Privacy policy

Data controller

The controller is IS4ICT di Porras Maria Victoria, VAT no. IT10802340967, based at Via Friuli 9b, 20811 Cesano Maderno (MB), Italy.

For any request about your data: progetti@is4ict.com or, by certified email (PEC), is4ict@pec.it.

When you visit the site

The site is hosted by Firebase Hosting, a Google service. Like any web server, when you open a page it records the technical details of the request: IP address, date and time, the address requested and the type of browser. They are needed to keep the site running and to protect it from abuse and failures (legitimate interest, Article 6(1)(f) GDPR). Retention periods are those Google sets for the service.

The site sets no cookies and loads no scripts, fonts, maps, social-network buttons or analytics tools: pages and images all come from is4ict.com and the text uses your device's own fonts. That is why there is no cookie banner. Links to other sites, for example the digital-menu demo on iczone.it, take you away from here: the rules of those sites apply from then on.

When you write to us

If you write to progetti@is4ict.com we process your email address, your name if you give it, and the content of your message, including any data you choose to share with us. We use them to reply to you, prepare a proposal and manage the relationship that follows, if there is one. Legal basis: the pre-contractual steps you ask us to take (Article 6(1)(b) GDPR) or, for general enquiries, our legitimate interest in replying to people who write to us (Article 6(1)(f)).

Email for the domain is hosted by Google: a Google Workspace group, forwarded to a dedicated Gmail mailbox that our systems read. To manage replies, messages are also copied into the archive of our own systems, which run on Google Cloud in the Milan region.

To read messages and prepare replies we use an artificial intelligence assistant, Claude by Anthropic PBC (United States), which sees the text of messages and contact details. The assistant prepares drafts; replies to people who are in talks with us or are already clients are read by a person before they are sent.

Providing your data is optional, but without it we cannot reply. In the archive there is no automatic deletion: we keep data for as long as it serves this purpose and we delete it from the archive as soon as you ask us to. Nightly backup copies expire on their own after 90 days; the only things that remain are your address on the exclusion list, if you objected to the emails, and whatever the law requires us to keep. To ask, see “Your rights”.

Our emails to businesses and professionals

We write to businesses and professionals to offer our services (websites, automation, digital QR menus, AI assistants, cloud). We do not write to consumers.

We process the business's name, address, telephone number, website, the public ratings about it, our own assessment of its website (for example whether it is secure or works well on phones) and its professional contact email address. The sources are the public business listings on Google Maps and the business's own website, where the business itself publishes the email address. To choose what to offer and to write the email, the artificial intelligence assistant (Claude by Anthropic PBC, United States) sees the business's public details and our assessment of its website.

Legal basis: our legitimate interest in offering our services to people who carry on a professional activity (Article 6(1)(f) GDPR). Every email says who we are, why we are writing and how to receive no more. We write to the same business at most twice (a first email and, possibly, a single reminder), unless you reply to us.

To receive no more emails, just reply “unsubscribe” (or “cancella”, as our emails say). Your address goes on an exclusion list and from then on we do not write to you again: we keep it precisely in order to respect your request.

The emails are sent through Brevo, an email-sending service. The contact archive sits on our own systems on Google Cloud, in the Milan region. How long we keep data, and what remains after a deletion request, is as described above in “When you write to us”.

Who receives your data

To do what is described above we use:

• Google: Google Workspace for email, Firebase Hosting for the site, Google Cloud for our systems, Google Maps as the source of business details;
• Brevo, for sending the commercial emails;
• Anthropic PBC (United States), for the artificial intelligence assistant.

We do not sell personal data and we do not pass it on to others for their own purposes. We may disclose it to public authorities when the law requires it.

Some of these suppliers may process data outside the European Economic Area. They do so under the safeguards provided by the GDPR (Articles 44 onwards), described in their own privacy notices.

Your rights

Under Articles 15–22 of the GDPR you can obtain from us:

• access to your data and a copy of it (Article 15);
• rectification of data that is inaccurate or incomplete (Article 16);
• erasure (Article 17);
• restriction of processing (Article 18);
• notification to recipients of any rectification, erasure or restriction (Article 19);
• portability of the data you gave us, in a readable format (Article 20);
• objection to processing based on legitimate interest and, at any time, to commercial emails (Article 21);
• the right not to be subject to a decision based solely on automated processing that has effects on you (Article 22).

To exercise them, write to progetti@is4ict.com or to the PEC address is4ict@pec.it, stating the email address concerned. We reply without undue delay and in any case within one month (Article 12 GDPR); if the request is complex, that period may be extended by two months, and we will tell you.

If you believe the processing breaches the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), under Article 77 GDPR.

Updates

If the way we process data changes, we will update this page and its date. Last updated: 1 October 2026.