Privacy notice
How we process the personal data of people who visit this website or contact us, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
This is an English translation for convenience. The Italian version is the legally binding text and also covers the services available only in Italian, such as the regulatory newsletter.
1. Data controller
I-dentity, Sede Firenze (FI), P.IVA 02297310514, PEC leonardo.ghirotto@pec.it, email info@i-dentity.it. No Data Protection Officer has been appointed, because the conditions of Article 37 GDPR do not apply.
2. What this notice covers
This notice covers the website www.i-dentity.it and the messages you send us through the channels shown on it. It does not cover the Portale IDGS client area, our consulting assignments or the services of our partner GS Technology, which have their own notices and agreements.
3. Data we process
Browsing data. The servers hosting the website record, in their normal technical logs, data about the connection: IP address, date and time, page requested, response code, browser, operating system and referring site. We use this data only to run and secure the website and to detect abuse. We also count page views in aggregate (visits per page per day, referring domain and device type), without storing IP addresses or data about individual visits, and without cookies.
Data you send us. If you write to us, we process the data you choose to give us: name, practice or company, email, phone number, the content of your message and any attachments. Please do not send us health data or other special categories of data, such as patient data, through the website channels.
Cookies. The website does not set profiling cookies, does not use third-party analytics or advertising tools and does not embed external content. Details in the cookie policy (in Italian).
4. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Running and securing the website, preventing abuse | Legitimate interest (Art. 6.1.f GDPR) | Technical logs: as long as strictly necessary, normally no longer than 12 months |
| Replying to requests for information, demos, quotes and meetings | Pre-contractual steps at your request (Art. 6.1.b) or legitimate interest in replying to people who write to us (Art. 6.1.f) | 24 months from the last contact, unless a contract follows |
| Accounting, tax and legal obligations | Legal obligation (Art. 6.1.c) | 10 years (Art. 2220 of the Italian Civil Code) |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6.1.f) | For the duration of any dispute and the related time limits |
5. Who receives the data
- Suppliers processing data on our behalf as processors (Art. 28 GDPR): Aruba S.p.A. (website hosting and email, data centres in Italy); Supabase, for the Portale IDGS platform that stores the aggregate statistics and support requests (servers in the European Union, in Ireland); Brevo (Sendinblue SAS, France), for support emails; IT and support providers.
- Professionals who assist us (accountant, legal advisers), bound by professional secrecy or appointed as processors.
- Authorities, when required by law.
We do not disclose data publicly or sell it to third parties. If you contact us on Telegram, the messages are also processed by Telegram as an independent controller, partly outside the EU: you can always write to us by email instead.
6. Transfers outside the European Union
The website and email are hosted in Italy. If a supplier processes data outside the European Economic Area, the transfer takes place only on the basis of an adequacy decision (Art. 45 GDPR, for example the EU-U.S. Data Privacy Framework) or appropriate safeguards such as the European Commission's standard contractual clauses (Art. 46 GDPR).
7. Your rights
You can ask for access to your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and portability (Art. 20), and you can object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you can withdraw it at any time. Write to info@i-dentity.it: we reply without undue delay and in any case within one month. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (Art. 77 GDPR), or with the authority of the EU country where you live or work.
8. Automated decisions and minors
We do not take decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects (Art. 22 GDPR). The website is aimed at professionals and businesses and is not intended for people under 18.
Last updated: 4 November 2026