Privacy Policy

The data controller is DataMind S.r.l., with its datacenter and operating premises in Novara (Italy).

You can contact the controller about any matter relating to your personal data at info@datamindsrl.it, or by certified email (PEC) at amministrazione@pec.datamindsrl.it.

DataMind S.r.l. has its registered office at Via delle Mondariso 3, 28100 Novara (NO), Italy, tax code and VAT number 02853910038, REA NO-326019, share capital €12,000.00 fully paid up.

The sections of this notice that deal with browsing the website and with contact requests concern the users of the site and the people who contact us through those channels. The processing relating to customers, to their contacts and to the people who enter the datacenter is described in the dedicated section “Customers, contacts and datacenter access”.

Data you voluntarily provide: when you fill in the contact form we process your name, email address, subject and message content. This data is necessary to reply to your request.

Browsing data: the IT systems and software procedures that run this website acquire, during normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, browser and device type, and the date and time of the request). This data is used solely to ensure the correct operation and security of the site.

Cookies and similar technologies: for more information on the cookies we use, please see our Cookie Policy.

To respond to requests sent through the contact form and manage business contacts. Legal basis: performance of pre-contractual measures requested by the data subject and the controller's legitimate interest in following up on requests (Art. 6(1)(b) and (f) GDPR).

To provide any requested services and manage the related relationship. Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

To ensure the security of the site, prevent abuse and fraud and diagnose technical problems. Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).

To comply with obligations under the law, a regulation or an authority. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Processing is carried out using IT and electronic tools, with logic strictly related to the stated purposes and in accordance with the principles of lawfulness, fairness, data minimisation and storage limitation.

We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction or disclosure, including encryption, access control, redundancy and constant monitoring of our infrastructure.

Data is processed at DataMind's datacenter in Novara and at the premises of the providers involved, within the European Union. Customer data remains stored in Italy.

Where certain services involve a transfer of data to third countries, such transfer takes place only subject to appropriate safeguards under Art. 44 et seq. GDPR (for example the standard contractual clauses approved by the European Commission).

Data sent through the contact form is kept for as long as necessary to handle the request and to develop any business relationship, and in any case normally no longer than 24 months from the last contact, unless different legal obligations apply.

Technical browsing data is kept for a limited period, normally no longer than 12 months, except where needed to detect unlawful acts or upon request of the authorities.

Data may be processed by the controller's authorised staff and by service providers acting as data processors, for example for hosting, infrastructure, email delivery and technical maintenance of the site.

This website embeds a Google Maps map provided by Google Ireland Limited; displaying the map may involve the disclosure of data to Google, which acts as an independent controller. Further details are available in our Cookie Policy and in Google's privacy policy.

Data is not disclosed publicly and is not sold to third parties.

This section covers the personal data DataMind processes as a controller in its dealings with the customers of its services (cloud, virtual servers, storage, backup, colocation and ancillary services), with their contacts, and with the people who enter the Novara datacenter. It does not cover the data customers host on our services: for that data DataMind acts as a processor, under the agreement signed with each customer pursuant to art. 28 GDPR.

What data we process

• identification and contact details of legal representatives, administrative and technical contacts and the users named by the customer;
• data relating to the contract, invoicing and payments;
• support requests, reports and communications exchanged with us, handled with a ticketing system installed in the DataMind datacenter;
• for physical access to the datacenter: first name, surname, company, identity document details, date and time of entry and exit;
• images recorded by the datacenter's video surveillance system;
• technical security and operational data about the infrastructure relating to the customer's resources (for example IP addresses, access events on the management systems, abuse reports), without access to the content of the customer's data.

The data of contacts and of people authorised to enter is given to us by the customer, who undertakes to inform them.

Who receives this data

Authorised DataMind personnel; the supplier of the invoicing software; the supplier of the email and certified email (PEC) services (Aruba S.p.A.); the supplier of the endpoint protection platform installed on DataMind's systems; the accountant and consultants; banks, for payments; the authorities, where required by law. Suppliers act as processors.

Where we process this data

Data is processed in Italy and within the European Union. The technical data of the endpoint protection platform is stored within the European Union; the supplier is based in the United States and any access from that country takes place on the basis of the supplier's participation in the EU-U.S. Data Privacy Framework or of the standard contractual clauses (arts. 45 and 46 GDPR).

This section concerns the personal data of those who send us a notice under art. 16 of Regulation (EU) 2022/2065 (Digital Services Act), through the form published on the dedicated page or to abuse@datamindsrl.it.

Data processed and purposes

We process the name and email address of the notifying party, the content of the notice and the technical identification of the information notified, for the purposes laid down by the Regulation: confirming receipt of the notice, assessing it, taking any measures and communicating the decision.

Legal bases

The provision of a name and email address is required by art. 16(2)(c) of Regulation (EU) 2022/2065; for notices concerning the offences referred to in arts. 3-7 of Directive 2011/93/EU those details are not required, and without them we cannot send a confirmation of receipt or communicate the decision.

Disclosure to the customer notified

In order to assess the notice we generally request a response from the customer concerned. On that occasion we communicate the necessary content of the notice without transmitting the name, email address or other identifying data of the notifying party. Those data may be communicated where strictly necessary for the assessment or protection of a right, where the nature of the notice makes identification of the notifying party indispensable, or where disclosure is required by law or requested by a competent authority.

Special categories and criminal offence data

A notice may contain, on the initiative of the person sending it, special categories of personal data or data relating to criminal convictions and offences. Please include only the information necessary to identify and assess the content notified. Access to notices is limited to the staff who handle them.

Retention

Data relating to notices is kept, as a rule, for 12 months from the closure of the assessment. It may be kept for a further period where necessary to comply with legal obligations, to act on requests from an authority, to establish, exercise or defend a right, or to handle ongoing proceedings or a dispute.

At any time you can exercise the rights granted by Art. 15-22 GDPR: access to your data, rectification, erasure, restriction of processing, objection to processing, data portability and, where processing is based on consent, withdrawal of consent.

To exercise your rights you can write to info@datamindsrl.it. We will respond within the time limits set by law.

If you believe that the processing of your data infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garante.it) or with the supervisory authority of the EU country where you reside.

This website and our services are not directed to children under 16 and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

We reserve the right to update this notice at any time, publishing changes on this page and indicating the date of the last update. We encourage you to review it periodically.