Legal · Data protection

Privacy Policy

How Giannotta Web Systems collects, uses, stores and protects personal data when you visit the website, submit a project request or use the client area.

Last updated: 19 June 2026GDPR · EU/EEA
01

Data Controller

Giannotta Web Systems di Tiziano Giannotta
Via Corte dei Fiori 8, 73100 Lecce (LE), Italy
Tax code: GNNTZN81A31Z133G
Email: admin@giannottawebsystems.it

The Controller determines the purposes and means of processing personal data carried out through this website and the related project-management services.

02

Personal data processed

Browsing and technical data

IP address, request time, browser and device information, requested resources, security logs and technical data generated by the web server. Where technically possible, data used for internal statistics is aggregated or anonymised.

Contact and project data

Name, email address, optional telephone or messaging contact, country, company details, project type, budget or commercial information, message contents and files voluntarily uploaded.

Client-area data

Account details, proposals, approvals, typed acceptance name, project phases, revision requests, expenses, payment confirmations, documents, messages and activity timeline.

Payment information

The system currently records payments manually. It stores amounts, dates, status, notes and confirmations, but does not process card data or operate as an online payment gateway.

03

Purposes and legal bases

Replying to requests and preparing proposalsPre-contractual measures requested by the user and, where applicable, legitimate interest in managing professional communications.
Managing accepted projectsPerformance of a contract, including phases, approvals, expenses, payments, documents and client communications.
Legal, accounting and defence requirementsCompliance with legal obligations and establishment, exercise or defence of legal claims.
Website security and abuse preventionLegitimate interest in protecting the website, accounts, infrastructure and users.
Optional analytics or non-essential technologiesConsent, where such tools are activated. They remain disabled before consent when required.

Providing data marked as mandatory is necessary to process the request or supply the requested service. Failure to provide it may prevent a response, proposal or project activation.

04

Recipients and service providers

Data may be processed by authorised personnel and by suppliers necessary to operate the service, within the limits of their assigned tasks. Current infrastructure includes Register.it as hosting/provider. Email delivery may use the configured mailbox or SMTP provider once enabled. Security and maintenance suppliers may access data only when necessary and under appropriate instructions.

Data is not sold. It may be disclosed to public authorities where required by law or a valid order.

05

International transfers

The website is intended to use EU-based infrastructure where practical. Some optional third-party services, embedded content or future integrations may involve providers outside the European Economic Area. In such cases, transfers will rely on an adequacy decision, Standard Contractual Clauses or another safeguard recognised by applicable data-protection law.

06

Retention periods

Unconverted enquiries

Kept only for the time needed to reply and manage follow-up, normally no longer than 24 months unless a longer period is justified by an ongoing relationship or legal need.

Project records

Detailed project-area records are planned for retention for up to 36 months after closure, excluding active projects and data that must be retained longer for legal, accounting or dispute purposes.

Security logs

Retained for a proportionate period based on security needs, incident analysis and server configuration.

Legal and accounting records

Retained for the periods required by Italian law and for the protection of legal rights.

07

Automated decisions

No decisions producing legal or similarly significant effects are made solely by automated processing. Workflow rules may lock or unlock project phases after approvals and payment confirmation, but relevant commercial decisions remain under human control.

08

Your rights

Where the legal requirements are met, you may request access, rectification, erasure, restriction, portability, or object to processing. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise your rights, write to admin@giannottawebsystems.it. Additional information may be requested when reasonably necessary to verify identity and protect your data.
09

Security measures

Reasonable technical and organisational measures are used, including access controls, account authentication, secure transport where available, software updates, backups, input validation, activity logging and restricted administrative access. No internet service can guarantee absolute security.

10

Minors

The website and professional services are not directed to children. Project requests should be submitted by adults or by persons authorised to act on behalf of an organisation.

11

Changes to this policy

This policy may be updated when services, providers, legal requirements or processing activities change. The current version and update date will remain available on this page.

12

Privacy contact

Giannotta Web Systems di Tiziano Giannotta
Via Corte dei Fiori 8, 73100 Lecce (LE), Italy
admin@giannottawebsystems.it

Legal notice: this document is a carefully structured operational draft based on the services currently declared for this website. It should be reviewed whenever services, plugins, hosting, tracking technologies, payment tools or business details change, and may be submitted to a qualified professional for a final legal review.

14

Project portal logs and generated records

The project-management system may record proposal versions, acceptance names, timestamps, temporary action-token identifiers, anonymised or truncated technical network information where implemented, browser or user-agent information, project status transitions, On Hold or suspension reasons, reactivation requests, payment confirmations, PDF document numbers, email delivery attempts and administrative actions. These records are used to manage the contractual relationship, maintain security, demonstrate the sequence of project events and resolve support or legal issues.

Completed, cancelled or suspended projects may remain accessible in read-only form where required for the service. The standard operational retention target is 36 months, without prejudice to longer retention required for legal obligations, accounting records, dispute management or the establishment, exercise or defence of legal claims.