Privacy Policy

1. Data Controller

Federico Palcich — Sardinia, Italy
Email: info@fezz.it

2. Data processed, purposes and legal bases

a) Contact form

If you fill in the form on the Contact page we process the data you provide: name, company, email, indicative budget and message. Purpose: replying to your enquiry and handling the pre-contractual phase. Legal basis: pre-contractual measures taken at your request (art. 6.1.b GDPR). Data is stored on the site's server and sent by email to the Controller through the SMTP provider Aruba S.p.A. (Italy). Retention: up to 24 months from last contact, unless a contract follows.

b) Analytics — Google Analytics 4 (consent only)

With your consent to the "Analytics" category we use Google Analytics 4 (Google Ireland Ltd.) to understand how the site is used: pages visited, source, device. The IP address is processed in truncated form. Without consent the service sends Google only anonymous, cookieless technical signals (Consent Mode v2). Legal basis: consent (art. 6.1.a GDPR). Data may be transferred to the USA under the EU-U.S. Data Privacy Framework. Info: policies.google.com/privacy

c) Analytics — Microsoft Clarity (consent only)

With consent to the "Analytics" category we use Microsoft Clarity (Microsoft Ireland Operations Ltd.) to analyse page interaction in aggregate form (heatmaps, anonymised session recordings). Legal basis: consent (art. 6.1.a GDPR). Info: privacy.microsoft.com

d) Marketing — Google Ads (consent only)

With consent to the "Marketing" category we use Google Ads conversion tracking (Google Ireland Ltd.) to measure the effectiveness of our advertising campaigns. Legal basis: consent (art. 6.1.a GDPR).

e) Technical logs and security

The server keeps technical logs (IP addresses, requests) required for the operation and security of the site. Legal basis: legitimate interest (art. 6.1.f GDPR). Retained only for the technically necessary time.

f) Consent records

When you make a choice in the cookie banner we store an anonymous record (date, policy version, chosen categories) as proof of consent. The record contains no IP address and no personal identifiers.

3. Linked external services

The site links to Calendly (call booking) and embeds images from CDNs (Unsplash, jsDelivr). When you follow external links, the respective controllers' policies apply. Booking on Calendly happens on Calendly LLC's site under its own privacy policy.

4. Recipients

Data may be processed by technical suppliers acting as processors: the site's hosting provider, Aruba S.p.A. (email), Google Ireland Ltd. and Microsoft Ireland Operations Ltd. (only with consent to the respective categories). No data is sold or shared with third parties for their own purposes.

5. Your rights

Under arts. 15-22 GDPR you have the right to: access your data, rectify it, erase it, restrict its processing, object to processing, receive it in portable format, and withdraw any consent at any time (via the "Cookie preferences" link in the footer for cookies, or by writing to the Controller). You may lodge a complaint with the Italian supervisory authority, Garante per la Protezione dei Dati Personali (garanteprivacy.it).

6. Cookies

For details on the cookies used see the Cookie Policy.