Privacy Policy

1. Data controller

The data controller for the personal data collected through the website is INLOGICO.COM DI VALERIO MANNARINO, the communications and digital marketing agency that created and runs the website, with registered office at Via Monte della Vecchia Quercia 28, 00060 Formello (RM), Italy. VAT number 08984161003, tax code MNNVLR78M28H501V, REA RM-1132189.

For any matter relating to the processing of personal data you can write to privacy@inlogico.com, or to the certified email (PEC) address inlogico@pec.it, or call +39 06 97247476.

The controller has not appointed a Data Protection Officer (DPO), as it is not required to do so by law.

2. Types of data collected

The website collects and processes the following categories of personal data, depending on how the user interacts with it.

2.1 Data provided voluntarily

• Contact form (Contact page): full name, email address and the text of the message.
• Partner form (Diventa partner page, in Italian): name of the business, full name of the contact person, email address, telephone number (optional) and a description of the business.
• Newsletter: it is not active at the moment and the site does not collect email addresses for this purpose. When it is activated, subscription will require the explicit consent of the data subject and confirmation by email, and this notice will be updated before activation.

2.2 Data collected automatically

• Browsing data: IP address, type of browser and device, operating system, pages requested, date and time of access. They are recorded in the server log files by the hosting provider and are used for the operation and security of the site.
• Form security data: to limit abusive submissions, the site keeps, for a short period, a non-reversible fingerprint (hash) of the IP address of anyone who submits a form, never the address in clear, and uses a technical session cookie (see the Cookie Policy).
• Analytics data: with your consent, information on the use of the site collected with Google Analytics 4 through Google Tag Manager, as described in section 4 and in the Cookie Policy. Without your consent these tools do not collect data.

The website does not knowingly process special categories of personal data (sensitive data) and is not aimed at children under fourteen.

3. Purposes and legal bases of processing

Data are processed for the purposes and on the legal bases set out below.

• Replying to requests sent with the Contact form. Legal basis: consent of the data subject, given by submitting the form and ticking the statement that they have read the notice (Art. 6(1)(a) GDPR), and the controller's legitimate interest in responding to requests (point (f)).
• Handling collaboration requests sent with the Partner form and getting back in touch with the business. Legal basis: pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) and consent given by submitting the form (point (a)).
• Publishing listings of local businesses in the guide (name, address, contact details, opening hours and description of the business, obtained from the owner or from public sources). For sole traders and professionals these data may be personal data. Legal basis: the controller's legitimate interest in offering the public a guide to local businesses (Art. 6(1)(f) GDPR). Sources, timescales and how to correct or remove a listing are set out on the page Le attività nella guida (in Italian), which serves as the notice under Art. 14 GDPR.
• Analysing the use of the site statistically and improving its content. Legal basis: consent of the data subject (Art. 6(1)(a) GDPR), given through the cookie banner and revocable at any time.
• Ensuring the security of the website, preventing abuse and spam, and complying with legal obligations. Legal basis: the controller's legitimate interest and compliance with legal obligations (Art. 6(1)(c) and (f) GDPR). This covers the server logs, the limit on repeated submissions and the anti-spam check on the forms.

Providing data in the forms is optional, but the fields marked as required are needed to handle the request: without them it is not possible to receive a reply.

4. Cookies and analytics tools

The website uses technical cookies and an area of the browser's local storage to remember your choices on the banner. The statistics tools (Google Analytics 4, loaded through Google Tag Manager) are activated only if the user accepts them from the banner. The site applies Google Consent Mode v2: before a choice is made, and if the user refuses, the statistics and marketing categories remain denied. The site does not currently use marketing or profiling cookies.

The list of cookies, with name, provider, purpose and duration, and the instructions for changing or withdrawing consent (the "Manage cookies" link at the bottom of every page) are in the Cookie Policy, which forms an integral part of this notice.

5. Third-party services used by the site

To work, the site relies on the services listed below. For some of them the user's browser connects directly to the provider's servers, which can therefore receive the IP address and the technical data of the request.

