Privacy Policy

The Data Controller is established in Italy and processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018.

The Data Controller is not required to appoint a Data Protection Officer (DPO) pursuant to Article 37 GDPR.

2. Nature of the Website

This website is a static, informational website, hosted on Microsoft Azure Static Web Apps.

The website:

• does not include contact forms;
• does not use analytics or statistical tools;
• does not use marketing or profiling technologies;
• does not use tracking systems;
• does not carry out automated decisionmaking processes.

3. Categories of Personal Data Processed

3.1 Data Provided Voluntarily by the Data Subject

The voluntary sending of emails to the addresses published on the website (including via mailto: links) results in the processing of the following personal data:

• email address of the sender;
• name and surname (if provided);
• content of the message;
• any other personal data voluntarily included in the communication.

The provision of such data is optional; however, failure to provide it may prevent the Data Controller from replying to the request.

3.2 Browsing Data

During normal operation, the IT systems and software procedures used for this website may acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols, such as:

• IP addresses;
• date and time of access;
• type of browser and device;
• technical system parameters.

These data are processed exclusively for technical and security purposes and are not used to identify users.

4. Purposes of Processing and Legal Basis

Personal data are processed for the following purposes:

a) Management of Requests and Communications

Purpose: to respond to information requests and communications received via email.

Legal basis:
Article 6(1)(f) GDPR – legitimate interest of the Data Controller;
Article 6(1)(b) GDPR – precontractual measures, where applicable.

b) Website Security and Operation

Purpose: to ensure security, stability and proper functioning of the website.

Legal basis: Article 6(1)(f) GDPR – legitimate interest.

5. Processing Methods

Personal data is processed using electronic means and in compliance with the principles of:

• lawfulness, fairness and transparency;
• data minimization;
• purpose limitation;
• integrity and confidentiality.

Appropriate technical and organizational security measures are implemented in accordance with Article 32 GDPR.

6. Hosting Provider and Data Processors

The website is hosted on Azure Static Web Apps, a service provided by Microsoft Corporation, which acts as Data Processor pursuant to Article 28 GDPR.

The Data Controller has ensured that Microsoft provides adequate guarantees regarding the implementation of appropriate technical and organizational measures to ensure GDPR compliance.

7. Transfer of Personal Data Outside the European Union

Personal data may be processed on servers located outside the European Union.

In such cases, transfers are carried out in compliance with Articles 44 et seq. GDPR, on the basis of:

• adequacy decisions adopted by the European Commission; and/or
• standard contractual clauses or other valid transfer mechanisms.

8. Data Retention Period

Personal data are retained for no longer than necessary to fulfil the purposes for which they were collected:

Email communications: up to 24 months from the last contact, unless further retention is required by law;
Browsing data: retained for the time strictly necessary for technical and security purposes.

9. Rights of the Data Subject

Data subjects may exercise the rights provided for by Articles 15 to 22 GDPR, including:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability, where applicable.

Requests may be addressed to the Data Controller at: privacy@logos-cons.com

10. Right to Lodge a Complaint

If a data subject believes that the processing of personal data infringes the applicable legislation, they have the right to lodge a complaint with the competent Supervisory Authority.

For Italy:

Garante per la Protezione dei Dati Personali
https://www.garanteprivacy.it

11. Cookies

This website does not use profiling cookies or thirdparty cookies.

As a result, no cookie consent banner is required under applicable Italian and EU legislation.

12. Changes to This Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time. Any changes will be published on this page.