Privacy policy

Last updated: 18 October 2026

1. Data controller

Thomas Fait, [INDIRIZZO], VAT no. [P.IVA], tax code [CODICE FISCALE]. Email: [EMAIL DI CONTATTO] · Certified email (PEC): [PEC].

2. What data we process

• Sign-up data: company name, first and last name, email, VAT number or tax code, registered address, SDI code or PEC.
• Sign-in data: email and password (stored only in hashed form, never readable), sign-in attempts.
• Technical data: IP address and browsing data logged by the server for security and to limit sign-in attempts.
• Payment data: amounts and dates of the bank transfers received. We do not process payment card data.

3. Why we process it and on what legal basis

• Creating the account, providing the software and support: performance of the contract (Art. 6(1)(b) GDPR).
• Issuing invoices and keeping the accounts: legal obligation (Art. 6(1)(c)).
• Protecting the service from unauthorised access and abuse: legitimate interest (Art. 6(1)(f)).

We do not use the data for advertising, we do not sell it and we do not profile you.

4. How long we keep it

For the whole duration of the contract. After termination the account data is deleted within 90 days, except the data needed for invoices and accounting, kept for 10 years as required by law. Technical sign-in data is kept for at most 12 months.

5. Who we share it with

With the providers we need to run the service, appointed as data processors: the hosting provider (servers and database), with servers in [PAESE DEI SERVER], and the email provider. With tax advisers for legal obligations. With authorities only when required by law.

If the servers are outside the European Union, the transfer takes place with the safeguards provided by the GDPR (adequacy decision or the European Commission's standard contractual clauses).

6. Cookies

The site only uses strictly necessary technical cookies: the sign-in session, the chosen language, the light/dark theme and a security cookie for forms. We do not use profiling cookies or third-party analytics, so no consent is needed. The full list is in the Cookie policy.

7. Your rights

You can at any time request access, rectification, erasure, restriction, portability of your data and object to processing (Arts. 15-22 GDPR) by writing to [EMAIL DI CONTATTO]. If you believe the processing is not lawful you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Data entered in the software

The data the customer enters in the software (for example guests, identity documents, bookings and payments) is processed by us on behalf of the customer, who is its controller, under the Data Processing Agreement.