Privacy Policy

This Privacy Policy describes the policies of Webcreation di Federico Bianco, Via Fiume 8, 10073 Ciriè (TO), Italy. VAT: IT07952130016. Email: info@webcreation.it · Phone: +39 348 9323674, regarding the collection, use, and disclosure of the information we collect when you use our website (https://webcreation.it/) (the "Service"). By accessing or using the Service, you consent to the collection, use, and disclosure of your information in accordance with this Privacy Policy. If you do not consent, please refrain from using the Service.

We may amend this Privacy Policy at any time without notice and will publish the updated version on the Service. The new Policy will become effective 180 days after publication on the Service, and your continued access or use of the Service after that period will constitute acceptance of the changes. We therefore recommend that you check this page periodically.

Data controller

Webcreation di Federico Bianco
Via Fiume 8, 10073 Ciriè (TO) — Italy
VAT: IT07952130016
Email: info@webcreation.it
Phone: +39 348 9323674

What data we collect

Depending on how you interact with the Service, we may collect the following categories of data:

• Data submitted via the contact form: full name, email address, phone number (optional), message content, any uploaded attachments (documents, images).
• Browsing data: IP address, browser user-agent, request timestamps, pages visited. Collected automatically by the server logs for security and abuse-prevention purposes.
• AI chat data: the content of conversations with the virtual assistant is sent to the language-model provider (OpenAI) to generate the response. No identifying data is collected through the chat.
• Analytics and cookies: with your consent, we use Google Analytics (technical and analytical cookies) to measure site usage. See the Cookie Policy.

Purposes and legal basis

We use the information we collect for the following purposes:

• Replying to contact requests — legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR).
• Customer support and administrative management of existing contractual relationships — legal basis: contract performance (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
• Service security and abuse/spam prevention — legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Anonymous statistical analysis via Google Analytics — legal basis: your consent, collected via the cookie banner (Art. 6(1)(a) GDPR).

If we wish to use your information for any other purpose, we will ask for your consent and will use the information only after receiving it, and only for the purposes for which it was granted, unless otherwise required by law.

Retention period

• Contact requests: maximum 24 months from the last contact, unless a contractual relationship is opened.
• Active client data: for the duration of the contract and afterwards for the period required by civil and tax law (10 years for accounting documents).
• Server logs: maximum 12 months.
• AI chat conversations: stored locally in your browser (localStorage), not server-side.

Recipients

Your data may be communicated to the following parties, each appointed as data processor where applicable:

• Hosting and email providers for the website.
• OpenAI Inc. (United States) — provider of the AI model used by the chat assistant.
• Google LLC (United States) — Google Analytics and Google Tag Manager (only with consent).
• CookieYes Limited (United Kingdom) — consent banner management.
• Consultants and professionals (accountant, legal advisor) for contractual and tax compliance.
• Public authorities, upon legitimate request and in compliance with applicable laws.

Data is not disclosed or sold to third parties for marketing purposes.

Transfers outside the European Union

Some of the service providers listed above (OpenAI, Google) are based in the United States of America. Data transfers occur on the basis of Standard Contractual Clauses approved by the European Commission and/or under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection pursuant to Articles 44-49 GDPR.

Your rights

Subject to applicable law, you have the right to access, rectify, or delete your personal data, receive a copy, restrict or object to processing, ask us to transfer your data to another party, withdraw consent previously given, lodge a complaint with the competent authority, and exercise other rights provided by applicable laws. To exercise these rights, you can contact us at info@webcreation.it. We will respond to your request in accordance with applicable laws, without undue delay and in any case within one month.

Please note that if you do not allow us to collect or process the requested personal information, or you withdraw consent for the necessary purposes, you may not be able to access or use the services for which such information is required.

Right to lodge a complaint

If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) via the official website www.garanteprivacy.it.

Automated decision-making and profiling

No automated decision-making processes, including profiling, that produce legal effects on the user or significantly affect them under Article 22 GDPR are in place. The chat assistant provides conversational answers but does not make decisions concerning you.

Cookies and similar technologies

For more information on the use of cookies and tracking technologies, please refer to our Cookie Policy.

Security

The security of your information is important to us, and we will adopt reasonable security measures to prevent loss, misuse, or unauthorized modification of information under our control. In particular: HTTPS encrypted connection across the entire site, hosting with restricted access, server-side input validation, anti-spam protection on the contact form. However, given the nature of the risks, we cannot guarantee absolute security and, therefore, we cannot guarantee the protection of information you transmit to us, which is at your own risk.

Data Controller / Privacy contact

For questions or concerns regarding the processing of your information, you can contact our privacy contact at:

Webcreation di Federico Bianco
Via Fiume 8, 10073 Ciriè (TO) — Italy
Email: info@webcreation.it
Phone: +39 348 9323674

We will address your requests in accordance with applicable laws.