Privacy Policy

1. Data Controller

Tabata S.r.l.
Registered office: Via Cupa dell'Antica 5, 84099 San Cipriano Picentino (SA), Italy
VAT no.: 05584590656
Email: gdpr@tabatatech.it
Web: www.tabatatech.it

2. Data collected

Browsing data

The IT systems that operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (IP address, browser type, operating system, pages visited, access time).

This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct operation. The data is deleted after 90 days.

Data provided voluntarily

Sending messages through the contact form or to the Controller's email address entails the acquisition of the sender's contact details (name, email, optional phone number) and the content of the message, necessary to respond to the request.

Cookies

This site uses:

• Technical cookies (necessary): essential for the operation of the site. They do not require consent.
• Analytics cookies (statistical): used to collect aggregated and anonymous information on the use of the site. They require the user's consent.

We do not use profiling cookies. We do not sell data to third parties. On first access to the site a banner is available to manage cookie preferences. Users can change their choices at any time. For details, see the Cookie Policy.

3. Purposes and legal bases of processing

Purpose	Legal basis
Technical operation of the site	Legitimate interest of the Controller (Art. 6.1.f)
Responding to contact requests	Performance of pre-contractual measures (Art. 6.1.b)
Usage statistics	User's consent (Art. 6.1.a)

4. Data recipients

Personal data may be processed by:

• AWS (Amazon Web Services) — website hosting, infrastructure in the EU region (Ireland/Milan). DPA in place.

Data is not disclosed, sold or communicated to third parties for their own purposes.

5. Transfer of data outside the EU

The site is hosted on AWS infrastructure in the EU region. Users' personal data is not transferred outside the European Economic Area.

The CDN service (CloudFront) may distribute static content (HTML pages, images, CSS) through servers in Europe and North America. No personal data is stored in the edge locations.

6. Retention period

Data	Retention
Browsing data (server logs)	90 days
Contact form data	24 months from last contact
Analytics cookies	14 months
Technical cookies	Session duration

At the end of the retention period, data is deleted automatically.

7. Rights of the data subject

Users may exercise the following GDPR rights at any time:

• Access (Art. 15) — obtain confirmation of processing and a copy of their data
• Rectification (Art. 16) — correct inaccurate or incomplete data
• Erasure (Art. 17) — request the deletion of their data
• Restriction (Art. 18) — restrict processing in certain circumstances
• Portability (Art. 20) — receive data in a structured, machine-readable format
• Objection (Art. 21) — object to processing based on legitimate interest
• Withdrawal of consent — at any time, without affecting processing carried out before withdrawal

To exercise your rights, send a request to: gdpr@tabatatech.it. We will reply within 30 days of receiving the request.

8. Complaint to the Supervisory Authority

Users have the right to lodge a complaint with the Italian Data Protection Authority:

Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
www.garanteprivacy.it
Email: protocollo@gpdp.it — PEC: protocollo@pec.gpdp.it

9. Changes

The Controller reserves the right to amend this policy to comply with applicable law or changes to the services offered. Changes will be published on this page with the date of update. We recommend checking this page periodically.

Tabata S.r.l. — VAT no. 05584590656