Privacy and cookie notice

Data controller

The controller of the data collected through this site is:

For any request about your data, write to [email protected].

What this notice covers

This notice covers only the Mail Monitor showcase site, that is, the pages you are reading.

Sign-up and the Mail Monitor application live at a different address (mailmonitor.instanthelp.it) and have their own notice: the data you enter there is processed under that document, not this one.

Contact form

When you write to us through the contact form we collect your name, email address, company (if you give it) and the text of your message, plus the language of the page you wrote from.

We use this data only to answer your request. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for requests unrelated to a possible contract, our legitimate interest in replying to those who write to us (Art. 6(1)(f)).

Filling in the form is optional, but without a name, an email address and a message we cannot reply.

The site has no storage of its own: the message is delivered to our mailbox and stays there. We keep it for 24 months from the last exchange and then delete it, unless a contractual relationship has started in the meantime that requires keeping it longer.

We do not use this data for newsletters or marketing, we do no profiling and we make no automated decisions.

Anti-spam protection (Cloudflare Turnstile)

The form is protected by Cloudflare Turnstile, a service that checks that a submission comes from a person and not from an automated program. Turnstile is loaded only when you get close to the contact form, not when the page opens.

To run the check Turnstile analyses some technical data about your browser and device, and your IP address. It uses no profiling cookies and the data is not used for advertising. The legal basis is our legitimate interest in protecting the form from abuse and spam (Art. 6(1)(f) GDPR).

Browsing data and hosting

The site is hosted on Cloudflare’s infrastructure. Like any web server, in order to deliver the pages and defend the site from attacks Cloudflare processes the IP address, the browser type, the date and time of the request and the page requested. We do not use this data to identify you. The legal basis is the legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

Visit statistics (Google Analytics 4)

Only if you consent through the banner do we use Google Analytics 4, a service of Google Ireland Limited, which provides it as our data processor, to learn in aggregate form how many people visit the site, which pages they read and where they come from. Until you accept, no Google Analytics code is loaded and no measurement cookie is written.

With consent the following is collected: pages viewed, scrolling, clicks on outbound links and on sign-up buttons, the fact that the contact form was sent (never its content), device and browser type, language, and an approximate location derived from the IP address, which Google Analytics 4 neither logs nor stores.

We have turned off every advertising use: the Consent Mode signals for ads, ad user data and ad personalisation always stay denied. User-level and event-level data is retained by Google Analytics for 2 months.

The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time.

Cookies and local storage

The site uses no profiling cookies and writes no cookie without your consent. The table lists everything the site saves in your browser. The technical values in local storage (localStorage) need no consent and are not sent to anyone.

Changing your mind about cookies

At the bottom of every page there is a “Cookie preferences” button: it reopens the banner and lets you accept or reject again. If you reject after having accepted, the site immediately stops sending data to Google Analytics and deletes the _ga cookies from your browser.

You can also delete or block cookies from your browser settings. Your choice lasts 6 months, then the banner asks again.

Who receives the data

The data is processed by us and by the suppliers we need to run the site, appointed as data processors:

• Cloudflare, Inc.: site hosting, including the function that receives the contact form and hands it to our mail server, and anti-spam protection of the form (Turnstile).
• Google Ireland Limited: visit statistics with Google Analytics 4, only if you consent.
• The provider of our mail service, which delivers the contact form messages to our mailbox and stores them.

Transfers outside the European Union

Cloudflare may also process data in the United States. It takes part in the EU-U.S. Data Privacy Framework, which the European Commission recognised as adequate in its decision of 10 July 2023, and additionally applies the standard contractual clauses approved by the Commission.

The same goes for Google, for the data collected with Google Analytics: it takes part in the same Framework and applies the same clauses.

Your rights

You have the right to ask us for access to your data, rectification, erasure, restriction of processing and portability, and to object to processing based on legitimate interest (Articles 15 to 22 GDPR). Where processing is based on consent you can withdraw it at any time, without affecting what happened before.

To exercise these rights, write to the address given under “Data controller”. We reply within one month.

Complaints

If you believe the processing of your data breaches the law you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU member state where you live or work.

Changes to this notice

If the way we process data changes, we update this page and the date at the top.