Privacy policy

1. Data controller

The controller of the data collected through the Site is inCloud s.r.l., Via Unità d'Italia 135, 41058 Vignola (MO), Italy. For any matter concerning personal data you may write to privacy@incloud.srl or, through certified electronic mail, to incloud@pec.it. Data Protection Officer (DPO): Melis Salvatorangelo, dpo@incloud.srl.

2. Data processed and purposes

The Site processes only the data indicated below.

Contact form

First name and surname, email address and message are mandatory; company and telephone number are optional. They are used solely to reply to the request received. The data are not saved in any database of the Site: they are sent by electronic mail to the company address info@incloud.srl and remain in the controller's mailbox. A confirmation copy is sent to the address indicated by the person who filled in the form.

Technical and preference cookies

The Site uses a session cookie necessary for its operation, a cookie that records the preferences expressed about cookies (privacy_consent, duration 365 days) and a cookie that remembers the language chosen (lingua, duration 365 days). None of these cookies serves to profile users or to follow them across other sites.

Browsing data

The servers record accesses to the Site with IP address, date and time, page requested and browser type, as happens with any web service. They serve to ensure the operation and the security of the Site and are not used to identify users.

The Site does not use statistics or analytics tools, contains no advertising tracking pixels and does not profile visitors.

3. Legal bases

The processing of the contact form data is based on the performance of pre-contractual measures requested by the data subject (Art. 6.1.b GDPR). Technical cookies and security logs are based on the legitimate interest of the controller in the operation and the protection of the Site (Art. 6.1.f). The loading of the map and of the other third-party content described in point 5 takes place only with the prior consent of the data subject (Art. 6.1.a), which may be withdrawn at any time from the preferences panel reachable from the icon at the bottom of the page.

4. Retention

Messages received through the contact form are kept for the time necessary to handle the request and any relations arising from it, and in any case for no longer than 24 months from the last contact, save for different legal obligations. Server logs are kept for a limited period for security purposes. Cookies have the duration indicated in point 2 and may be deleted at any time from the browser settings.

5. Recipients and third-party services

The data are processed by the controller's authorised personnel and are not transferred to third parties for marketing purposes. The following providers are involved in the operation of the Site and may come to know the IP address of those who browse it.

Cloudflare

Distribution and protection network placed in front of the Site. It receives the IP address of every request.

Google Fonts

The typefaces of the Site are requested from the servers fonts.googleapis.com and fonts.gstatic.com, which receive the visitor's IP address.

jsDelivr

Distribution network from which the Site loads the Bootstrap graphic library. It receives the visitor's IP address.

Google Maps

The map of the office is provided by Google. It is NOT loaded automatically: a placeholder appears in its place, and the map is requested only after explicit consent or a click on the relevant button.

Google reCAPTCHA

The contact form is protected by Google's reCAPTCHA v3 anti-spam service, which receives the IP address and some data about the interaction with the page in order to tell human requests from automated ones. It requires no action from the user and is not used to profile visitors or for advertising purposes. It is loaded only on the pages that contain the form.

The providers indicated above may also process data outside the European Union, on the basis of the safeguards provided for by Chapter V of the GDPR. Their respective notices may be consulted on their own websites.

6. Security

The Site is reachable exclusively through an encrypted connection (HTTPS/TLS) and requests in clear text are redirected. The contact form is protected against automated submission. Access to the systems is reserved to authorised personnel.

7. Rights of the data subject

The data subject may exercise at any time the rights of access, rectification, erasure, restriction, objection and portability provided for by Articles 15-22 of the GDPR, by writing to privacy@incloud.srl. It is also possible to withdraw at any time the consents given, without this prejudicing the lawfulness of the processing carried out before the withdrawal, and to lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority, www.garanteprivacy.it).

8. The EDILinCloud management application

This notice concerns the showcase site alone. The management application, reachable at the address back.edilcloud.org, is a separate service and follows a different allocation of roles: for the employment relationship data of employees (clock-ins, hours, holidays, leave, sickness, geolocation) and for the management data, the data controller is the client company that signed the contract, while inCloud s.r.l. acts as data processor pursuant to Art. 28 GDPR. Those who use the management application as employees must address their own company in order to exercise their rights; inCloud s.r.l. assists the company in its capacity as processor.

9. Changes

This notice may be updated. The version in force is always available at this address, with the date of the last update indicated at the top of the document.