1. Data controller
Via Pietro Spino 23B, 24126 Bergamo (BG), Italy
VAT IT 04579200165
Email: privacy@andsoftware.it
This notice describes the processing of personal data on andsoftware.it pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
Through the contact form we collect the data you freely choose to provide: full name, company (optional), email address and message content. For security and abuse-prevention purposes (spam, automated attacks) we also record the IP address and browser user-agent at submission time.
Technical cookies: the site uses a session cookie (PHPSESSID) for CSRF protection on forms and a language preference cookie (lang) to remember your choice between Italian and English. A third technical cookie (cookie_notice) records the dismissal of this notice.
We do not use profiling cookies, analytics tools, tracking pixels, social plugins, marketing services or third-party tracking cookies. We do not monitor user navigation.
Data collected through the contact form is used solely to respond to your request and, where appropriate, for the subsequent establishment of a potential contractual relationship. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in site security and abuse prevention).
Messages received through the contact form are retained for a maximum of 24 months from receipt, unless the conversation evolves into a contractual relationship (in which case contractual terms and legal obligations apply). IP addresses and user-agents associated with submissions are retained for a maximum of 12 months for security purposes.
Data is not disclosed or sold to third parties. It may be processed by technical suppliers (hosting) based in the European Union, appointed as data processors pursuant to Art. 28 GDPR.
The site does not load resources from external CDNs or third-party services: all fonts, styles, scripts and images are hosted directly on our server. No personal data or browsing data is transferred outside the EU.
At any time you may exercise the rights granted by Articles 15-22 GDPR: access to your data, rectification, erasure, restriction of processing, objection, portability. To exercise these rights write to privacy@andsoftware.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
This policy may be updated over time. Changes are published on this page with the date of update.