@microspot.it

We will respond within 30 days (extendable to 90 in complex cases)

Right to Lodge a Complaint:

You may lodge a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority)

www.garanteprivacy.it

garante@gpdp.it

Piazza Venezia 11, 00187 Roma

7. Minors

Our website is not intended for minors under the age of 14 (the minimum age in Italy for giving consent independently). We do not knowingly collect data from minors without the consent of their parents or legal guardians.

8. Data Security

We adopt appropriate technical and organisational measures:

SSL/TLS encryption for data transmission
Firewalls and intrusion detection systems
Access restricted to authorised personnel only
Regular backups and disaster recovery
Periodic staff training
Data protection impact assessments (DPIA) where necessary

10. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy. Changes will be published on this page together with the date of the update. In the event of substantial changes, we will provide notice by means of a banner on the website or by email to registered users.

11. Privacy Contacts