Privacy policy

Courtesy translation: this English version is provided for convenience. In the event of any discrepancy, the Italian privacy policy prevails.

Information provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) to users of the bzsolutions.it website.

Last updated: 9 October 2026.

1. Data controller

The Data Controller is BZSolutions S.R.L., with registered office at Viale Italia 59, 20094 Corsico (MI), Italy, VAT no. IT02886020128.

For matters concerning the processing of personal data, please contact:

• e-mail: info@bzsolutions.it
• certified e-mail: bz@pec.it
• post: BZSolutions S.R.L., Viale Italia 59, 20094 Corsico (MI), Italy

2. Data processed

The following data may be processed while using the website:

• browsing data, such as IP address, date and time of the request, requested page, referrer, user agent, response outcome and technical information required for the operation and security of the service;
• data provided through the contact form, namely name, e-mail address, optional telephone number, subject, message content and confirmation that the privacy notice has been read;
• privacy preference, stored in the browser to remember whether analytics have been accepted or rejected;
• analytics data, collected with Matomo only after the user has made a positive choice and only in the environment where the service is enabled.

The form does not request special categories of data under Article 9 GDPR. Please do not include health or biometric data, information concerning religious or political beliefs, sex life, racial or ethnic origin, or unnecessary criminal offence data in the message.

3. Purposes and legal bases

Data are processed to:

• provide the website, ensure its integrity and security, diagnose technical problems and prevent abuse, on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR);
• receive and manage user requests and take any requested pre-contractual steps (Article 6(1)(b) GDPR), or answer non-contractual communications on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR);
• comply with legal obligations or requests from public authorities (Article 6(1)(c) GDPR);
• produce usage statistics with Matomo, exclusively on the basis of consent (Article 6(1)(a) GDPR).

Storing the privacy choice on the device is necessary to retain the preference expressed. Providing data through the form is optional, but fields marked as required are necessary to handle the request. Rejecting analytics does not restrict browsing or use of the form.

4. Browsing, hosting and technical logs

The website is published as a set of static files on web infrastructure managed for BZSolutions. The server retains technical logs containing IP addresses and the browsing data listed in section 2 for operation, diagnostics, security and incident management, as well as any applicable legal obligations. Network systems and security tools may also generate logs. Hosting, connectivity and maintenance providers may process this information on behalf of the Controller to the extent necessary to provide, maintain and protect the service.

Browsing data are not used by the website for behavioural advertising or commercial profiling. They may be disclosed to public authorities where required by law or used to establish liability in the event of cyberattacks or computer-related offences.

5. Contact form and Web3Forms

When the user selects “Send message”, the browser transmits the form data via HTTPS to Web3Forms, a service operated by Web3Creative at api.web3forms.com. The service forwards the request to the mailbox associated with BZSolutions. The website uses an anti-spam honeypot field and does not load Web3Forms CAPTCHA or scripts during normal browsing.

According to the Web3Forms privacy policy and its Data Processing Agreement, updated on 13 July 2026:

• for data entered in forms, Web3Creative describes the customer as the Controller and its service as the processor;
• the stated infrastructure includes Amazon Web Services, Cloudflare and Hetzner; anti-spam checks may involve CleanTalk or Akismet and may process the IP address and e-mail address;
• Web3Creative operates from India and providers may process data in several regions; the provider refers to Standard Contractual Clauses as a safeguard for transfers governed by European law;
• request data may be retained by the provider for up to three years after submission, unless a shorter period applies or the data are deleted sooner; according to the DPA, dashboard visibility depends on the plan and does not necessarily reflect the actual retention period; provider logs are deleted periodically.

As an alternative to the form, users can always write directly to info@bzsolutions.it.

6. Matomo analytics

In production, the website is prepared to use a Matomo installation available at matomo.bzsi.eu, with site ID 1. Matomo is not loaded before consent to analytics and is disabled in the test environment.

After consent, Matomo may process the page visited, source, date and time, user agent, IP address, page views and interactions with links or downloads. Analytics data, including IP addresses, are retained for 180 days. The website code is configured to:

• create no Matomo cookies through disableCookies;
• respect the browser’s “Do Not Track” signal through setDoNotTrack;
• disable additional browser feature detection through disableBrowserFeatureDetection.

The choice can be changed at any time through “Privacy preferences” in the footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal and stops subsequent measurements from the browser.

7. LocalStorage and external services

The website does not use advertising or profiling cookies. To remember the analytics choice, it stores the key bzsolutions-consent-v1 in the browser’s localStorage, with the value granted or denied. This information remains on the device until the user changes the preference or deletes the website data.

The value does not contain data entered in the form and is not transmitted to Matomo. Detailed information about these tools and how to manage them is available in the Cookie policy.

8. Recipients and transfers

Data may be processed by personnel authorised by the Controller and by providers required for hosting, connectivity, maintenance, e-mail, contact forms and analytics. Depending on the service and applicable agreements, these parties may act as processors or independent controllers.

The Controller does not disseminate personal data. Data may be disclosed to advisers or public authorities only where necessary to protect a right, comply with an obligation or answer a lawful request. Transfers connected with Web3Forms are described in section 5.

9. Retention

Data are retained no longer than necessary for the purposes for which they are processed. In particular:

• server technical logs, including IP addresses, are retained according to the periods applied by the infrastructure for service delivery, diagnostics, security and incident management, and for any applicable legal obligations; their retention is separate from Matomo analytics;
• contact requests and subsequent correspondence are retained for the time needed to reply and manage the relationship, and afterwards within the limits required by law or to protect the Controller’s rights;
• Web3Forms applies the maximum period and deletion options described in section 5;
• Matomo analytics data, including IP addresses, are retained for 180 days;
• the localStorage preference remains on the device until it is changed or the website data are deleted.

10. Data subject rights

In the cases provided by Articles 15–22 GDPR, data subjects may request access, rectification, erasure, restriction and portability of their data, object to processing and withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to info@bzsolutions.it or to the certified e-mail address given in section 1. Data subjects may also lodge a complaint with the Italian Data Protection Authority or contact the supervisory authority in the European Union country where they live or work, or where they believe the infringement occurred.

11. Children and automated decisions

The website is not specifically directed at children. No solely automated decisions producing legal or similarly significant effects on the user are made, and no commercial profiling is carried out.

12. Security and updates

The Controller implements technical and organisational measures appropriate to the risk. However, no Internet transmission can be guaranteed to be completely secure. This notice may be updated following legal, organisational or technical changes; the date shown above identifies the current version.