Information about personal data
Version dated 28 October 2026. This notice covers browsing this website and data supplied through the contact form or email. The website presents services and solutions and does not offer online purchases, visitor accounts or subscriptions.
1. Controller and privacy contact
The controller is Kolibree-Tech S.r.l.s., a single-member company, Via Antonio Tempesta 244, 00176 Rome, Italy; tax and VAT number 17998701001; REA RM-1754800. For privacy questions and rights requests: info@kolibree-tech.com. No data protection officer (DPO) has been appointed: this is the company’s privacy contact, not a DPO address.
2. Data collected
The form collects your full name, email address, subject and message, together with an optional marketing choice. First and last name are entered in two separate mandatory inputs. Company and telephone number, including the country calling code, are optional and are used to handle your enquiry; the marketing choice concerns email only. Technical systems may process your IP address, date and time, requested URLs, browser information and data needed for security and email delivery. Do not include passwords, confidential documents, health data or other special categories of personal data in your initial message.
3. Enquiries and quotations
We use your data to reply and take precontractual steps at your request: Article 6(1)(b) GDPR. For professional correspondence unrelated to a contract and website security, we rely on our legitimate interests in managing communications and preventing abuse: Article 6(1)(f), with regard to your rights. Legal obligations rely on Article 6(1)(c). Required fields are needed to handle your enquiry; without essential information we may be unable to reply.
4. Newsletter and marketing: a separate choice
Only by selecting the optional checkbox do you consent to receive newsletters and commercial communications by email from Kolibree-Tech S.r.l.s. The legal basis is consent under Article 6(1)(a) GDPR and Article 130 of the Italian Privacy Code. The checkbox is not preselected; refusal does not affect our reply or services. You can withdraw consent free of charge at info@kolibree-tech.com without affecting prior lawful processing. Your choice, the wording version, page and submission date document the consent. No newsletter platform or CRM is connected, and no automatic subscription or mailing is triggered. This consent does not apply retrospectively to previously collected contacts.
5. Retention
Enquiries and quotation requests that do not lead to an engagement are retained for up to one year from collection. New newsletter/marketing data and consents are retained for up to 12 months from collection, or until earlier withdrawal. Information needed for contracts, accounting obligations or legal claims follows the relevant statutory periods, limited to what is necessary. Technical logs follow the hosting service’s rotation and retention cycles and any investigation of security incidents; applicable details are available from our privacy contact. Expired data is deleted or anonymised; backups are removed through their rotation cycles.
6. People and service providers with access
Data is handled by authorised company personnel and providers supporting our systems, within their assigned tasks. Aruba supplies hosting and email. Google provides reCAPTCHA to protect the form against spam; this service processes technical data and interaction signals to assess abuse risk and loads only following the consent choice described in the Cookie Policy. Contacts are not intended to be sold or disclosed for other organisations’ marketing, and messages are not published. Authorities or advisers may receive information where necessary for legal obligations or the protection of rights.
7. External services and transfers
reCAPTCHA may involve processing outside the European Economic Area. Google describes its service processing in its data processing addendum, including applicable transfer safeguards. Depending on the circumstances, transfers rely on adequacy decisions or standard contractual clauses and other GDPR safeguards. You can request information and a copy of the applicable safeguards from our privacy contact. External links lead to websites governed by their own notices.
8. Your rights
Subject to Articles 15–22 GDPR, you can request access, rectification, erasure, restriction and portability and object to processing based on legitimate interests. You may object to direct marketing and withdraw consent at any time. Contact info@kolibree-tech.com; we will reply within GDPR time limits. You may complain to the Italian Data Protection Authority or another competent authority. This website does not make solely automated decisions with legal or similarly significant effects; reCAPTCHA’s technical risk assessment protects the form.
9. Cookies and updates
Cookie and external-service choices are separate from newsletter consent. Read our Cookie Policy and manage preferences there or using the banner control. See also our Website Terms. We will update this notice when purposes, services or processing arrangements change.
Presentation requests and download records
For presentation requests we process first name, last name, email address, chosen document, source page and optional company/telephone details to respond to your enquiry about our services (Article 6(1)(b) GDPR). One email contains a private link valid for 24 hours and up to five file accesses, without an account. File-access dates and counts are recorded to deliver the requested material and prevent abuse (Article 6(1)(f), service security). A link is associated with the request but does not establish the identity of someone using a forwarded link; automated email-security checks can also access it. Requests without access expire after 24 hours; requests used to access files are retained for at most 12 months. Access events are retained for 30 days. Deletion runs on the scheduled cleanup and on site access. An optional, unselected checkbox permits approximate country, region and city estimation from the IP address in this browser (Article 6(1)(a), consent). This choice never affects access to the PDF and can be withdrawn using the button below. Estimation uses a local DB-IP database; visitor IP addresses are not sent to DB-IP and this feature does not store the full IP address or GPS coordinates. A consent preference cookie lasts 24 hours and consent does not transfer to another browser or a forwarded link. Location estimates can describe a provider or VPN and are not proof of a physical location. Data are encrypted, accessible only to authorised administrators and included in the WordPress personal-data export/erasure workflow. Email uses the existing Aruba service. Google reCAPTCHA is loaded only after its separate service consent. No newsletter consent or subscription follows from requesting a document. Contact info@kolibree-tech.com for rights or assistance.