Privacy Policy

INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA (Articles 13–14 of EU Regulation 2016/679 – “GDPR”)

Last updated: [27/02/2026]

1) Data Controller

The Data Controller is 360bit di Casto Carmelina, with registered office at Via Aprile 31, 96019 Rosolini (SR)VAT No. 01971300890.
Contacts: info@360bit.it – Tel. 346 5199361.
Certified email (PEC): inacasto@pec.it.

2) Types of data processed

a) Browsing data
Technical data (e.g., IP address, logs, device and browser information) necessary for the operation and security of the website.

b) Data voluntarily provided by the user
Identification and contact data (e.g., name, phone number) and the content of messages submitted through the contact forms available on the website.

c) Data that may fall within special categories (Art. 9 GDPR)
If you enter specific information about you and your business (even indirectly) in the “message” field or other fields, such data may fall within special categories of personal data.

3) Purposes of processing and legal bases

We process personal data for the following purposes:

  1. Managing contact requests and information enquiries (replying to messages, requests about services)
    Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).

  2. Complying with legal obligations (e.g., requests from authorities, administrative obligations where applicable)
    Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

  3. Website security and protection of the Controller’s rights (preventing abuse/fraud, legal defence)
    Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

  4. Cookies and tracking technologies
    The website uses a consent management platform (Cookiebot) and a “Cookie Policy” page. The updated list of cookies/tools and their purposes is available on the Cookie Policy page.

    Legal basis:

    • strictly necessary/technical cookies: legitimate interest/technical necessity (Art. 6(1)(f) GDPR)

    • non-essential cookies (analytics/marketing): consent (Art. 6(1)(a) GDPR)

The content of this notice is provided in accordance with Articles 13 and 14 GDPR.

4) Processing methods and security measures

Processing is carried out using IT and/or paper-based tools, adopting appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of the data.

5) Data recipients

Data may be processed by:

  • internal staff and collaborators authorised by the Data Controller;

  • technical providers supporting the website and related systems (e.g., SiteGround, Aruba), appointed where necessary as Data Processors (the updated list of processors is available upon request by writing to info@360bit.it );

  • third parties acting as independent controllers when the user interacts with their services (e.g., social networks or external platforms).

Cookie consent provider: Cookiebot (Usercentrics) – CMP and Cookie Policy.

Locally hosted fonts: This website uses typefaces hosted locally on its own server. Therefore, while browsing the website, no requests are made to Google servers to load fonts.

6) Transfers outside the EEA

Some providers (e.g., Google, tracking/cookie services, technical tools) may involve transfers of data to countries outside the EEA. Where required, the Data Controller adopts appropriate safeguards (e.g., Standard Contractual Clauses, supplementary measures). With regard to fonts, since they are hosted locally, no transfers to third-party providers take place.

7) Data retention

  • Requests via forms/email/phone: for the time needed to manage the request and subsequent contacts, generally up to 12 months from the last interaction, unless longer retention is necessary for legal protection or legal obligations.

  • Technical browsing/log data: generally for short periods, unless required for security purposes or to ascertain unlawful activities.

  • Cookies: for the durations indicated in the Cookie Policy.

8) Nature of data provision

Providing the data marked as necessary in the forms is required in order to manage your contact request. If such data is not provided, we may not be able to reply or arrange an appointment.

9) Data subject rights

You may exercise the rights provided under Articles 15–22 GDPR (access, rectification, erasure, restriction, portability, objection) by writing to info@360bit.it . info@360bit.it.

You also have the right to lodge a complaint with the competent Data Protection Authority.

10) Minors

The content and services on this website are primarily intended for adults. For requests relating to minors, please contact the agency through a parent/legal guardian.

11) Changes to this notice

This notice may be subject to updates. The updated version will be published on this page, indicating the revision date.

en_GB