Privacy notice

Bizando S.r.l.

• Registered office: Via Tirso 90, 00198 Rome (RM), Italy
• Rome Companies Register, tax code and VAT IT10804161007 — REA RM-1256450
• Share capital: €10,000.00 fully paid up
• Email: info@bizando.com

No Data Protection Officer has been appointed: the conditions of Article 37 GDPR do not apply. For any matter concerning personal data, the contact point is the address above.

bizando.com is a static site. It sets no cookies, uses neither localStorage nor any other form of storage on your device, does not profile you and shares no data with advertising networks.

The typefaces are hosted on the site's own server and there is no form sending data to external services: your visit generates no request to any third-party domain. Without exceptions. This is a deliberate choice, not a technical detail.

The site is hosted on infrastructure operated by Aruba S.p.A., with servers located in the European Union. As with any web server, the infrastructure records the connection data needed to serve the page and keep it secure — IP address, date and time, resource requested, browser type. These are technical logs, necessary to the security and correct operation of the service, and they are not used to identify you or cross-referenced with other data. How long they are kept is determined by Aruba S.p.A., which for this category acts as an independent controller under its own policies and the legal obligations that apply to it.

Visit statistics: no analytics tool is currently active. If Plausible Analytics is activated in future, it will be a tool that uses no cookies and collects no personal identifiers, and this notice will be updated before activation.

This site has no contact form: the contact details are direct. What follows therefore applies to the emails I receive, ordinary or certified (PEC).

Data collected

Whatever you choose to write: your email address and the content of the message, together with any contact details you decide to include. There is no automatic collection: I receive only what you choose to write.

Why

To read your message and reply to it, and for any subsequent contact aimed at assessing a professional engagement.

Legal basis

Steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR. By writing to ask for information or a call, it is you who requests that contact.

If your address were one day used for unsolicited commercial messages, that would be a further processing operation, with a different legal basis and a separate consent collected for it.

Who the data is disclosed to

To no further recipient. The only party involved besides the controller is Aruba S.p.A., provider of the site hosting and the email service, with servers located in the European Union. Aruba acts in two distinct roles, and the difference matters because it changes who decides what:

• Processor under Article 28 GDPR for the data passing through the service on the controller's instructions: the content published on the site and the emails held in the mailboxes. On this data it acts solely on the controller's instructions.
• Independent controller for the system and network logs it generates itself in delivering the service. On that data it takes no instructions: it determines purposes, retention periods and measures under its own policies, set out in its own privacy notice.

Beyond this, the emails are accessible to the controller alone. They are not sold, transferred or disclosed to third parties, they do not feed contact lists, and they do not trigger automated sending sequences.

For how long

Emails received are kept for 24 months from the last contact, then deleted. If the contact leads to a contractual relationship, the data is absorbed into the management of that relationship and follows the retention periods required by the applicable tax and civil law obligations.

The booking button links to Cal.com, an external scheduling service, on its European instance (domain cal.eu). Clicking it takes you off bizando.com: from that point the privacy notice of that service applies, over which the controller has no control. As long as booking remains an external link, no third-party script is loaded on this site.

You may at any time request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interests (Articles 15-22 GDPR). The processing is not based on consent, so there is no consent to withdraw: you can nonetheless ask at any time for the deletion of the data you have sent us.

To exercise them, write to info@bizando.com. A reply follows within one month of the request.

If you consider that the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU State where you live or work.

None on the controller's part. Hosting of the site and of the email service is on Aruba S.p.A. infrastructure with servers in the European Union, and there are no other recipients of the data.

None. No decisions are taken based solely on automated processing, including profiling.

This notice may be updated. The date at the top indicates the last revision; substantive changes are flagged on the site.