Privacy notice

How we process the personal data of people who visit umilischiavi.it and write to us through the contact form, under Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Xenzia Solutions, sole trader, VAT number 02803090030. For any privacy request: [email protected]. Umili Schiavi is a brand of Xenzia Solutions.

What data we process

• Data you send us through the contact form: full name, company name, email and, if you provide them, sector, plan of interest and message.
• Text you write in “Try it”: the description of a task, sent to language-processing service providers (also outside the EU, under standard contractual clauses) only to generate the procedure. We don’t keep it or use it for anything else: don’t include personal data. To prevent abuse we count requests per IP address, keeping only a hashed fingerprint that deletes itself within 24 hours.
• Technical browsing data: IP address, browser type, requested pages and times, logged by the hosting provider to deliver the site and protect it from abuse.

We don’t use profiling cookies or analytics or advertising tools. Fonts are served from our own domain, with no calls to external services. The site stores only three technical items in your browser: your animation preference, if you use it (localStorage), the fact that you closed the cookie notice (localStorage) and the fact that you’ve already seen the intro animation (sessionStorage, cleared when you close the tab). They stay on your device and are never sent to us. The hosting provider may set technical cookies strictly necessary for security, which don’t require consent.

Why we process it and on what legal basis

• Replying to your request for information or a demo: the legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). The fields marked with an asterisk are needed to reply: without them, we can’t.
• Site security and abuse prevention (for example spam on the form): the controller’s legitimate interest (Art. 6(1)(f) GDPR).

We don’t use your data for newsletters or marketing, we don’t sell it and we don’t make automated decisions about you.

Who processes it on our behalf

• Cloudflare, Inc.: site hosting, content delivery network and attack protection.
• Resend (Plus Five Five, Inc.): delivery of the email that brings your request to our team.

They are appointed as data processors (Art. 28 GDPR). Both are based in the United States: transfers rely on the EU-U.S. Data Privacy Framework and, failing that, on the Standard Contractual Clauses approved by the European Commission. Within Xenzia Solutions, data is accessible only to the people who need to handle your request.

How long we keep it

• Form requests: 24 months from the last contact, then deleted. If you become a client, the data moves into contract management and follows the retention periods required by law.
• Technical browsing data: for the period set by the hosting provider for security purposes, usually a few days.

Your rights

At any time you can ask to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest (Arts. 15–22 GDPR). Write to [email protected]: we reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Last updated: 28 September 2026.