Privacy policy

Data controller

OmbraSociale S.R.L. Società Benefit, Via Giuseppe Mercalli 21, 00197 Roma, Italy, VAT no. 18104191004. Email: info@ombrasociale.it, certified email (PEC): ombrasociale@pec.it.

What data we process

• Browsing data: IP address, date and time of the request, page visited, browser and operating system. They are collected automatically by the systems hosting the site.
• Data you send us: if you email us, write to our PEC address or call us, we process the data you give us (name, contact details, content of the message).
• Usage statistics: only with your consent, through Google Analytics (see the cookie policy).

The site has no sign-up forms, private areas or payment systems.

Why we process them and on what legal basis

• Publishing the site and keeping it secure: legitimate interest (Art. 6(1)(f) GDPR).
• Answering your requests and managing partnerships: pre-contractual steps or your interest in receiving a reply (Art. 6(1)(b) and 6(1)(f) GDPR).
• Usage statistics: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from “Cookie preferences” at the bottom of the page.

Who we share data with

With the providers that help us run the site, appointed as data processors: Cloudflare, Inc. (hosting and content delivery network) and, only with your consent, Google Ireland Ltd (Google Tag Manager and Google Analytics). The embedded video is loaded from YouTube (Google) only if you choose to play it. We do not sell or pass on data to third parties for marketing.

Transfers outside the European Union

Cloudflare and Google may process data in the United States. Transfers are based on the EU-U.S. Data Privacy Framework, which both companies have joined, and on the European Commission’s standard contractual clauses.

How long we keep them

• Browsing data: for the period set by the hosting provider’s systems for security and diagnostics.
• Correspondence: for as long as needed to handle the request and any partnership, then as required by law.
• Statistics: according to Google Analytics retention settings, at most 14 months.

Your rights

You can ask for access, correction, erasure, restriction and portability of your data, and object to processing (Arts. 15–22 GDPR), by writing to info@ombrasociale.it. You can withdraw your consent to statistics at any time. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).