Privacy Policy

1. Data controller

KUAMA SRL

Via Germania 7/5

5010 Vigonza (Padova)

Italy

VAT number: IT05193790283

PEC: [email protected]

Email: [email protected]

Phone: +39 049 7988 390

Website: https://kuama.it/

2. Data Protection Officer

The Data Protection Officer, or DPO, is Andrea Chiarenza.

The DPO can be contacted at [email protected] with the subject “Privacy / DPO” or via PEC at [email protected].

3. Types of personal data processed

KUAMA SRL may process data provided through the contact form, technical and browsing data, and data collected through cookies and tracking tools.

• Data provided through the contact form: full name, email address, phone number, message.
• Technical and browsing data: IP address, request date and time, pages visited, browser, device, operating system, technical logs, errors or malfunctions.
• Cookies and tracking tools: technical cookies and, subject to consent, analytics tools and other tracking tools.
• Session replay, subject to Analytics consent: technical reconstruction of visited pages and interactions such as clicks, scrolling and pointer movements. Values entered into fields are masked and the contact form is excluded from recording.
• Performance metrics, subject to Analytics consent: Core Web Vitals and page loading, rendering, responsiveness and network resource timings, without collecting request contents, headers or bodies.

4. Purposes and legal bases of processing

Personal data is processed to handle requests submitted through the contact form, ensure website functionality and security, monitor technical errors, analyse website usage subject to consent, and currently not for marketing or advertising profiling.

• Request handling: performance of pre-contractual measures requested by the data subject and/or the controller's legitimate interest.
• Functionality and security: the controller's legitimate interest.
• Technical monitoring and error reporting: the controller's legitimate interest.
• Website usage analysis and UX improvement: user consent, withdrawable at any time.
• Session replay to identify navigation and usability issues: consent to the Analytics category, withdrawable at any time.
• Performance monitoring to identify slow or unresponsive pages: consent to the Analytics category, withdrawable at any time.
• Marketing, advertising and profiling: not used as of the update date, unless otherwise indicated in the future.

5. Nature of data provision

Providing the email address and message in the contact form is necessary to submit the request and receive a reply.

Full name and phone number are optional.

6. Processing methods

Processing is carried out using IT, telematic and organisational tools suitable to ensure data security, confidentiality and integrity.

7. Data recipients

Data may be processed by authorised KUAMA SRL personnel and by suppliers who support the controller in managing the website, IT systems, email, hosting, security, analytics and technical activities.

• hosting and technical infrastructure providers;
• email providers, including Google Workspace/Gmail, if used;
• analytics providers such as PostHog Cloud EU, where consent is required;
• tag management tools such as Google Tag Manager;
• consultants, agencies or technical suppliers engaged by KUAMA SRL;
• public bodies or authorities, where required by law.

8. Transfers outside the European Economic Area

KUAMA SRL prefers providers and configurations that process data within the European Economic Area.

If some providers process personal data outside the European Economic Area, such transfers will take place in compliance with the GDPR.

9. Retention period

Contact form data is retained for as long as necessary to handle the request and, as a rule, no longer than 12 months from the last interaction, unless longer retention is required by law or to protect the controller's rights.

Technical and log data is retained for as long as necessary to ensure security, maintenance and proper operation of the website.

Analytics data is retained according to the settings of the tool used and in a manner proportionate to the purposes.

Session replays are retained according to the PostHog settings and only for a period proportionate to the purposes of analysis and user-experience improvement.

Cookie and tracking consents are retained for the period indicated in the Cookie Policy.

10. Data subject rights

Where provided by law, the user may exercise rights including access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and lodging a complaint with the supervisory authority.

Requests may be sent to [email protected] or to PEC [email protected].

11. Cookies and tracking tools

For detailed information about the cookies and other tracking tools used by the website, the user can consult the Cookie Policy.

The user may change cookie preferences at any time via the “Manage cookie preferences” link on the website.

12. Automated decision-making

KUAMA SRL does not use personal data collected through the website for automated decision-making that produces legal effects or similarly significantly affects the user.

13. Changes to this Privacy Policy

KUAMA SRL reserves the right to update this Privacy Policy in the event of regulatory, technical or organisational changes, or if new services or processing tools are introduced.