1. Data controller
The data controller is LPWEB di Lorenzo Pezzali, registered office at Via Leonardo da Vinci 189, 10095 Grugliasco (TO), Italy — VAT number 12545520012. For any request concerning personal data protection, contact info@lpweb.it.
2. Data processed
Data submitted through the contact form
When you use the form, LPWEB collects your full name, email address, subject and message content.
Technical browsing and security data
The systems used to deliver the website may process technical data such as IP address, request date and time, visited URL, user agent and information required for service security and operation. The form uses Cloudflare Turnstile, which processes technical browser and connection signals to distinguish people from bots.
3. Purposes and legal bases
- Responding to your request: form data is used solely to handle your message and provide the requested response. The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR) or, for non-contractual enquiries, the legitimate interest in managing incoming communications (Article 6(1)(f) GDPR).
- Website security and abuse prevention: technical data is processed to ensure service availability, integrity and protection, based on the controller’s legitimate interest (Article 6(1)(f) GDPR).
Your data is not used for newsletters, marketing, profiling or automated decision-making.
4. Required information
Fields marked as required must be completed to submit a request. Without that data or confirmation that you have read this policy, the form cannot be sent. Confirming that you have read the policy does not constitute consent to promotional activities.
5. Processing methods and recipients
Data is processed electronically with measures designed to prevent unauthorised access, loss and misuse. It may be processed by providers strictly required to deliver the service — hosting, email, technical maintenance and security — acting as processors or independent controllers according to their role. Cloudflare Turnstile is used for bot protection. Data is neither published nor sold.
6. International transfers
Some technical providers may process data outside the European Economic Area. Any such transfer is carried out in accordance with Chapter V GDPR, based on adequacy decisions or appropriate safeguards, including standard contractual clauses. For Turnstile, see Cloudflare’s privacy information.
7. Retention
Request data is kept for the time required to handle the enquiry and, as a rule, no longer than 12 months after the last contact. It may be retained longer when necessary to continue a contractual relationship, comply with legal obligations or establish, exercise or defend a legal claim. Technical security data is retained for the strictly necessary period and according to the relevant providers’ policies.
8. Your rights
Where applicable under Articles 15–22 GDPR, you may request access, rectification, erasure, restriction, portability and object to processing. To exercise your rights, email info@lpweb.it. You may also lodge a complaint with the Italian Data Protection Authority.
9. Updates
This policy may be updated following regulatory or technical changes. The date at the top identifies the current version.