• Hosting, VHosting (VHosting Solution s.r.l., Milan, Italy): hosts the site, the log files and the email service used to deliver the messages sent with the forms. It acts as a data processor.
• Google reCAPTCHA v3 (Google Ireland Limited): on the pages with a form (Contact and Diventa partner) it protects the forms from spam. Google's script is loaded when the user starts using the form and analyses the behaviour of the browser to tell people apart from automated programs. Google's Privacy Policy and Terms apply. Legal basis: legitimate interest in the security of the site.
• Google Analytics 4 and Google Tag Manager (Google Ireland Limited): usage statistics, only with prior consent. Google may transfer data to the United States with the safeguards provided by Articles 44 et seq. of the GDPR (including, where applicable, the adequacy decision on the EU-US Data Privacy Framework and the standard contractual clauses).
• Maps, OpenStreetMap: pages with a map (for example Contact, Services and the business listings) load the map tiles from the servers of OpenStreetMap (OpenStreetMap Foundation), which receives the IP address needed to deliver the files. The map display library (Leaflet) and the site's fonts (Manrope and Inter) are hosted on our server: the browser does not contact other providers to download them. No cookies are set by the site.
• Traffic, Google Maps (Google Ireland Limited): on the Italian home page and on the Meteo del traffico page (live traffic, in Italian), Google's map with the traffic layer loads only if the user presses the "Mostra il traffico" (show traffic) button, "Mostra il traffico adesso" on the home page. The choice can be remembered in the browser, which stores only a technical flag valid for both pages: in that case, on the home page, the map loads when it comes into view. When the map loads, Google receives the IP address and the technical browsing data and may set its own cookies. The "Tempo adesso" (time now) links open Google Maps in a new tab, outside our site. The site neither reads nor stores the traffic data. Google's Privacy Policy and Terms apply. Legal basis: the request of the user, who chooses to load the map.
• Weather (Open-Meteo): the forecast on the home page is requested from Open-Meteo by our server. The call is made by the server, not by the user's browser: no user data is sent to Open-Meteo.
• Images from Wikimedia Commons: the photos from Wikimedia are hosted on our server. The browser does not contact Wikimedia and no cookies are set.
• Social media profiles: the site contains only links to the Facebook, Instagram, YouTube and X profiles. It does not embed plugins or videos: the platforms process data only if the user chooses to open the link.

6. Retention period

Personal data are kept for no longer than is strictly necessary to achieve the purposes for which they were collected.

• Contact and Partner form data: kept for 24 months from the request, to handle the reply and any follow-up; then deleted, unless a contractual relationship has arisen in the meantime, in which case the legal time limits for that relationship apply.
• IP fingerprint (hash) for the submission limit: counted for one hour and removed within two days.
• Analytics data (GA4): according to the retention period set in the Google Analytics property, and no longer than 14 months.
• Server logs: according to the hosting provider's timescales, for security purposes.
• Choices on the cookie banner: up to 12 months, after which the banner is shown again.

7. Disclosure and recipients of the data

Form data are read by authorised staff of Inlogico.com and by the members of the I Love Formello editorial team responsible for replying. They may also be processed, on behalf of the controller, by the providers listed in section 5, such as the hosting and email provider, which act as data processors or as independent controllers for their own services.

Data are not disseminated or passed on to third parties for their own commercial purposes. Data may be transferred to countries outside the European Union only through the Google services described in section 5, with the safeguards stated there.

8. Rights of the data subject

As a data subject, the user may exercise at any time the rights provided by Articles 15 to 22 of the GDPR, and in particular:

• the right of access to their personal data (Art. 15);
• the right to rectification of inaccurate or incomplete data (Art. 16);
• the right to erasure of data, or right to be forgotten (Art. 17);
• the right to restriction of processing (Art. 18);
• the right to data portability (Art. 20);
• the right to object to processing (Art. 21);
• the right not to be subject to a decision based solely on automated processing (Art. 22): the site does not use automated decision-making about users;
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. For cookies, simply use "Manage cookies" at the bottom of the page.

To exercise these rights, the user can write to privacy@inlogico.com or to the PEC address inlogico@pec.it. Data subjects also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), if they believe that the processing infringes the applicable law.

9. Changes to this notice

The controller may update this notice to reflect changes in the law or in the services active on the site, for example the activation of the newsletter. Changes are published on this page, together with the date of the last update. Users are invited to check it periodically.

10. Contact

For any question about the processing of personal data you can write to privacy@inlogico.com or use the form on the Contact page.