Privacy Policy

Last updated:

This policy explains how SESINF S.R.L. processes the personal data of people who visit sesinf.net and contact us through it, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended.

1. Data controller

SESINF S.R.L. – Soluzione e Servizi Informatici, Via Pietro della Valle 13, 00193 Roma (RM), Italy — C.F. and P.IVA 11145781008. Email: info@sesinf.net

SESINF has not appointed a Data Protection Officer, as it is not required to do so under Art. 37 GDPR.

2. Data we collect

  • Contact form data: name, email address, company (optional), area of interest (optional) and the content of your message.
  • Emails you send us: your email address and any information you include.
  • Technical data: when you visit the site, our hosting and security provider automatically processes technical data such as your IP address, browser type and the pages requested. This is necessary to deliver the site and protect it against abuse. On the contact page, Cloudflare Turnstile processes technical data about your browser and device to check that the form is being sent by a person and not by an automated program.

We do not ask for, and ask you not to send, special categories of data (Art. 9 GDPR).

  • Responding to your enquiry and, where relevant, taking steps before entering into a contract at your request — Art. 6(1)(b) GDPR; for enquiries not linked to a possible contract, our legitimate interest in replying to messages addressed to us — Art. 6(1)(f) GDPR.
  • Security and proper operation of the website, including protection of the contact form against spam — our legitimate interest in protecting the site and its users — Art. 6(1)(f) GDPR.
  • Compliance with legal obligations and defence of our rights, where necessary — Art. 6(1)(c) and 6(1)(f) GDPR.

We do not use your data for marketing, newsletters or profiling, and we do not sell it.

4. Providing your data

Name, email and message are needed to reply to you; without them we cannot handle your enquiry. Other fields are optional.

5. Recipients and processors

Your data is processed by authorised SESINF staff and by the following service providers acting as data processors under Art. 28 GDPR:

  • Cloudflare, Inc. — website hosting, content delivery and security, including the Turnstile security check on the contact form;
  • Resend, Inc. (United States) — delivery of contact form messages to our mailbox;
  • Google Ireland Limited (Google Workspace) — our business email service.

Data may also be disclosed to our lawyers and accountants, who are bound by professional confidentiality, or to public authorities where required by law.

6. Transfers outside the EU

Some of these providers may process data in the United States. Such transfers take place on the basis of the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the provider participates in it, or of the Standard Contractual Clauses adopted by the Commission.

7. Retention

  • Enquiries and related correspondence: for as long as needed to handle the enquiry and in any case no longer than 24 months from our last exchange. If a contractual relationship follows, related records are kept for 10 years as required by Italian law (Art. 2220 of the Civil Code).
  • Technical and security logs: for the limited period set by our hosting provider, generally no longer than 30 days.

8. Your rights

You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, and to data portability (Articles 15–22 GDPR).

To exercise your rights, write to info@sesinf.net.

9. Automated decision-making

We do not use your data for automated decision-making or profiling.

10. Right to lodge a complaint

If you believe your data is processed in breach of the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.

11. Changes to this policy

We may update this policy. The current version is always available on this page, with its date of last update.