Privacy Policy
Last updated: 15/10/2026
This privacy policy describes how the personal data of users who visit or interact with the website webminds.net is processed, pursuant to Article 13 of Regulation (EU) 2016/679 (the «GDPR») and applicable Italian law.
1. Data Controller
The Data Controller is Web Minds di Tosello Simone (sole proprietorship), with registered office at Via Walter Tobagi 22, 20010 Bernate Ticino (MI), Italy.
- VAT no.: 13121170966
- Tax code: TSLSMN95P18E801B
- Contact email: [email protected]
For any request regarding the processing of your personal data, you may write to the email address above.
2. Types of data collected
2.1 Data provided voluntarily
By using the contact form on the website, you voluntarily provide us with the following data: name, email address and the content of your message. This data is necessary to respond to your request.
2.2 Navigation data and cookies
During browsing, the IT systems and software procedures used to operate the website acquire certain data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, browser and device information). The website also uses cookies and similar technologies, described in detail in the Cookie Policy.
3. Purposes and legal basis of processing
| Purpose | Data processed | Legal basis |
|---|---|---|
| Responding to requests sent through the contact form | Name, email, message | Pre-contractual measures and legitimate interest (Art. 6.1 (b) and (f) GDPR) |
| Aggregate statistics on website usage (Google Analytics 4) | Cookie identifiers, navigation data, device information | Consent of the data subject (Art. 6.1 (a) GDPR) |
| Measuring advertising campaign conversions (Google Ads) | Cookie identifiers, navigation data | Consent of the data subject (Art. 6.1 (a) GDPR) |
| Ensuring the security and proper functioning of the website | Navigation data (logs, IP address) | Legitimate interest of the Controller (Art. 6.1 (f) GDPR) |
4. Method of processing
Data is processed using IT and electronic tools, adopting appropriate technical and organisational security measures to prevent its loss, unlawful or incorrect use and unauthorised access. Processing is carried out by the Controller and, where necessary, by the external processors listed in section 5.
5. Recipients and external processors
To provide the service, the Controller relies on third-party providers acting as data processors pursuant to Article 28 GDPR:
- Cloudflare, Inc. — website hosting (Cloudflare Pages), routing of emails sent through the contact form (Email Routing) and security and network services (CDN), including the Turnstile anti-bot service protecting the contact form. Policy: cloudflare.com/privacypolicy.
- Google Ireland Ltd / Google LLC — Google Ads (conversion measurement), Google Analytics 4 (website usage statistics) and Gmail (receiving the emails generated by the contact form). Policy: policies.google.com/privacy.
Data is neither disclosed nor transferred to third parties for purposes other than those indicated in this policy.
6. Transfer of data outside the EU
Some of the providers listed above (Cloudflare and Google) may also process data in countries outside the European Economic Area, in particular the United States. In such cases, the transfer takes place on the basis of adequate safeguards pursuant to Articles 44 et seq. of the GDPR, such as the Standard Contractual Clauses approved by the European Commission and, where applicable, adherence to the EU-US Data Privacy Framework.
7. Data retention period
- Contact form data: kept for the time strictly necessary to handle the request and any resulting contact, as well as for any period required by legal obligations, after which it is deleted.
- Navigation data and technical logs: kept for the technical time strictly necessary to ensure the security and proper functioning of the website, in line with the log retention periods of the hosting provider (Cloudflare), after which they are deleted or anonymised.
- Marketing and statistical data: kept for the duration of the relevant cookies indicated in the Cookie Policy, or until consent is withdrawn.
8. Rights of the data subject
As a data subject, pursuant to Articles 15-22 of the GDPR, you have the right to:
- access your personal data and obtain a copy of it;
- request its rectification or update;
- request its erasure («right to be forgotten»);
- request the restriction of processing;
- object to processing based on legitimate interest;
- receive your data in a structured format (portability);
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
You can exercise these rights by writing to [email protected]. You also have the right to lodge a complaint with the supervisory authority, namely the Italian Data Protection Authority (garanteprivacy.it).
9. Cookies
The website uses technical cookies and, subject to consent, statistics and marketing cookies. For detailed information on the cookies used and how to manage your preferences, see the Cookie Policy.
10. Changes to this policy
The Controller reserves the right to modify or update this policy, including as a result of regulatory changes. Changes will be published on this page together with the date of the last update.
Last updated: 15/10/2026 — Web Minds di Tosello Simone, VAT no. 13121170966.