How we handle your personal data

1. Data controller

The data controller is [COMPANY NAME TO BE ADDED], with registered office at [REGISTERED ADDRESS TO BE ADDED], VAT number [VAT NUMBER TO BE ADDED].

For any question about your personal data you can write to info@ciaomoss.com or call +39 329 872 4483.

No Data Protection Officer (DPO) has been appointed, as the legal conditions requiring one do not apply.

2. What data we collect

Data you give us

If you fill in the contact form we collect the data you enter: full name, email address, phone number, business name and, if you choose to write one, the optional message. These are the only details we ask for, and we need them to get back to you and understand whether our service suits your business.

The form does not send data to a server of ours: it opens the mail application on your device with the message already filled in, which is sent only when you press send. The data therefore travels through your own email provider and arrives in our inbox.

Data collected automatically

Like any website, the servers hosting ciaomoss.com record certain connection data in their technical logs: IP address, date and time of the request, page requested, browser type and operating system. This data is necessary to deliver the service, keep it secure and diagnose faults. We do not use it to identify visitors or to profile them.

Statistical browsing data

If you give consent through the banner, we use Google Analytics 4 to measure, in aggregate, how many people visit the site, where they come from and which content they read. The service sets cookies that assign your browser a random identifier: we do not know who you are, and we do not cross-reference this data with anything you leave in the form.

We have enabled IP address anonymisation and have not turned on any advertising, remarketing or data-sharing features for advertising purposes.

3. Why we process your data and on what legal basis

Providing the form data is optional, but without it we cannot get back to you: it is therefore necessary in order to act on your enquiry.

We do not send unsolicited marketing and we do not use your address for newsletters or marketing campaigns, unless you expressly ask us to at a later stage.

4. How long we keep your data

• Enquiries: for as long as needed to handle the request and, if no contractual relationship follows, for a maximum of 24 months from the last contact, after which the data is deleted.
• Contracts entered into: for the duration of the relationship and for the following 10 years, as required by Italian civil and tax law.
• Google Analytics statistics: kept for a maximum of 14 months, after which they are deleted automatically by the platform.
• Technical server logs: for a limited period set by the hosting provider, normally no longer than 30 days, unless needed to investigate unlawful activity.

5. Who we share your data with

Your data is never disclosed publicly or sold to third parties. It may be processed on our behalf, within the limits of their respective roles, by the following parties, appointed as data processors under Article 28 GDPR:

Data may also be disclosed to advisers, professionals and public authorities where necessary to comply with legal obligations or to establish or defend a legal claim.

6. Transfers outside the European Union

Some of the providers listed above are based in the United States. In those cases the transfer relies on the safeguards set out in Chapter V of the GDPR: standard contractual clauses approved by the European Commission and, where applicable, the provider's certification under the EU-U.S. Data Privacy Framework.

7. Your rights

You may exercise the rights set out in Articles 15 to 22 of the GDPR at any time:

• Access: find out whether we process data about you and obtain a copy of it.
• Rectification: correct inaccurate data or complete incomplete data.
• Erasure: have your data deleted, in the cases provided for by law.
• Restriction: ask for processing to be limited to certain operations.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.

Withdrawing consent: for processing based on consent, such as visit statistics, you may withdraw it at any time through the Cookie preferences link in the footer, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise the other rights, simply write to info@ciaomoss.com. We will reply within one month of your request.

If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.

8. Security

The site is served exclusively over an encrypted HTTPS connection. We apply technical and organisational measures appropriate to protect data against unauthorised access, loss or disclosure, taking into account the state of the art and the nature of the data processed.

9. Minors

The Moss site and services are aimed at businesses and professionals. We do not knowingly collect data from anyone under the age of 16.

10. Changes to this notice

We may update this notice to reflect changes in the law or in the services we offer. The version in force is always the one published on this page, with the last-updated date shown at the top.