Privacy Policy

1. Data controller

The data controller is Simone Daini (a natural person), operator of the secutech.it website. For any request about your data you can write to simonedaini1993@gmail.com.

2. What data we collect

• Data you provide voluntarily: email address and, optionally, company name submitted through the NIS2 self-assessment form.
• Browsing data and cookies: IP address, browser/device type, pages visited and interactions, collected via cookies and similar technologies only with your consent (see Cookie Policy).

3. Purposes and legal bases

• Respond to your requests and send the requested assessment report — legal basis: pre-contractual measures / consent (Art. 6.1.b/a GDPR).
• Commercial follow-up after your request — legal basis: legitimate interest or consent (Art. 6.1.f/a GDPR).
• Website usage statistics and advertising measurement — legal basis: consent (Art. 6.1.a GDPR).

4. Processing and retention

Data is processed with electronic tools and security measures designed to prevent unauthorized access. Contact data is kept for as long as needed to handle the request and, in case of a commercial relationship, for the legally required terms; data collected for marketing/statistics is kept as indicated in the Cookie Policy or until consent is withdrawn.

5. Recipients and providers (processors)

To deliver the service we rely on providers acting as data processors:

• Netlify, Inc. — website hosting and form handling (Netlify Forms).
• Google Ireland/LLC — Google Analytics 4 and Google Ads (statistics and conversion measurement), enabled only with consent.
• Cal.com — consultation scheduling (if you book a call).
• Any email/CRM tools used to follow up with you.

6. Transfers outside the EU

Some providers may process data outside the European Union. In such cases the transfer is based on appropriate safeguards under the GDPR (e.g. Standard Contractual Clauses or adherence to the EU-US Data Privacy Framework).

7. Your rights

At any time you can exercise the rights under Art. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent (without affecting processing already carried out). To exercise them write to simonedaini1993@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Changes

We may update this notice. Changes will be published on this page together with the update date.