Privacy notice

Data controller

The data controller responsible for the processing of personal data is:

If you have any questions about this notice or about how your data is processed, you can write to us at the address above.

Data we process

This website is an informational showcase. There are no forms to fill in, no restricted areas, no sign-ups, no newsletters and no analytics or profiling tools. The personal data we process is therefore limited to two cases.

Browsing data

The IT systems that run the website automatically record some technical information, as happens with any website: IP address, date and time of the request, page visited, browser type and operating system, server response code. This data is not used to identify visitors, but it could allow identification if combined with other information, for example at the request of the judicial authorities in the event of computer crimes.

Data you provide voluntarily

If you write to the email address published on the website, we will process your address and any other data contained in your message (for example name, company, role, contact details) in order to reply. We ask you not to send us special categories of data, such as health data, unless strictly necessary.

Purposes and legal bases

• Operation and security of the website (browsing data): to ensure the website works properly, prevent abuse and establish liability in the event of computer crimes. The legal basis is the controller's legitimate interest (Art. 6(1)(f) GDPR).
• Replying to your requests (data provided by email): to answer your questions and, if requested, to provide information or proposals about our services. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b)) or, for communications that do not concern a potential contract, the controller's legitimate interest in following up on the contacts received (Art. 6(1)(f)).
• Legal obligations and protection of rights: to comply with obligations under laws or regulations and, where necessary, to establish, exercise or defend a legal claim in court (Art. 6(1)(c) and (f)).

We do not use your data for marketing purposes or for automated decision-making, including profiling.

Providing your data

Browsing data is necessary in order to view the website. Providing data by email is optional: if you choose not to provide it, we simply will not be able to reply.

Methods and retention

Data is processed by electronic means, by authorized personnel and with security measures appropriate to prevent loss, unauthorized use or unauthorized access.

• Browsing data: kept for as long as strictly necessary for security purposes, according to the hosting provider's technical timeframes, unless needed to investigate crimes.
• Emails received: kept for as long as needed to handle the request. If the contact leads to a business relationship, the data is kept for the duration of the relationship and for the subsequent periods required by law (for example ten years for accounting and tax records).

Recipients

Data is not disseminated. It may be processed, on behalf of Cogita and within the limits of their respective activities, by:

• the provider of the website hosting service;
• the provider of the email service;
• consultants and professionals who assist Cogita, bound by confidentiality obligations.

These parties act as data processors pursuant to Art. 28 GDPR. Data may also be disclosed to the competent authorities where required by law.

Transfers outside the European Union

Cogita prefers providers that process data within the European Economic Area (EEA). If a provider were to process data outside the EEA, the transfer would take place only with the safeguards provided for in Articles 44 et seq. GDPR, such as a European Commission adequacy decision or standard contractual clauses.

Links to external sites

The website contains a link to Cogita's LinkedIn page. By following the link you leave this website: the processing of data on LinkedIn is governed by LinkedIn's privacy policy, available at linkedin.com/legal/privacy-policy.

Your rights

At any time you can exercise the rights provided for in Articles 15 to 22 GDPR:

• access your data and obtain a copy of it;
• request its rectification or completion;
• request its erasure, in the cases provided for;
• request the restriction of processing;
• object to processing based on legitimate interest;
• receive your data in a structured format and transmit it to another controller (data portability), in the cases provided for.

To exercise them, simply write to info@cogitatech.it. We will reply without undue delay and in any case within one month of the request.

If you believe that the processing of your data infringes the law, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority; garanteprivacy.it) or with the supervisory authority of the country where you live or work.

Changes to this notice

This notice may be updated, for example if the website gains new features. The version in force is always the one published on this page, with the date of the last update shown at the top. For the use of cookies, see the Cookie policy.