Privacy Policy

1. Data controller

The data controller is Ygital, with registered office in Benevento (Campania), Italy. VAT ID: 01857050627. Email: info@ygital.com. Phone: +39 379 195 5630.

2. Types of data collected

Browsing data: IP address, browser, OS, pages visited, timestamps. Collected automatically by the systems hosting the site.

Voluntarily provided data: name, email, phone, message content when you fill the contact form, request a site audit or send an email via the footer fast contact.

Analytics data (only with consent): GA4/Meta Pixel cookie identifiers, interaction events (pageviews, clicks, scroll depth) collected via Google Tag Manager.

3. Purposes and legal basis

a) Reply to contact requests, quotes, consultations (Art. 6.1.b GDPR — pre-contractual measures).

b) Contract execution and customer relationship management (Art. 6.1.b GDPR — contractual performance).

c) Anonymous browsing analytics and usage statistics, only with consent (Art. 6.1.a GDPR — explicit consent).

d) Marketing and remarketing via advertising cookies, only with consent (Art. 6.1.a GDPR — explicit consent).

e) Compliance with legal, tax and accounting obligations (Art. 6.1.c GDPR — legal obligation).

4. Processing methods

Data is processed with electronic tools, in compliance with the principles of lawfulness, fairness, transparency, minimization, accuracy, storage limitation, integrity and confidentiality (Art. 5 GDPR). Technical measures: HTTPS transmission, strong authentication, encrypted backups, access logs.

5. Retention period

Contact data and quote requests: kept for 24 months from the last contact, unless they become a contractual relationship (in which case they follow tax retention terms).

Active customer data: for the duration of the contract + 10 years for tax obligations.

Analytics data: 26 months (GA4 default), revocable at any time.

Technical and consent cookies: variable duration, max 12 months.

6. Data recipients

Data may be communicated to third parties performing activities for the site or Ygital services as Data Processors under Art. 28 GDPR: hosting providers (Vercel Inc., USA, with Standard Contractual Clauses), email providers (Resend Inc., USA, with SCC), analytics (Google Ireland Ltd., EU), advertising (Meta Platforms Ireland Ltd., EU; Google Ads, EU). Full list of processors available on request at info@ygital.com.

7. Non-EU transfers

Some providers (Vercel, Resend) are USA-based. Transfer occurs with safeguards under Arts. 44-49 GDPR: EU Commission Standard Contractual Clauses and adequate technical measures (at-rest and in-transit encryption).

8. Data subject rights

You have the right to: access your data (Art. 15), rectify it (Art. 16), erase it (Art. 17), restrict processing (Art. 18), object to processing (Art. 21), receive data in structured machine-readable format (portability, Art. 20), withdraw consent at any time, file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights write to info@ygital.com stating the right you wish to exercise and the data concerning you.

9. Cookies

For detailed cookie info see the Cookie Policy.

10. Changes to this policy

Ygital reserves the right to update this policy at any time. Material changes will be notified via on-site banner. Check this page periodically to stay informed.