01Controller and contact
The controller is Effombo Maurizio, Via Giuseppe Verdi 8/B, 24050 Grassobbio (BG), Italy; Italian tax code EFMMRZ96R23A794E; VAT IT04091570160. For personal data enquiries: info@effombo.com, +39 035 52 64 95.
02Data and purposes
The form collects name, email, project type and message to respond, assess a project and prepare a quotation. The legal basis is steps requested before a contract (Article 6(1)(b) GDPR). General correspondence and enquiries from organisational contacts are handled on the legitimate interest in answering and maintaining professional relationships (Article 6(1)(f)). Enquiries are not used for newsletters or advertising.
03Technical data and security
Connections require technical processing of IP addresses and HTTP information to serve the website. The form uses a honeypot and rate limits, without external CAPTCHA services. A derived IP identifier and temporary counters are kept in memory or a private technical file outside the public web root. The window is ten minutes; expired counters are removed at the next check. They contain neither the message nor the IP address in readable form. This serves the legitimate interest in security (Article 6(1)(f)). The website code does not record IP addresses, messages or emails in its logs. It does not profile visitors or make automated decisions with legal effects.
04Providing data and retention
Enquiries are optional; required fields are necessary to handle them through the form. Do not send passwords, health data or unnecessary sensitive information. Enquiries that do not become a project are retained for up to six months after the last relevant exchange, then deleted unless a documented need to protect legal rights applies. If a project follows, necessary records are retained for the relationship and legal duties; accounting and tax records for ten years, or longer where required by an obligation or dispute. Technical backup copies follow the relevant service’s overwrite cycle.
05Recipients and processing locations
Access is limited to the controller and authorised people who need it. Hosting and email are supplied by Register S.p.A., processing data for EFFOMBO under the services’ terms and data processing agreement. Web Hosting Linux Starter lists infrastructure in Brussels, Belgium; the email documentation locates infrastructure and backups in Italy. The provider may record connection data for security and network operation under the service and applicable duties; EFFOMBO does not use provider statistics to analyse its audience. Necessary data may reach administrative or legal advisers and authorities where legally required. We do not sell or publish personal data. We plan no transfers outside the EEA; before introducing any, we will disclose applicable safeguards such as adequacy or standard contractual clauses. Information about providers and safeguards is available from info@effombo.com. Hosting logs are currently retained for three days; the control panel’s website statistics are disabled.
06Your rights
Contact info@effombo.com to request access, correction, erasure, restriction and, where applicable, portability. You may object to legitimate-interest processing for reasons relating to your situation. We normally respond within one month and notify you within GDPR deadlines if more time is needed. Identity checks are limited to what is necessary. You may complain to the Italian Garante (www.garanteprivacy.it) or the competent supervisory authority in your country without contacting us first. Acknowledging this notice in the form is not consent to marketing.
07Scope and changes
This notice covers the website and preliminary contact. A later project involving additional processing, such as recordings of people, distribution or rights administration, will receive the relevant information before that processing. Changes appear here with an update date. See the Cookie Policy for device-related information.