Privacy Policy & Personal Data Processing

The Data Controller is Dynamic-Web Srls (Simplified Limited Liability Company), with registered office at Via Beziera 17/0 – 42122 Reggio nell'Emilia (RE), Italy.
• Tax Code & VAT ID (C.F. / P.IVA): 03034040356
• Companies Register: Chamber of Commerce of Emilia (Reggio Emilia Office) • REA Number: RE - 352223
• Share Capital (Capitale Sociale): € 500.00 fully paid-up (i.v.) • Company not in liquidation
• Certified Email (PEC): dynamicwebsrls@pec.it
• Privacy & Support Email: dynamicwebagency@gmail.com
The Data Controller guarantees that all personal data is processed in strict compliance with the fundamental rights, freedoms, and dignity of the data subject, specifically concerning confidentiality, personal identity, and the right to personal data protection.

We process solely the categories of personal data strictly necessary and proportional to the purposes pursued (data minimisation principle under Art. 5.1.c GDPR):
• Technical browsing data and server logs: IT systems operating this website collect certain data whose transmission is implicit in Internet communication protocols. This includes anonymized/pseudonymized IP addresses, browser specifications, requested URI/URL endpoints, request timestamps, server response status codes, and packet transfer metrics generated by Netlify edge routing.
• Voluntarily submitted data: The intentional submission of inquiries via contact forms, electronic mail, or WhatsApp instant messaging entails the collection of the sender's email address, telephone number, and any business details provided to request project estimates or B2B advisory services.
• Silkbar CMP consent preferences: Records of user cookie preferences stored locally on the user's terminal (Web Storage) with ISO 8601 timestamps.

Personal data is processed strictly for explicit and lawful purposes based on valid legal grounds under Article 6 of the GDPR:
1. Performance of pre-contractual and contractual measures (Art. 6.1.b GDPR): Managing requests for technical proposals, tailored quotes, website audits, commercial communication, and fulfillment of professional service agreements.
2. Compliance with legal and statutory obligations (Art. 6.1.c GDPR): Fulfilling tax, fiscal, and corporate reporting requirements under Italian and European law (Art. 2250 Italian Civil Code).
3. Digital perimeter security and Legitimate Interest (Art. 6.1.f GDPR): Safeguarding the website against unauthorized access, DDoS attacks, injection exploits, and verifying liabilities in case of cyber offenses.
4. Optional cookie and preferences management (Art. 6.1.a GDPR): Strictly conditioned on the informed, explicit, and granular consent granted by the user via the Silkbar CMP banner for non-essential categories.

This website is hosted on the global edge distribution network of Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, California 94104, USA), acting as Data Processor pursuant to Art. 28 GDPR under a binding Data Processing Agreement (DPA).
• Infrastructure Security: Netlify enforces industry-grade physical and logical safeguards, including universal TLS 1.3 encryption in transit, SOC 2 Type II and ISO 27001 certifications, DDoS mitigation, and distributed Anycast routing.
• International Transfer Safeguards: Any technical routing of network packets to United States data centers is fully legitimized by the European Commission Adequacy Decision for the EU-U.S. Data Privacy Framework (DPF) of July 10, 2023, under which Netlify is actively certified. Complementarily, transfers are governed by the Standard Contractual Clauses (SCC) adopted by European Commission Implementing adopted by European Commission Implementing Decision (EU) 2021/914 pursuant to Art. 46.2.c GDPR, reinforced by supplementary technical security measures.
• DPF-Certified Third-Party Providers: Google Ireland Limited / Google LLC (Google Fonts) is certified under the EU-U.S. Data Privacy Framework (DPF). Meta Platforms Ireland Limited applies Standard Contractual Clauses (SCC) approved by the European Commission for communications over the WhatsApp platform.

Personal data is retained in accordance with the principle of storage limitation (Art. 5.1.e GDPR):
• Browsing data and edge network logs: Retained for the strictly necessary operational duration (generally deleted or aggregated anonymously within 30 days by Netlify edge servers).
• Commercial inquiries and pre-contractual records: Stored for the time required to manage the request and for up to 24 months from the latest contact to ensure commercial continuity.
• Contractual and accounting records: Mandatory retention for 10 years following contract termination pursuant to Art. 2220 of the Italian Civil Code and tax regulations.
• Silkbar CMP consent status: Stored in the user's localStorage for a maximum duration of 12 months, unless cleared or revoked earlier by the user.

Pursuant to Articles 15 to 22 of Regulation (EU) 2016/679, data subjects are entitled to exercise the following rights at any time, free of charge:
• Right of Access (Art. 15): Obtain confirmation as to whether personal data is being processed and obtain a copy thereof;
• Right to Rectification (Art. 16): Request correction or completion of inaccurate data;
• Right to Erasure / To Be Forgotten (Art. 17): Request deletion of data where legal grounds cease to apply or consent is withdrawn;
• Right to Restriction of Processing (Art. 18): Request temporary freezing of data under contested grounds;
• Right to Data Portability (Art. 20): Receive personal data in a structured, commonly used, machine-readable format;
• Right to Object (Art. 21): Object at any time to processing predicated on legitimate interest;
• Withdrawal of Consent (Art. 7.3): Freely withdraw consent at any time via the Silkbar CMP banner or by email.

Inquiries may be directed in writing to dynamicwebagency@gmail.com or via PEC to dynamicwebsrls@pec.it. The Controller shall respond within 30 days of receipt.

Without prejudice to any other administrative or judicial remedy, data subjects who consider that the processing of personal data relating to them infringes Regulation (EU) 2016/679 have the right to lodge a formal complaint with the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali):
• Headquarters: Piazza Venezia n. 11 – 00187 Rome (RM), Italy
• Switchboard: (+39) 06.696771 • PEC: protocollo@pec.gpdp.it
• Official Website: https://www.garanteprivacy.it
Data subjects residing in another EU Member State may alternatively lodge a complaint with their local competent supervisory authority.

Dynamic-Web Srls implements technical and organisational safeguards pursuant to Art. 32 GDPR, including TLS 1.3 encryption, strict Content Security Policy (CSP), HTTP security headers, and edge-level firewalling on Netlify.
The Controller expressly confirms that no automated decision-making processes or behavioral user profiling under Art. 22 GDPR are conducted on this website.