Privacy and Cookie Policy
This policy describes the processing of personal data of users who browse this website and of those who use the contact form, pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and the Italian Data Protection Authority's cookie guidelines of 10 June 2021.
1. Data Controller
The Data Controller is Archi.gia Srl, Via Lago dei Tartari 21/23, 00012 Guidonia Montecelio (RM), Italy — VAT no. IT05207091009. Email: contact form — Tel. +39 0774 378243. HUBIS® is a project of the Controller. The Controller has not appointed a Data Protection Officer (DPO), as it is not required to.
2. Data we process
Browsing data. As with any website, the hosting provider's systems record some technical connection data (IP address, date and time, requested page, result, browser). It is used only to run and secure the site, not to identify users.
Contact form data. If you write to us through the form, we process:
- full name;
- email address;
- organisation (optional);
- type of enquiry (optional);
- message content;
- date, time and IP address of submission, recorded as proof that you read this policy and for the security of the service.
Please do not include special categories of data (e.g. health data) or unnecessary third-party data in your message.
3. Purposes and legal basis
- Responding to your enquiry and managing any resulting relationship: steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR).
- Site security and spam prevention (browsing data, submission log, anti-spam check): the Controller's legitimate interest in protecting the site and its mailboxes (Art. 6.1.f GDPR).
- Establishing, exercising or defending legal claims: the Controller's legitimate interest (Art. 6.1.f GDPR).
Providing form data is optional, but without the fields marked as required we cannot reply. The checkbox in the form only confirms that you have read this policy. Data is not used for marketing, newsletters or profiling and is not subject to automated decision-making.
4. Cookies and similar technologies
This site sets no cookies, neither technical nor profiling, and uses no analytics, pixels, maps, videos or other third-party content. Fonts and images are served directly from our server, with no connections to external services. For this reason there is no cookie consent banner.
To protect the contact form from spam, when you submit it your browser performs a short cryptographic calculation (proof-of-work) supplied by our server: it uses no cookies, stores nothing on your device and involves no third parties. Your IP address is kept only in hashed form and for a limited time, normally one hour, to limit repeated submissions.
You can still manage or block cookies in your browser settings. Should the site adopt non-technical cookies in the future, this policy will be updated and your prior consent will be requested.
5. Retention
Enquiries received through the form are kept for as long as necessary to handle them and in any case no longer than 24 months from the last contact, unless a contractual relationship follows (in which case statutory periods apply) or legal-defence needs arise. The submission log is deleted automatically after 24 months. Anti-spam data is deleted automatically, normally within 2 hours; browsing data is kept by the hosting provider for the period set by its security systems.
6. Recipients
Data is processed by the Controller's authorised and instructed staff. The site is hosted by Aruba S.p.A. (Italy), which also provides the technical sending of form messages and acts as Data Processor under Art. 28 GDPR. Messages are delivered to and stored on the Controller's email systems. Data is not disclosed or transferred to third parties, except where required by law or by the authorities.
7. Data transfer
Data is processed within the European Union. No transfers to third countries are envisaged.
8. Your rights
You may at any time exercise the rights under Articles 15–22 GDPR: access, rectification, erasure, restriction, portability and objection to processing based on legitimate interest. To exercise them, write to contact form: we will reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).