Privacy Policy

Data controller

The data controller is Sundata, a business unit of ITCARMAT S.r.l., with registered office at Ex SS131 Km 10.500, 09028 Sestu (CA), Italy, VAT IT03296740925. For any request regarding your data you can write to info@sundata.it.

What data we process

Data you provide through the site forms (contact form and configurator): full name, company, email, phone, any message and, in the case of the configurator, the requested Cloud configuration.

Browsing data automatically collected by the infrastructure that delivers the site (e.g. IP address, date and time of the request, technical logs), necessary for operation and security.

Purposes and legal bases

To respond to and follow up on your contact or quote requests: performance of pre-contractual measures at your request (Art. 6.1.b GDPR) and/or consent (Art. 6.1.a GDPR), given by ticking the relevant box in the forms.

To ensure the operation, security and correct delivery of the site: legitimate interest of the controller (Art. 6.1.f GDPR).

Recipients and tools

Hosting and CDN: the site is hosted on Cloudflare, which handles delivery and security and runs the function that processes form submissions.

Request notifications: requests sent through the forms reach us via Slack, in an internal channel monitored by our team.

Fonts: the site loads typefaces via Google Fonts; loading them entails communicating your IP address to Google, without installing cookies.

We carry out no profiling, use no advertising tools or third-party analytics, and do not sell your data.

Transfers outside the EU

Some providers (Cloudflare, Slack, Google) may process data outside the European Union. In such cases the transfer takes place on the basis of adequate safeguards provided for by the GDPR, such as the EU Commission’s Standard Contractual Clauses and/or adherence to the EU-US Data Privacy Framework.

Data retention

We keep the data provided through the forms for the time necessary to handle your request and related obligations; afterwards it is deleted or anonymised, unless other legal obligations apply. Technical logs are kept for limited periods for security purposes.

Your rights

You have the right to access your data and obtain its rectification or erasure, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting the lawfulness of processing based on consent before withdrawal).

To exercise your rights write to info@sundata.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it).