Privacy Policy

Last updated: 20 October 2026 — version 3

1. Data controller

The data controller is Globalsider Srl, Via Campagna 5, 25030 Mairano (BS), Italy. VAT no. IT03280490172. Email: globalsider@globalsider.it — Phone: +39 030 99 75 506 — Certified email (PEC): globalsidersrl@pec.it. No Data Protection Officer (DPO) has been appointed, as the conditions of Art. 37 GDPR do not apply.

2. What data we collect

We process the data you voluntarily provide through the site's forms (name, company, email, phone, product of interest and request text; for a call-back request, only the phone number) and the data collected automatically while you browse. Specifically: (i) your IP address and technical logs are processed by the hosting provider and by the form's anti-spam system (Cloudflare Turnstile) to ensure the operation and security of the site, on the basis of legitimate interest (Art. 6.1.f GDPR), regardless of cookie consent; (ii) statistical data on device, browser and pages visited via Google Analytics 4 is processed only with your consent (Art. 6.1.a GDPR); (iii) with every request we record where the visit came from: the campaign, ad group and keyword written in the page address when you arrive from one of our ads or from a link with campaign parameters, or the name of the referring site (for example google.com or chatgpt.com), on the basis of our legitimate interest in knowing which channels generate enquiries (Art. 6.1.f GDPR); (iv) only with your consent to the Marketing category, the ad click identifier, which we store with your request and send to Google, and, in pseudonymised form, the email and phone typed into the form, sent to Google for conversion measurement (Art. 6.1.a GDPR).

3. Purposes and legal bases

• Responding to your requests for quotes or information. Legal basis: performance of pre-contractual measures at your request (Art. 6.1.b GDPR).
• Statistical analysis of the site via Google Analytics. Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.
• Security of the contact form and spam prevention via Cloudflare Turnstile. Legal basis: legitimate interest (Art. 6.1.f GDPR): site security and abuse prevention; you may object under Art. 21 GDPR.
• Hosting, operation and security of the site (technical logs and IP address processed by the hosting/CDN provider). Legal basis: legitimate interest (Art. 6.1.f GDPR); you may object under Art. 21 GDPR.
• Knowing which channel requests come from (ads, search engines, AI assistants, social networks, other sites). With every request we record the campaign, ad group and keyword read from the page address, or the referring site. Legal basis: legitimate interest in assessing the effectiveness of our contact channels, including for reporting on the work of the agency that manages them (Art. 6.1.f GDPR); you may object under Art. 21 GDPR.
• Advertising conversion measurement (Google Ads, enhanced conversions): with your consent to the Marketing category, the ad click identifier (which we also store with your request) and the email and phone typed into the form, in pseudonymised form (SHA-256 hash), are sent to Google to attribute the request to the click. Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time from "Cookie preferences".
• Confirmation email acknowledging receipt of your request, sent to the address you provided. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
• Legal obligations in tax and administrative matters, should a business relationship arise. Legal basis: legal obligation (Art. 6.1.c GDPR).

4. Suppliers and recipients (data processors)

To provide the service we use third-party suppliers that process the data on our behalf as data processors:

• Cloudflare, Inc. (United States) — site hosting, content delivery network (CDN) and anti-spam protection (Turnstile). For anti-spam verification it also processes the visitor's IP address.
• Resend, Inc. (United States) — sending the emails generated by the contact form; it may use sub-processors (e.g. Amazon Web Services) for message delivery.
• Google Ireland Ltd. (with Google LLC, United States) — browsing statistics (Google Analytics), interactive map (Google Maps) and advertising conversion measurement (Google Ads), activated only with your consent.
• The marketing agency appointed to manage the site, the advertising campaigns and the register of requests, which receives a copy of the requests sent from the site and keeps it in Google cloud services, as data processor.
• Advisors and professionals (e.g. accounting/tax firm) and, where required by law, competent authorities — for administrative, accounting and tax obligations.

For ordinary advertising measurement Google acts as an independent controller under its own terms; for the data sent in pseudonymised form with enhanced conversions it acts as our processor. If you choose to message us on WhatsApp, your messages are also processed by WhatsApp Ireland Ltd. under its own terms and privacy notice.

Some suppliers (Cloudflare, Inc. and Resend, Inc., based in the United States, and Google LLC on behalf of Google Ireland Ltd.) may process data outside the European Union. Such transfers are made to entities certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and/or on the basis of the Standard Contractual Clauses (EU decision 2021/914) supplemented by additional measures. You may request a copy of the safeguards adopted by writing to globalsider@globalsider.it.

5. Retention period

Data sent through the contact form is kept for as long as necessary to handle the request and, if a business relationship arises, for the periods required by law (generally 10 years for tax records). Enquiries that do not lead to a business relationship are kept for a maximum of 24 months. Statistical data is kept according to the Google Analytics data-retention settings (configured at 14 months). The register of requests kept by the agency follows the same periods. Advertising-measurement cookies last at most 90 days.

6. Your rights

As a data subject you may exercise at any time the rights provided for by Articles 15 to 22 of the GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise them, write to globalsider@globalsider.it. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. We will respond to your requests without undue delay and in any case within one month, extendable by two months in complex cases (Art. 12 GDPR). You also have the right to lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome; garanteprivacy.it).

7. Whether providing data is required

Providing the data marked as required in the contact form (for example company or name, email and description of the request; for a call-back request, the phone number) is necessary to act on your request; without it we cannot reply. The other fields are optional. Consent to statistics cookies, marketing cookies and third-party content is always optional and can be withdrawn.

8. Minors

The site and our services are aimed at professionals and businesses and are not intended for children under 14 (the threshold set by Art. 2-quinquies of Italian Legislative Decree 101/2018). We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us and we will delete it.

9. Automated decision-making

We do not carry out profiling or automated decision-making that produces legal effects concerning you or similarly significantly affects you.

10. Security measures

We adopt appropriate technical and organizational measures to protect data against unauthorized access, loss, destruction or disclosure: encrypted HTTPS/TLS connection across the whole site, form anti-spam protection, access to data restricted to authorized staff, and selected suppliers offering adequate guarantees under Art. 28 GDPR.

11. Cookies

For details on the cookies used and how to manage or withdraw consent, see our Cookie Policy. For the terms of use of the site, see the Terms of Use.

12. Changes to this notice

We may update this notice to reflect regulatory or organizational changes. The current version is always published on this page with the last-updated date shown at the top.

Manage cookie consent