Privacy notice
Privacy policy
How we handle the data of people who visit this site and of those who write to us from the contact form.
Draft, to be reviewed.
The text faithfully describes the processing the site actually carries out, but it has to be read through and approved by whoever looks after privacy for StandUp! Srl. The points in square brackets need to be completed.
1. Data controller
The data controller is StandUp! Srl, Via Marconi 56, 30010
Campolongo Maggiore (VE), Italy — VAT no. / tax code IT04590690279.
For any request about your data, write to
info@standupitalia.com.
[State whether a Data Protection Officer has been appointed, and the contact details.]
2. What data we collect
2.1 Browsing
The servers that host the site record in their technical logs the IP address, the date and time of the request, the page requested and the type of browser. They serve to keep the service running and secure (legitimate interest, Art. 6(1)(f) GDPR) and are not used to identify visitors.
2.2 Contact form
When you fill in the form on the Contact page we collect: your name, your company (if you give it), your email address, your phone number (if you give it), the products you are interested in (if you tick them), your preferred time slot and the text of your message. We use them only to reply to your enquiry and for any later contact connected with it, on the basis of the consent you give by ticking the box (Art. 6(1)(a) GDPR).
The data reaches the company mailbox by email; to your address we send a single email confirming that we have received it. The originating IP address is recorded together with the message, so that automated submissions can be recognised and blocked. Retention: [state the retention period].
Spam protection (legitimate interest, Art. 6(1)(f) GDPR). The filter runs entirely on our own server, with no external services and no cookies: the browser carries out a short proof-of-work check before the message is sent. To limit repeated submissions, the server keeps an encrypted identifier (hash) of the IP address and of the email address for 24 hours, from which the data in clear cannot be recovered. Enquiries that the filter rejects, or that could not be delivered, are kept on the server, outside the public site, for a maximum of 90 days, so that they can be recovered in the event of an error; they are then deleted automatically.
2.3 Statistics
The site uses Google Analytics 4 to count visits and see which pages are read, only after your consent on the banner (legal basis: consent, Art. 6(1)(a) GDPR). Google Ireland Limited processes the data as a processor on our behalf; it does not receive your name or your email and does not store the IP address of visitors from the European Union. You can withdraw your consent at any time from the «Cookie settings» link at the bottom of the page. Cookies and duration in the cookie policy.
2.4 Video
On the Home and Case study pages there is a video hosted by Vimeo (Vimeo.com, Inc., United States). Until you press play you see only an image saved on our own site and no data is sent to Vimeo. If you press play, your browser connects to Vimeo's servers, which receive your IP address; the player is requested with the option that asks it not to record the session. Vimeo's own privacy notice governs its processing.
3. Who we disclose the data to
- the provider that hosts the site and the email [state the provider — checked on 2026-09-11: site on a DigitalOcean server in the Amsterdam data centre (EU), email with Aruba S.p.A.; to be confirmed];
- any internal staff tasked with handling the sales enquiry.
The data is neither sold nor passed on to third parties for marketing purposes.
4. Transfers outside the European Union
If you accept the statistics, Google Analytics data may be processed in the United States by Google LLC, which participates in the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). The same may happen with the Vimeo player, if you start the video (point 2.4). [Check where the hosting and email servers are located and, if they are outside the EU, state it here together with the relevant safeguards.]
5. Your rights
You may at any time request access to your data, its rectification, erasure, restriction and portability, and object to its processing (Arts. 15-22 GDPR). Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing already carried out.
Write to info@standupitalia.com. If you believe the processing breaches the law, you may lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).
6. Training area
The e-learning area reached from /formazione/ is accessed with
credentials and processes data of its own (accounts, course progress). [If that
area has a separate privacy notice, state it here; otherwise add a description of
that processing to this document.]
7. Changes
The version in force is always the one published on this page.
Last updated: 15 October 2026.