This notice explains how IoThinKs Engineering s.r.l. processes the personal data of people who visit iothinks.it or write to us, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
1. Data controller
IoThinKs Engineering s.r.l.
Operational headquarters: Via Amedeo Modigliani 32i, 56012 Vicopisano (PI), Italy
VAT ID IT02588020509
Email info@iothinks.it · PEC iothinks@pec.it · Phone +39 050 0988284
2. What data we process
Browsing data
Like any website, the server records some technical data about requests: IP address, date and time, requested page, browser type. We need it to run the site and protect it from abuse; we do not use it to identify or profile visitors.
Data you send through the contact form
Full name, email and message (required); company and phone (optional). We also record the language and the page the message was sent from. The message is stored on the website and emailed to our company mailbox.
To stop spam we use an automatic check (ALTCHA) that runs in your browser and on our server, with no third-party services. To limit repeated submissions we keep, for 15 minutes, a non-reversible code derived from your IP address.
Data you send by email or phone
If you contact us directly, we process the data you choose to give us in order to reply.
3. Why we process it and on what legal basis
- Replying to your requests and, if you ask, preparing a quote: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and the consent you give when submitting the form (Art. 6(1)(a)).
- Website security and operation, including spam prevention: our legitimate interest (Art. 6(1)(f)).
- Legal obligations, if a business relationship follows (e.g. tax): Art. 6(1)(c).
We do not use your data for marketing or profiling, and we make no automated decisions about you.
4. How long we keep it
- Messages and requests: as long as needed to handle them and any relationship that follows, and in any case no longer than 24 months after the last contact if no relationship follows.
- Browsing data: only as long as strictly needed for website security, unless required to establish an offence.
- Contract-related data: for the period required by law (usually 10 years).
5. Who can see it
Our authorised staff and the providers we need to run the website and email (server and email service), appointed as data processors. We do not sell or disclose the data. Should a provider process it outside the European Economic Area, the transfer would take place with the safeguards required by the GDPR (Art. 44 et seq.).
6. Cookies
The website only uses technical cookies. Details are in the Cookie Policy.
7. Your rights
You can ask us at any time to access, correct or delete your data, restrict its processing, receive it in a portable format or object to its processing (Arts. 15–22 GDPR). If you gave consent, you can withdraw it without affecting processing already carried out. Write to info@iothinks.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
8. Changes
We may update this notice; the current version is always on this page. Last updated: 30 October 2026.