Legal document
Privacy Policy
Notice pursuant to Art. 13 of EU Regulation 2016/679 (GDPR).
Last updated: May 2026.
1. Data Controller
The Data Controller for personal data is:
2. Data collected
Through the contact form on the site we collect the following personal data:
- First and last name
- Company name
- Email address
- Phone number
- Project type
- Any free-text message about the project
Data is provided voluntarily by the data subject. Failure to provide it prevents us from processing the request.
3. Purpose and legal basis of processing
Personal data is processed for the following purposes:
Responding to the contact request
Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).
Managing the pre-contractual business relationship
Legal basis: performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).
Data is not used for profiling, automated marketing or automated decision-making.
4. Processing methods and retention period
Data is processed using IT tools and stored in a manner that ensures its security and confidentiality.
Data is retained for the time necessary to process the request and, if a commercial relationship is established, for the period required by applicable tax and accounting regulations (up to 10 years). In the absence of a commercial relationship, data is deleted within 24 months of collection.
5. Data recipients
Personal data collected through the form may be shared with the following parties:
Notion Labs Inc. (CRM)
Form data is recorded in a Notion database used as internal CRM. US transfer based on SCCs.
Resend Inc. (transactional email)
Data is used to send the contact notification to michele@revellum.it. US transfer based on SCCs.
Google LLC (Google Analytics 4)
The site uses Google Analytics 4 (ID: G-98WBL8XJPT) to collect anonymous statistical data on visits. The IP address is anonymized before any processing. To opt out: Google Analytics Opt-out.
Google LLC (Google Fonts)
The site loads typefaces through Google Fonts. The browser establishes a direct connection to Google's servers, transmitting the IP address. US transfer based on SCCs.
Data is not shared with third parties for marketing purposes nor sold to third parties.
6. Cookies and tracking
On first access, the site shows a cookie banner requiring consent before activating any tracking. The choice is stored in the browser (localStorage) and can be changed at any time by clearing the site's data.
Technical / functional cookies
Strictly necessary for the site to function (e.g. cookie consent management). They do not require consent and do not profile the user.
Analytics cookies — Google Analytics 4 (active only upon consent)
If the user accepts, Google Analytics 4 (ID: G-S9PVRG2L53) is loaded to collect anonymous statistical data on visits. The IP address is anonymized. Without consent, no analytics script is loaded. To opt out regardless of choice: Google Analytics Opt-out Browser Add-on.
The site does not use profiling, marketing or retargeting cookies.
7. Data subject rights
- Access — obtain confirmation of processing and a copy of the personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of the data
- Restriction — request restriction of processing
- Portability — receive the data in a structured format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — withdraw consent given at any time
To exercise your rights: michele@revellum.it. The request will be processed within 30 days.
8. Right to lodge a complaint
Italian Data Protection Authority (Garante per la protezione dei dati personali)
Piazza Venezia 11 — 00187 Rome, Italy
9. Changes to this notice
The Data Controller reserves the right to update this notice. For information: michele@revellum.it.