Personal Data Processing Notice

1. Data controller

The data controller is:

For any request concerning personal data processing, the controller can be contacted at the email address above.

2. Personal data processed

Through the website and the reserved area, the following data may be collected and processed.

Registration data

• email address used as username;
• password, stored in protected form;
• first name and last name of the contact person;
• mobile phone number;
• technical data relating to access to the reserved area.

Company and tax data

• company name or legal name;
• Italian, EU or non-EU VAT number, TIN or equivalent tax identification number;
• tax code, where required;
• PEC, REM/eIDAS contact, SDI code where applicable;
• invoice email, website and company phone number.

Addresses

• billing address;
• shipping address;
• country, province/state, city, postal code, street and street number;
• additional address notes useful for billing or shipping.

Quote request data

• requested service;
• project description;
• materials, technologies or processes selected;
• technical notes entered by the user;
• request status and quote history.

Technical files and attachments

• 3D files uploaded by the user;
• technical drawings;
• project specifications;
• technical documentation attached to the request.

Uploaded files may contain technical, industrial or project information. Users are invited not to include personal data that is not necessary for quote assessment.

Navigation and security data

• IP address;
• date and time of access;
• technical logs;
• browser, device and operating system information;
• data needed to ensure platform operation and security.

3. Purposes of processing

Data is processed for the following purposes:

a) Account registration and management

Data is used to create the user account, allow access to the reserved area, identify the company contact person and consult the request history.

b) Management of quote requests

Data entered in forms and uploaded files are used to analyse the request, assess technical feasibility, prepare the quote and communicate with the customer.

c) Verification of company and tax data

Company and tax data may be checked before sending a quote, in order to verify correctness and manage administrative and commercial activities properly.

d) Operational communications

Contact data is used to send communications about requests, ask for integrations, provide status updates, send quotes or provide information about requested services.

e) Administrative, accounting and tax management

Data may be processed to comply with administrative, accounting, tax and contractual obligations.

f) Platform security

Technical data and logs may be processed to protect the website, prevent unauthorised access, check system operation and protect data and uploaded files.

g) Newsletter and promotional communications

Only with the user's free and specific consent, the email address may be used to send informational, commercial or promotional communications relating to Ydealogica S.r.l. services.

4. Legal basis

Processing is based on pre-contractual or contractual measures, compliance with legal obligations, the legitimate interest of the controller in protecting the platform and its rights, and the user's consent for newsletters or optional processing.

5. Nature of data provision

Providing mandatory data is necessary to register, submit a quote request, allow technical assessment of the project and receive communications from Ydealogica S.r.l.

Failure to provide mandatory data may prevent registration, submission of the request or preparation of the quote. Optional data, such as website or newsletter subscription, does not affect the use of the main services.

6. Processing methods

Data is processed using IT and telematic tools according to principles of fairness, lawfulness, transparency, minimisation and security. Access is granted only to authorised persons within the limits of their duties.

7. Security of data and uploaded files

Ydealogica S.r.l. adopts appropriate technical and organisational measures to protect personal data and files uploaded by users, including HTTPS, authentication, role and permission management, validation of form data, file checks, protected storage areas, restricted access, anti-abuse measures, activity tracking, backups and security procedures.

8. Recipients of data

Personal data may be processed by internal staff or authorised collaborators. It may also be disclosed, where necessary, to external providers such as hosting and infrastructure providers, email services, cloud or storage services, developers, platform technicians, administrative, tax, accounting or legal consultants, technical partners or suppliers involved in evaluating or managing requests, and public authorities where required by law.

Where necessary, external parties processing personal data on behalf of Ydealogica S.r.l. will be appointed as data processors.

9. Transfers outside the European Union

Data is preferably processed and stored within the European Union. Any transfer to non-EU countries will take place in compliance with applicable safeguards, such as adequacy decisions, standard contractual clauses or other GDPR-recognised instruments.

10. Retention periods

Data is retained for the time necessary to achieve the purposes for which it was collected. Account data is retained for the duration of the account; quote request data for the time needed to manage the request and protect contractual rights; tax and accounting data for the legal retention period; technical files for the time needed for assessment, production or management of the request; security logs for a limited and proportionate period; promotional data until consent is withdrawn.

11. Data subject rights

Users may exercise, within the limits of the law, the right of access, rectification, erasure, restriction of processing, objection, data portability where applicable, and withdrawal of consent without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to tech@ydealogica.com. Users also have the right to lodge a complaint with the Italian Data Protection Authority.

12. Newsletter and withdrawal of consent

Newsletter subscription is optional. Consent can be withdrawn at any time by using the unsubscribe link in the communications received or by writing to tech@ydealogica.com.

13. Changes to this notice

Ydealogica S.r.l. reserves the right to update this notice in case of legal, technical or organisational changes.