Skip to content

Privacy notice

How we process the personal data of those who visit this website and of those who write to us through the contact form or by email.

1. Data controller

Nicoara Clara, owner of the sole proprietorship GSQ Group
30039 Stra (VE), Italy
VAT IT 04830970275
Email: [email protected]

The controller has not appointed a data protection officer (DPO), as this is not mandatory for its activity (Art. 37 GDPR). For any question about your data you can write to the address above.

2. What data we process

Browsing data. Like every website, the servers that publish it automatically record some technical data about each request: IP address, date and time, page requested, outcome, browser type and operating system. They are needed to run and protect the website, not to identify or profile you.

Data you send us through the contact form or by email. Name and surname, email address, subject, message and any attachments (up to two files through the form), and whatever you choose to write to us directly at [email protected]. Please do not include special categories of data, such as health data (Art. 9 GDPR), in your messages or attachments, nor data about other people without their knowledge.

Cookies. The website uses a single technical session cookie: NEXT_LOCALE, which remembers the language you chose and is deleted when you close the browser. It is necessary for the website to work and by law does not require consent (Art. 122 of the Italian Privacy Code). We use no profiling or analytics cookies and no third-party tools that track you. The details are in the cookie policy.

3. Why we process it and on what legal basis

  • To answer your request and, if you ask, to prepare a quote or a proposal: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in answering those who contact us (Art. 6(1)(f)).
  • To run the website and protect it from abuse, for example by limiting the number of form submissions: the controller's legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
  • To comply with legal obligations and, where necessary, to establish or defend legal claims: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).

Consent is not the legal basis for this processing. The checkbox in the form only confirms that you have read this notice.

4. Do you have to provide your data?

No, writing to us is your choice. Name, email, subject and message are however needed to reply: without them the form cannot be sent. Attachments are optional. You can also write to us directly at [email protected].

5. How we process it

Data is processed electronically, by authorised persons and with technical and organisational measures appropriate to the risk (Art. 32 GDPR), including: encrypted connections (HTTPS) between your browser and the website and between the website and the mail server, checks on the actual content of attachments, a limit on the number of submissions, restricted access to systems. The form does not store messages on the website: it forwards them by email to the company mailbox.

We make no decisions based solely on automated processing and do no profiling (Art. 22 GDPR).

6. Who it may be disclosed to

Data is neither published nor sold. It may be accessed, only as far as necessary, by the providers that help us run the website and email, appointed as data processors (Art. 28 GDPR):

  • those who develop and technically manage the website;
  • the provider of the infrastructure on which the website is published;
  • the email service provider, which delivers the form messages.

It may also be disclosed to public authorities where required by law. The up-to-date list of processors is available on request at [email protected].

7. Where it is processed

Data is processed on servers located in the European Economic Area or in Switzerland, a country for which the European Commission has recognised an adequate level of protection (Art. 45 GDPR). We do not transfer data to other countries.

8. How long we keep it

  • Form messages, emails and related correspondence: for as long as needed to handle the request and, if no relationship follows, for no more than 24 months from the last contact. If a contractual relationship follows, for its duration and then for the period required by law, usually 10 years for accounting and tax records (Art. 2220 of the Italian Civil Code).
  • Browsing data and technical logs: up to 90 days, unless needed longer to establish an offence or at the request of the authorities.
  • IP address for the form submission limit: kept in memory for one minute, then deleted.
  • Language cookie: until the browser is closed.

9. Your rights

At any time you can ask the controller for:

  • access to your data and a copy of it (Art. 15 GDPR);
  • rectification of inaccurate data or completion of incomplete data (Art. 16);
  • erasure, where applicable (Art. 17);
  • restriction of processing (Art. 18);
  • portability of the data you provided, in a commonly used format (Art. 20);
  • to object to processing based on legitimate interest, on grounds relating to your situation (Art. 21).

To exercise them write to [email protected]: we will reply without delay and in any case within one month (Art. 12 GDPR). Exercising your rights is free of charge.

If you believe the processing breaches the law you can lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it (Art. 77 GDPR) — or with the supervisory authority of the country where you live or work, or go to court.

10. Changes to this notice

We may update this notice when the processing or the law changes. The version in force is always this page, with the date of the last update below.

Last updated: 2 October 2026

Contact