01

Data controller

02

Types of data collected

2.1 Navigation data

When visiting this website, technical data necessary for the operation of internet protocols is automatically collected. This includes, among other things: IP addresses, browser type, operating system, date and time of access, pages visited and the referring website (referrer).

This data is not linked to other personal information and is deleted after a short period (generally within 7 days).

2.2 Data voluntarily provided by users

When you contact us via contact forms, email or other communication channels, we process the data you provide (e.g. name, email address, message content) solely for the purpose of handling your inquiry.

2.3 Cookies

This website uses technically necessary cookies that are essential for the operation of the site. For cookies that are not technically necessary (e.g. analytics, marketing or third-party cookies), your explicit consent is obtained before they are set. Further information can be found in our Cookie Policy, published separately on this website.

03

Purposes and legal bases of processing

04

Recipients of data

Your data is not sold or passed on to third parties for advertising purposes. Disclosure occurs exclusively:

to technical service providers acting as data processors under Art. 28 GDPR (e.g. hosting providers, email services); and where necessary to fulfil a legal obligation (e.g. public authorities, tax authorities).

Data is only transferred to third countries outside the European Economic Area (EEA) where an adequate level of protection is guaranteed — e.g. through an EU Commission adequacy decision or standard contractual clauses under Art. 46 GDPR.

05

Retention period

Personal data is stored only for as long as necessary for the respective processing purpose or as required by statutory retention obligations.

• Navigation data up to 7 days
• Contact inquiries up to 24 months after the correspondence has concluded
• Contract data in accordance with statutory retention periods — generally 10 years under the Italian Civil Code

06

Your rights (data subject rights)

Under Articles 15–22 GDPR, you have the following rights:

• Access — the right to obtain information about the data stored about you (Art. 15 GDPR)
• Rectification — the right to have inaccurate data corrected (Art. 16 GDPR)
• Erasure — the right to have your data deleted, unless retention obligations apply (Art. 17 GDPR)
• Restriction — the right to restrict processing (Art. 18 GDPR)
• Data portability — where processing is based on consent or a contract (Art. 20 GDPR)
• Objection — the right to object to processing (Art. 21 GDPR)
• Withdrawal of consent — possible at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR)

To exercise your rights, please contact: [info@tender.it]

07

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority. In Italy, this is:

08

External links

This website may contain links to external third-party websites. The respective operator is solely responsible for data protection on those websites. Tender Srl has no influence over their content or data protection practices.

09

Security

Tender Srl implements appropriate technical and organisational measures to protect your data from unauthorised access, loss or misuse (Art. 32 GDPR). Data transmission on this website is encrypted via the HTTPS protocol.

10

Changes to this Privacy Policy

This Privacy Policy may be updated as needed, for example due to changes in legal requirements or the services offered. The current version is available on this website.