Privacy notice
Last updated: 12 October 2026
Text to be reviewed by a legal advisor.
This notice explains which personal data we collect when you visit this site or write to us through the contact form, why we use it and which rights you have. It is written under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Data controller
The data controller is Salugenesis S.r.l., Via Ofanto 26L, Pomezia (RM), VAT number 18321811004.
Email: info@salugenesis.it. Certified email (PEC): salugenesis@pec.it.
Which data we process
- Data you give us through the contact form: name, email, phone, project type, the text of your message and the confirmation that you have read this notice. You fill in these fields voluntarily; without them we cannot reply.
- Technical browsing data: as with any site, the server records the IP address, browser type, requested page, date and time. We use it to run the site, protect it and find faults.
- Visit statistics: we use Vercel Web Analytics, which counts visits in aggregate form, without third-party cookies and without following you from one site to another. A visitor is recognised only by a code computed from the request, which Vercel discards after 24 hours.
- Anti-spam: when it is enabled, the form uses Cloudflare Turnstile, which reads some technical signals from the browser (for example IP address and user agent) to tell a person from an automated program. The form also has a hidden trap field and a limit on the number of submissions per IP address.
We do not collect special categories of data (such as health data). Please do not write them in your message.
Why we use it and on which basis
| Purpose | Legal basis |
|---|---|
| Replying to your request for contact or information about our products and services | Pre-contractual measures taken at your request (art. 6.1.b GDPR) |
| Site security, spam and abuse prevention, technical server logs | Legitimate interest of the controller (art. 6.1.f GDPR) |
| Aggregate statistics on the use of the site | Legitimate interest of the controller (art. 6.1.f GDPR) |
| Showing you the Cal.com calendar, if you choose to load it | Your consent, given through the cookie banner (art. 6.1.a GDPR) |
How long we keep it
- Messages sent through the contact form, which reach us by email in the company mailbox: 24 months from receipt, then deleted. If a contract is concluded in the meantime, the data needed for it follows the retention periods of that relationship and of the law.
- Data used by the submission limit (IP address and attempt times): used for 10 minutes to limit submissions, kept only in the server's temporary memory and not saved anywhere else.
- Technical server logs and aggregate statistics: for the time set by the service provider, which you can read in its notice.
- The cookie with your cookie choice: 180 days, in your browser (see the cookie policy).
Who processes data on our behalf
To run the site we use providers that process data on our behalf (data processors):
- Vercel: hosts the site and provides the visit statistics without third-party cookies. Vercel privacy policy.
- Resend: sends us the message you wrote in the form, by email. Resend privacy policy.
- The provider of the company mailbox: receives and keeps the emails that arrive at info@salugenesis.it, including the form messages.
- Cloudflare (Turnstile): anti-spam check of the form, when it is enabled. To provide us with the check Cloudflare acts on our behalf; for the technical signals it uses to improve the detection of automated programs it is instead an independent data controller, as explained in its Turnstile privacy addendum.
- Sanity: stores only the content of the site (texts, images, articles). It does not receive or keep form data. Sanity privacy policy.
- Cal.com: only if you load the calendar on the Contact page or click "Book 30 minutes". In that case Cal.com processes the data you enter to book as an independent data controller, under its own policy: Cal.com privacy policy.
Your data is not sold or used to profile you. It may be shared with advisors and professionals bound by confidentiality, only when needed to reply to your request, and with the authorities when the law requires it.
Transfers outside the European Union
Some of the providers listed may also process data in the United States. In those cases the transfer relies on the safeguards each provider declares in its own notices, for example the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. For the details of each provider, read the notices linked above.
Your rights
You can ask us at any time:
- to know whether we process your data and to receive a copy of it (access, art. 15);
- to correct inaccurate data (rectification, art. 16);
- to delete it (erasure, art. 17);
- to restrict its processing (art. 18);
- to receive it in a commonly used format, or to have it passed to another controller (portability, art. 20);
- to object to processing based on legitimate interest (art. 21).
Where processing is based on your consent, you can withdraw it at any time, without affecting processing already carried out: for third-party content, just change your choice with the "Cookie preferences" button at the bottom of every page.
To exercise your rights write to info@salugenesis.it. We reply within one month.
Complaint to the supervisory authority
If you believe the processing breaks the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali: www.garanteprivacy.it.
Other information
- We do not take decisions based solely on automated processing that produce effects on you, and we do not profile.
- The site is not aimed at minors and we do not knowingly collect their data.
- If we change this notice, we update the date at the top of the page.