IT Let’s talk

Legal documents

Privacy policy

Information notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) for visitors to the digipa.it and digipa.tech websites. Last updated: 27 October 2026.

Data controller

The data controller is Digipa s.r.l., with registered office at Piazza Giuseppe Grandi 7, 20129 Milano (MI), VAT no. 10745180967. For any request about your data, write to info@digipa.it.

What data we process

  • Browsing data: IP address, date and time, requested page, browser and operating system, logged by the web server for the operation and security of the site.
  • Data you send us with the contact form: first name and surname, email and, if you provide them, company, phone number, topics of interest, budget and the text of your message.
  • Job application data: position, first name and surname, email, introduction and CV in PDF. Please do not include unnecessary data in your CV (for example health data or photos).
  • Data collected with cookies and similar tools: only if you consent, data on how the site is used (Google Analytics 4) and on the effectiveness of our campaigns (Meta Pixel). Details in the cookie policy.
  • Data for spam protection: when you use a form, Google reCAPTCHA analyses technical data about your browser and your interaction to tell people apart from automated programs.

Purposes and legal bases

  • Replying to your requests and preparing a proposal, if any: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Assessing your job application: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Ensuring the operation and security of the site and its forms (server logs, reCAPTCHA): legitimate interest of the controller (Art. 6(1)(f) GDPR).
  • Usage statistics and measurement of advertising campaigns: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from “Cookie preferences” at the bottom of every page.
  • Complying with legal obligations and defending our rights in court (Art. 6(1)(c) and 6(1)(f) GDPR).

Provision of data

The fields marked with an asterisk in the forms are needed to reply to you or to assess your application: without them we cannot act on your request. The other fields are optional. Consent to statistics and marketing cookies is optional and does not affect your use of the site.

How long we keep data

  • Contact requests: up to 24 months from the last exchange, unless a contractual relationship results (in that case for the duration of the contract and of the related legal obligations).
  • Job applications: up to 12 months from receipt, so that we can also consider them for future positions; you can ask us to delete them sooner.
  • Server logs: for as long as strictly necessary for the security of the site, normally no longer than 6 months.
  • Data collected with cookies: for the periods stated in the cookie policy.

Who we share data with

Data is processed by authorised Digipa staff and by suppliers acting as data processors: the hosting provider of the site and of the email service. For the services listed above, the following also act as independent controllers or processors:

Transfers outside the European Union

Google and Meta may process data in the United States. The companies of both groups participate in the EU-U.S. Data Privacy Framework, which is the subject of the European Commission’s adequacy decision of 10 July 2023, and use the standard contractual clauses approved by the Commission. Data sent with the forms stays on servers in Europe.

Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Arts. 15–22 GDPR). You can withdraw your consent to cookies whenever you like, without affecting processing already carried out. To exercise your rights, write to info@digipa.it.

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority, garanteprivacy.it) or with the supervisory authority of the country where you live or work.

Changes

We may update this notice. The date of the last update is shown at the top of the page.