Privacy Policy

1. Data Controller

3Bit S.r.l.
Via Savona 125, 20144 Milan (MI) — Italy
VAT / Tax ID: 13952970963 — R.E.A. MI - 2753371
Email: hello@3bit.it
Tel: +39 02 94 75 11 74

2. Data collected and purposes of processing

2.1 Data provided voluntarily by the user

Through the contact form we collect: full name, email address, message. This data is processed solely to respond to contact requests (legal basis: performance of pre-contractual measures at the data subject's request, Art. 6(1)(b) GDPR).

2.2 Navigation data

IT systems automatically acquire certain navigation data (IP address, browser type, operating system, pages visited, date and time of visit). This data is processed for security and aggregate statistical analysis purposes (legal basis: legitimate interest of the controller, Art. 6(1)(f) GDPR).

2.3 Cookies

For detailed information on the use of cookies, please refer to the Cookie Policy.

2.4 Contact form protection (Cloudflare Turnstile)

To protect the contact form from spam and automated submissions we use Cloudflare Turnstile, a service of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you visit a page that contains the form, Turnstile collects some technical data (IP address, TLS fingerprint and browser user agent) to tell people apart from automated programs. The service does not use profiling or marketing cookies.

For this purpose Cloudflare acts as a data processor on our behalf. The legal basis is our legitimate interest in protecting the site and communications from abuse (Art. 6(1)(f) GDPR). Cloudflare also processes the same data, as an independent controller, to improve its bot detection systems. More information in the Turnstile privacy notice.

3. Processing methods and retention

Data is processed using electronic tools with adequate security measures to prevent unauthorised access, loss or disclosure. Data provided via the contact form is retained for the time strictly necessary to manage the request and, if a contractual relationship is established, for the period required by law (10 years under the Italian Civil Code).

4. Communication of data to third parties

Data is not disclosed or transferred to third parties, except:

• technical service providers acting as data processors (e.g. hosting providers, email services);
• Cloudflare, Inc., for the protection of the contact form (see section 2.4);
• competent authorities where required by law.

An updated list of data processors is available on request by writing to hello@3bit.it.

5. Transfers outside the EU

Some data may be processed in the United States by Cloudflare, Inc. for the protection of the contact form (section 2.4). Cloudflare is certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as adequate, and should that certification lapse it relies on the Standard Contractual Clauses approved by the Commission. The Google Maps map on the contact page loads only with your consent; in that case the data is processed by Google under its own privacy policy. Apart from these cases, data is not transferred to countries outside the European Economic Area.

6. Data subject rights

Pursuant to Arts. 15–22 GDPR, the data subject has the right to:

• Access: obtain confirmation of processing and a copy of the data;
• Rectification: request correction of inaccurate data;
• Erasure: request deletion of data ("right to be forgotten");
• Restriction: request restriction of processing;
• Portability: receive personal data in a structured format;
• Objection: object to processing based on legitimate interest;
• Withdrawal of consent: withdraw consent at any time.

Requests may be sent to hello@3bit.it. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Updates

This policy may be updated at any time. Changes will be published on this page with the date of update. We invite you to check it periodically.