Privacy policy
This policy describes how certalea.com processes the personal data of the people who visit it and of those who write to us. It is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR). This is a translation provided for convenience: in case of any discrepancy, the [Italian version](/privacy) is the legally binding one.
- Cookies
- One technical cookie, for the language
- Visitor analytics
- Anonymous, cookie-free
- Your data used to train AI models
- Never
- Deleting your data
- One email, whenever you want
Data controller
Antonio Cirino Murabito, sole proprietorship (ditta individuale), which operates under the Certalea brand until Certalea S.r.l.s. is incorporated. Registered office: Monreale, Italy. Italian tax code MRBNNC06A05L407Y, VAT number 07344720821.
- Data controller
- Antonio Cirino Murabito
- Certified email (PEC)
- antonio.murabito@pec.it
- Contact email
- antonio.murabito@msworks.it
Once Certalea S.r.l.s. is incorporated, the data controller will change: this policy will say so before it happens.
What data we collect
Data you give us. We receive it only if you write to us or become a client.
- Contact form
- Full name, email address, your message and, if you provide them, the service you are interested in and your budget range. We need them to reply to you.
- Emails you send us
- The address you write from and what you tell us.
- Quotes, contracts and invoices
- Full name or company name, Italian tax code or VAT number, SdI recipient code or certified email (PEC), address and email, and what you write to us so we can prepare the quote.
- Remote support
- During a screen-sharing session we may see the data on your screen, including other people's. We see it only for the length of the session and on your behalf, and we do not copy it. Where possible we work with sample data.
Data we process on behalf of clients. If a project has us work on personal data of your clients or your employees (a management system, an audit, an AI system working on your documents), you are the data controller and we process that data on your behalf as a processor, under a written agreement pursuant to Art. 28 GDPR. That processing is governed by the agreement, not by this policy.
Browsing data. Like any website, the server hosting certalea.com logs the requests it receives: IP address, date and time, page requested, browser. These logs are needed to run the site and protect it from abuse.
Visitor analytics. We count visits with Vercel Web Analytics, which uses no cookies and saves nothing on your device. It records the page, the page you came from, the country, the device type, the operating system and the browser; visitors are counted with a code derived from the request, which resets every day and cannot recognize you from one day to the next or across other sites. We do not use them to profile you and do not combine them with other data.
Cookies. The site sets a single technical cookie, for the language. If you choose the light or dark theme, the choice is saved in your browser: the details are in the cookie policy.
Why we process it, and on what legal basis
- Replying to people who write to usConsent and pre-contractual measures
- To reply to requests sent through the form or by email and to prepare a quote if needed, after you have accepted this policy.
- Quotes, contracts and invoicesPerformance of a contract and legal obligation
- To prepare a quote, deliver the service, issue the electronic invoice and keep the accounting records. Without the invoicing details we cannot conclude the contract.
- Operation and security of the siteLegitimate interest
- To serve the pages and to prevent or detect abuse.
- Visitor analyticsLegitimate interest
- To know which pages are read and where visitors come from, anonymously and without cookies.
Who receives the data
We process the data using IT tools, only for the purposes stated. Besides the data controller, it is received by:
- Giovanni LiguoriItaly
- Partner in Certalea. He receives the requests sent through the form and handles the AI, automation and training services, on behalf of the data controller.
- Vercel Inc.USA · Data Privacy Framework
- Hosts the site, logs its requests and counts visits anonymously (Web Analytics).
- ResendUSA · Data Privacy Framework
- Sends the requests from the contact form by email.
- Agenzia delle Entrate · Sistema di InterscambioItaly · legal obligation
- The Italian tax authority's exchange system receives the electronic invoice for every service, as the law requires.
The data is not sold, nor passed on to anyone for advertising purposes.
Transfers abroad
Vercel and Resend are based in the United States. The transfer takes place on the basis of the European Commission's adequacy decision on the Data Privacy Framework, or of the standard contractual clauses.
How long we keep it
- Form requests and emailsUp to 2 years
- The time needed to handle the request and any follow-up. If you become a client, the periods below apply.
- Quotes, contracts and invoices10 years
- Because of the obligation to keep accounting records (Art. 2220 of the Italian Civil Code).
- Browsing dataTechnical period
- For as long as the hosting provider keeps the request logs, after which they are deleted.
Your rights
You have the rights set out in Articles 15-22 GDPR. You can:
- request access to your data;
- request its rectification or erasure;
- request that processing be restricted;
- object to the processing;
- withdraw your consent at any time;
- request data portability;
- lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), at garanteprivacy.it.
To exercise them, write to antonio.murabito@msworks.it or to the certified email (PEC) antonio.murabito@pec.it.