1. Data controller
The data controller is LPWEB di Lorenzo Pezzali, registered office at Via Leonardo da Vinci 189, 10095 Grugliasco (TO), Italy — VAT number 12545520012. For any request concerning personal data protection, contact info@lpweb.it.
2. Data processed
Data submitted through the contact form
When you use the form, LPWEB collects your full name, email address, subject and message content.
Usage statistics
The website uses Umami, an analytics platform hosted on the controller’s own infrastructure (domain analytics.lpweb.cloud). For each page view it records the URL, referring page, browser language, screen resolution, device type and country. Umami sets no cookies and stores nothing in your browser. Your IP address and user agent are used in transit only, to derive the country and a session identifier hashed with a key that rotates daily: they are not stored, cannot be traced back to you, and do not allow you to be followed from one day to the next or across other websites.
Technical browsing and security data
The systems used to deliver the website may process technical data such as IP address, request date and time, visited URL, user agent and information required for service security and operation. The form uses Cloudflare Turnstile, which processes technical browser and connection signals to distinguish people from bots.
3. Purposes and legal bases
- Responding to your request: form data is used solely to handle your message and provide the requested response. The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR) or, for non-contractual enquiries, the legitimate interest in managing incoming communications (Article 6(1)(f) GDPR).
- Aggregated usage statistics: the data collected by Umami is used to understand which content is useful and to improve the website, based on the controller’s legitimate interest in assessing how its pages perform (Article 6(1)(f) GDPR). The measurement uses no cookies and no persistent identifiers, so consent is not required.
- Website security and abuse prevention: technical data is processed to ensure service availability, integrity and protection, based on the controller’s legitimate interest (Article 6(1)(f) GDPR).
Your data is not used for newsletters, marketing, profiling or automated decision-making.
4. Required information
Fields marked as required must be completed to submit a request. Without that data or confirmation that you have read this policy, the form cannot be sent. Confirming that you have read the policy does not constitute consent to promotional activities.
5. Processing methods and recipients
Data is processed electronically with measures designed to prevent unauthorised access, loss and misuse. It may be processed by providers strictly required to deliver the service — hosting, email, technical maintenance and security — acting as processors or independent controllers according to their role. Cloudflare Turnstile is used for bot protection. Usage statistics are collected with Umami hosted on the controller’s own infrastructure: the data stays under the controller’s control and is not shared with third-party analytics providers. Data is neither published nor sold.
6. International transfers
Some technical providers may process data outside the European Economic Area. Any such transfer is carried out in accordance with Chapter V GDPR, based on adequacy decisions or appropriate safeguards, including standard contractual clauses. Data collected by Umami, by contrast, stays on the controller’s infrastructure within the European Union and is not transferred outside the EEA. For Turnstile, see Cloudflare’s privacy information.
7. Retention
Request data is kept for the time required to handle the enquiry and, as a rule, no longer than 12 months after the last contact. It may be retained longer when necessary to continue a contractual relationship, comply with legal obligations or establish, exercise or defend a legal claim. Technical security data is retained for the strictly necessary period and according to the relevant providers’ policies. Usage statistics are retained in aggregated form and cannot be linked to an identified or identifiable person.
8. Your rights
Where applicable under Articles 15–22 GDPR, you may request access, rectification, erasure, restriction, portability and object to processing. To exercise your rights, email info@lpweb.it. You may also lodge a complaint with the Italian Data Protection Authority.
9. Updates
This policy may be updated following regulatory or technical changes. The date at the top identifies the current version.