Last updated: 16 October 2026.
Data controller
The controller of personal data collected through this website is Smartitaly srl, with its registered office at Via Dorando Pietri 2/A, 41012 Carpi (MO), Italy, tax code and VAT number 03409980368. For information about the processing of your data and to exercise your rights, contact privacy@smartitaly.it.
Browsing and website security
When you browse the website, the systems that make it available may process technical information such as your IP address, the date and time of a request, the resource requested, browser information and error messages. This information is used to deliver pages, operate the service, prevent abuse and investigate security issues. The legal basis is the controller’s legitimate interest in maintaining a functioning and secure website while respecting users’ rights.
Technical information is retained for the time needed to operate the service and carry out security checks, in accordance with the provider’s log rotation cycles. In the event of anomalies or incidents, relevant information may be retained for the time needed to investigate the event or protect a legal right. You can request details of the applicable periods using the privacy contact above.
Contact requests
If you contact us through the website or by email, we process the information you provide, such as your name, email address, any company details and the content of your message, to respond to your request and handle any follow-up. The legal basis is taking pre-contractual steps at your request when the enquiry concerns a potential collaboration or service; in other cases, it is our legitimate interest in responding to the communication received. Mandatory form fields are needed to enable us to reply.
Contact requests are retained for a maximum of 6 months from receipt. If a contractual relationship is established, the information needed to manage it is processed for the relevant purposes and in accordance with applicable obligations. Information strictly necessary to meet legal obligations or protect a legal right may be retained.
Download and resource requests
For resources that require a form to be completed, we collect your name, email address, role and company, together with the resource requested, the source page and information about the request and acknowledgement of this policy. This information is used to handle your request, make the download available and document the operation. The legal basis is fulfilling your request; service security and abuse prevention are based on the controller’s legitimate interest.
This information is recorded in a private WordPress area accessible to authorised administrators and retained for a maximum of 6 months from the request. The temporary download link expires after 15 minutes: expiry of the link does not delete the request record. Completing the form does not constitute consent to receive newsletters or promotional communications.
Job applications and freelance collaborations
If you submit an unsolicited application or apply for a vacancy, we process your name, contact details, application type, CV and any LinkedIn profile, portfolio, cover letter and message you choose to provide. This information is used to assess your professional profile and contact you about employment opportunities or professional collaborations. The legal basis is taking pre-contractual steps at your request. The form checkbox confirms that you have read this policy; it is not consent to marketing.
Your name, email address and CV are needed to handle the application; the unsolicited application form also requires you to choose between a job application and a freelance collaboration. Other information is optional unless the form states otherwise. Please do not include irrelevant information, health information or other special categories of personal data that are not necessary for the application. The website’s application forms do not carry out automated candidate selection or assessment.
Job applications are retained for the minimum time needed for recruitment: applications for a specific vacancy are deleted when recruitment concludes with the hiring of a candidate and, in any event, within 6 months of receipt. Unsolicited applications not linked to a specific vacancy are retained for a maximum of 6 months from receipt. Applications for freelance collaborations are retained for a maximum of 24 months from receipt to assess potential collaborations.
Applications are sent to Smartitaly’s HR mailbox. Attachments from new submissions are prepared by the website in private temporary storage, not in the public Media Library, and removed after the sending attempt. This technical removal does not delete copies received by email or subsequently stored for recruitment: the periods above apply to those copies too. Access is limited to people authorised to manage applications and providers engaged to supply the tools used.
Saved articles and browser technologies
If you use “Save for later”, your browser stores the identifiers of the articles you select and a visit state needed for the returning-reader reminder. No account is required and the list is not synced across devices. This information remains until you remove the articles or clear the website’s data in your browser; removing the last article also clears the local reminder state. The 30-minute interval determines when to show the reminder and is not a deletion period for the list.
To display up-to-date titles, covers and links, your browser sends the requested identifiers and language to the website. The theme does not record your personal list in the WordPress database or your reading position in an article. Normal technical server logs still apply. The website may also use technical cookies needed for its operation and for the authentication of authorised users in the administration area.
Analytics, newsletters and external content
Google Analytics and Brevo are planned for the website’s launch and are not active on this staging version. Before activation, information about the data, purposes, retention and providers will be updated, and the necessary choice and consent mechanisms will be put in place. Submitting an application, a contact request or a download request does not automatically subscribe you to a newsletter or authorise promotional campaigns.
The website may include YouTube videos, images or content provided by external services. When this content loads, your browser may connect to the relevant provider and transmit technical information such as your IP address. The use of cookies or other technologies by these services depends on the feature used and the applicable choices. Links to social platforms and other websites lead to services with their own privacy policies; this policy does not govern processing carried out independently by their respective controllers.
Recipients, providers and transfers
Information may be processed by authorised Smartitaly personnel and providers supporting hosting, maintenance, email and document management, within the scope of their respective assignments. We use IONOS for hosting and Microsoft 365 and SharePoint for email and documents, configured with servers in the European Union. Information may also be disclosed to authorities or other parties where required by law. Data submitted through the forms is not intended for public disclosure.
Locating servers in the European Union does not, by itself, rule out further processing connected with support or services from international providers. Any transfers outside the European Economic Area must comply with Chapter V of the GDPR using the applicable safeguards, such as an adequacy decision or standard contractual clauses and any additional measures required. For information about the providers involved and the safeguards applied, contact privacy@smartitaly.it.
Your rights
Where provided for by the GDPR, you may request access to your information, rectification, erasure, restriction of processing and portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier operations. To exercise your rights, contact privacy@smartitaly.it; we may ask for information strictly necessary to verify your identity.
You may also lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. Rights apply subject to the conditions and limitations set out in Regulation (EU) 2016/679.
Changes to this policy
This policy describes the website’s processing activities as at the date shown above. It will be updated if features, providers or purposes change, in particular before Google Analytics and Brevo are activated and before the staging website becomes the final public website.