Privacy policy

1. Who processes your data

The data controller is BinaryForge (M61803018P), Rr.Ana Shllaku, Ndertesa nr 8, Tirana - Albania. For any request about your personal data you can write to info@binaryforge.it.

We have not appointed a Data Protection Officer: we do not fall into the cases where the GDPR makes one mandatory.

2. What we collect

When you submit the contact form we collect what you write:

• First and last name
• Company, if you give one
• Email address
• Phone number, if you give one
• The project type you pick from the list
• The text of your message, including anything you choose to put in it
• Your consent tick and the moment it was given

The server hosting the site also records, for every request, technical data such as the IP address, the date and time, the page requested and the browser type. These are ordinary operational logs, needed to run the service and to spot abuse.

We neither ask for nor want special categories of data (art. 9 GDPR): health data, political opinions, religious beliefs and the like. Please don't put them in your message.

3. Why we use it

• To answer your enquiry and assess the project with you
• To prepare a quote or a proposal, if the conversation gets that far
• To defend the site against spam and automated submissions, and keep it secure
• To meet legal obligations, where they apply

4. On what legal basis

For the contact form data the legal basis is your consent (art. 6(1)(a) GDPR) and, once the conversation has started, steps taken at your request prior to entering into a contract (art. 6(1)(b)).

For server logs and anti-spam measures the basis is our legitimate interest in keeping the site working and secure (art. 6(1)(f)).

You can withdraw your consent at any time by writing to the address in point 1. Withdrawal does not affect the lawfulness of processing carried out beforehand.

5. Who else sees it

We do not sell your data and we do not pass it to third parties for marketing purposes.

It is processed on our behalf only by the providers of our technical infrastructure, appointed as processors under art. 28 GDPR:

• The provider hosting the site and keeping its logs (to be named)
• The email (SMTP) provider that delivers your enquiry to us (to be named)

6. Where it goes

We prefer providers that process data within the European Economic Area. Should a transfer to a third country become necessary, it only happens with appropriate safeguards under Chapter V of the GDPR: an adequacy decision of the European Commission or Standard Contractual Clauses.

7. How long we keep it

• Enquiries that don't turn into a project: 24 months from the last contact, then deleted
• Enquiries that do turn into a project: for the duration of the relationship and, for tax and accounting records, for the 10 years required by law
• Technical server logs: a few months, depending on the hosting provider's configuration

8. Your rights

Within the limits of articles 15-22 GDPR you can ask us at any time to:

• Access the data concerning you and receive a copy of it
• Correct anything inaccurate or complete anything incomplete
• Erase it, where we have no legitimate grounds to keep it
• Restrict or object to the processing
• Receive it in a machine-readable format, or have it transferred elsewhere

We reply within one month. To exercise these rights write to info@binaryforge.it.

If you believe the processing infringes the GDPR you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country where you live or work.

9. Automated decisions

We do not use your data for automated decision-making or profiling.

10. Cookies

How we use cookies and similar technologies is described in the cookie policy, where you can also change your preferences at any time.

11. Changes to this notice

If the tools we use or the purposes of the processing change, we update this page and the date at the top. When the change concerns non-essential cookies, we ask for your consent again.