Privacy notice

1. Data controller

Qualitti Sviluppo S.r.l., Via Guglielmo Marconi 2, 38121 Trento (TN), Italia — P.IVA e C.F. 02683070227, REA TN-242317.

For any request about personal data: dpo@qualitti.it · certified email (PEC): qualittisvilupposrl@pec.it.

2. What data we process and why

• Browsing data. The servers hosting the website record technical data (IP address, date and time, page requested, browser type) needed for the website to work and stay secure. Legal basis: legitimate interest in website security (Art. 6(1)(f) GDPR). We do not use analytics or profiling tools.
• Contact form. Full name, company (optional), work email and message, to reply to your request and, where relevant, prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b)) or, for general enquiries, our legitimate interest in replying (Art. 6(1)(f)). The required fields are necessary for us to reply.
• Commercial communications. Only if you tick the optional box will we use your email to send you information about our services. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.
• Direct contact. If you write to us by email, we process the data you share for the same purposes and on the same legal bases as the contact form.

3. How we process data

Contact form data is not stored on the website: it is sent in encrypted form (HTTPS) to our business mailbox and handled only by authorised staff, with appropriate technical and organisational measures (Art. 32 GDPR).

4. Who we share data with

• Qualitti staff authorised to process the data.
• Hosting and email service providers, appointed as processors (Art. 28 GDPR).
• Companies of Grupo Supero, of which Qualitti is part, where needed to handle your request.

Data is not published or sold to third parties.

5. Transfers outside the European Union

The website is hosted on servers in the European Union (France). Where handling your request involves Grupo Supero companies in Brazil, the transfer relies on the European Commission’s adequacy decision (Commission Implementing Decision (EU) 2026/179).

6. Linked third-party services

The website contains plain links to Calendly and LinkedIn. These services are not embedded in our pages and receive no data until you choose to open them. When you use them, their own privacy notices apply, as each provider acts as an independent controller.

7. How long we keep data

• Browsing data: for the limited period set by the hosting provider for security purposes.
• Contact requests: for as long as needed to handle them and no longer than 24 months from the last contact, unless a contractual relationship begins, in which case statutory retention periods apply.
• Commercial communications: until you withdraw consent or, if there is no interaction, for a maximum of 24 months.

8. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Articles 15–22 GDPR). You may withdraw consent to commercial communications without affecting the lawfulness of prior processing. Write to dpo@qualitti.it and we will reply within 30 days.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Automated decision-making

We do not take decisions based solely on automated processing, including profiling.

10. Changes

Any updates to this notice will be published on this page, with the date of the latest update.