Privacy policy

The controller is Codedesign S.r.l., Via Nino Pesce 38, 18018 Taggia (IM), Italy, VAT number IT01739830089.

You can contact us by email at info@codedesign.it, by certified email (PEC) at codedesign@legalmail.it, or by phone at +39 0184 716 626.

Contact form

When you write to us through the contact form, we process the data you provide: name, company, role, email address, phone number, the topic you select and the text of your message. Fields marked as optional can be left blank. The website sends this data by email to our mailbox through the Twilio SendGrid email service; the mailbox is hosted on Microsoft 365. The website does not keep a copy of the message.

Email and phone

If you write to us by email or call us, we process your contact details and what you tell us, for the same purposes.

Website statistics

We measure visits to the website with Umami, a statistics tool that we install and manage ourselves, on our own server at Hetzner Online GmbH in Germany. Umami uses no cookies and stores nothing in your browser. It records the page address, the referring page, the language, the screen size and the type of browser, operating system and device. The server receives your IP address and uses it, without saving it, for two purposes only: deriving your approximate location (country, region and city) and calculating a visit code, which changes every month and from which the IP address cannot be traced back. Only aggregate data and visit codes that cannot be linked to you are kept. Umami does not follow you across other websites, does not create profiles and does not share data with third parties; if your browser sends the “Do Not Track” signal, no statistics are collected.

Google Analytics, only with your consent

If you accept statistics in the cookie banner, the website loads Google Analytics 4, which stores cookies with a random identifier in your browser and sends Google the pages you visit, the events we measure, information about your device and browser, and the referring page. For visitors in the European Union, Google states that it uses the IP address only to derive an approximate location and discards it without logging it. Google Signals and ad personalisation are turned off. Until you accept, and if you refuse, no Google software is loaded and no data is sent to Google.

Running the server

The website runs on our own server at Hetzner Online GmbH, in Germany. To show you the pages the server receives, like any web server, your IP address and the technical data of the request, but we keep no log of visits. The server keeps only technical messages about how the website is running, in a fixed-size space, automatically overwritten as new ones are added.

• Answering your request, and taking the steps you ask for before a possible contract: Article 6(1)(b) GDPR.
• Following up on your request and managing our relationship with you and your company: our legitimate interest, Article 6(1)(f) GDPR.
• Showing you the website and protecting it, including the server's technical messages: our legitimate interest, Article 6(1)(f) GDPR.
• Understanding how the website is used with cookieless Umami statistics: our legitimate interest in improving it, Article 6(1)(f) GDPR. You can object at any time by writing to us or by turning on the “Do Not Track” signal in your browser.
• Measuring in more detail how the website is used with Google Analytics: only with your consent, Article 6(1)(a) GDPR and Article 122 of the Italian Personal Data Protection Code (Legislative Decree 196/2003). You can withdraw it at any time from “Cookie preferences”, at the bottom of every page.

We do not use your data for purposes other than those listed here.

Providing your data is optional. Without the required fields of the form, however, we cannot reply to you.

We keep the data of a contact request for the time needed to handle the request and any follow-up, and in any case for no longer than 24 months from our last exchange, unless a contract follows. If a contract follows, the data is kept for the duration of the contract and for as long as the law requires afterwards.

We keep no log of visits; the server's technical messages are overwritten automatically as new ones are added. We keep Umami statistics data for 24 months, then delete it automatically.

Google Analytics user-level and event-level data is deleted by Google after 14 months; aggregate reports may remain available for longer.

Your data is processed by our staff, who are authorised and bound to confidentiality.

It is also processed on our behalf by these providers, acting as data processors under Article 28 GDPR: Hetzner Online GmbH, Germany, for the server of the website and of the Umami statistics (Nuremberg); Twilio Inc., United States, with the Twilio SendGrid service, for sending the emails of the contact form (United States); Microsoft Ireland Operations Limited, Ireland, Microsoft Corporation group, for the Microsoft 365 mailbox where we receive the messages (European Union; the provider's support may also take place outside the Union).

Only if you accept Google Analytics, statistics data is processed on our behalf by Google Ireland Limited, acting as a data processor.

We do not sell your data, and we do not share it with third parties for their own purposes.

The website and the Umami statistics run in Germany. Some processing, however, involves a transfer of data to the United States: sending the emails of the contact form (Twilio SendGrid), any technical support from Microsoft on the mailbox and, only if you accept Google Analytics, the statistics of Google LLC. Transfers to Twilio Inc., Microsoft Corporation and Google LLC rely on the EU-US Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023, under which these companies are certified. You can check it at dataprivacyframework.gov (external link).

We do not make decisions based solely on automated processing, including profiling.

Under Articles 15 to 22 GDPR you have the right to:

• access your personal data and obtain a copy of it;
• have inaccurate data corrected and incomplete data completed;
• have your data erased, where the conditions of Article 17 apply;
• restrict the processing of your data;
• receive your data in a structured, commonly used and machine-readable format, and have it transmitted to another controller;
• object at any time to processing based on our legitimate interest;
• withdraw your consent to Google Analytics at any time from “Cookie preferences”, at the bottom of every page, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to info@codedesign.it or to codedesign@legalmail.it. We reply without undue delay, and in any case within one month of receiving the request, as the GDPR requires.

If you believe that your data is processed unlawfully, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (external link), or with the supervisory authority of the EU country where you live or work, or where the alleged infringement took place.

This website uses technical cookies and, only with your consent, Google Analytics cookies. The details, and how to change your choice, are in the cookie policy.

We may update this policy. The date at the top of the page shows when it was last changed.