Privacy

Processing of personal data

Provided under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to those who visit this website or contact the practice.

This is a courtesy translation. In case of any discrepancy, the Italian version of this notice is the authoritative text.

1. Data controller

The data controller is Battisti Davide — HSE&Quality Consultant, Italian VAT number 02789690225, reachable at info@battistidavide.it, at the certified address db.davidebattisti@pec.it or on +39 338 8210771.

No Data Protection Officer has been appointed, the conditions of article 37 of the Regulation not being met.

2. What data is processed

The site contains no data collection forms, no newsletter and no statistics or tracking tools. No special categories of data under article 9 of the Regulation are collected.

3. Cookies

This site sets no cookies, neither technical nor profiling ones, and embeds no third-party content (fonts, maps, videos, social buttons) capable of setting them. That is why no consent banner is shown: there is nothing to consent to.

4. Purposes and legal basis

• Operation and security of the site — server logs are necessary to serve the page and to detect abuse. Legal basis: legitimate interest of the controller, article 6(1)(f).
• Replying to enquiries — processing the data contained in your message is the only way to answer it. Legal basis: pre-contractual measures taken at your request, article 6(1)(b).
• Managing the professional relationship, where an enquiry leads to an engagement — legal basis: performance of the contract, article 6(1)(b), and compliance with tax and legal obligations, article 6(1)(c).

Providing your data is voluntary. Without contact details, however, it is materially impossible to reply to an enquiry.

5. How long it is kept

• Server logs: for the technical period set by the hosting provider, usually a few days, save for the investigation of offences.
• Correspondence that does not lead to an engagement: no longer than 24 months from the last contact.
• Records relating to a professional engagement: 10 years from its closure, as civil and tax obligations require.

6. Who it is disclosed to

Data is not disseminated and is never sold or transferred to third parties for commercial purposes. It may come to the knowledge only of:

• the hosting and email service provider, appointed as data processor under article 28 of the Regulation;
• the practice's own advisers (in particular the accountant) and, where required, public authorities to whom disclosure is compulsory by law.

Data is stored on servers located within the European Union. No transfers to third countries are envisaged.

7. Your rights

At any time you may ask the controller for access to your data (article 15), its rectification (article 16) or erasure (article 17), restriction of processing (article 18), portability (article 20), and you may object to processing based on legitimate interest (article 21).

Requests go to info@battistidavide.it or to the certified address above, and receive a reply within one month. If you believe the processing infringes the Regulation you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or bring proceedings before the courts.

8. Automated decision-making

No profiling and no automated decision-making within the meaning of article 22 of the Regulation is carried out.

9. Updates

This notice may be updated: the version published on this page is always the one in force.

Last updated: September 2026.