Privacy Policy
This notice explains what personal data the website www.insulaesrl.it processes, why, and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Data controller
INSULAE SRL
Via Leonardo da Vinci, 58 – 90145 Palermo (PA), Italy
VAT number IT06889210826
Email: info@insulaesrl.it – Phone: +39 091 9767946
What data we process
Browsing data
Like any website, the server automatically logs some technical information on every visit: IP address, date and time of the request, page requested, browser type and operating system. This is needed to run the site, keep it secure and detect misuse.
Contact form
If you fill in the form on the Contacts page, you give us your name, email address, subject and message. We use this data only to reply to your request, for example for information, a quote or a collaboration.
Please do not include in your message any data that is not needed for your request, especially health data or other special categories of data.
Email and phone
If you write to us or call us using the contact details on the site, we process your contact details and the content of the communication to reply to you.
Cookies
The site uses technical cookies and, only with your consent, statistics cookies. Details are in the Cookie Policy.
Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to requests sent via the form, by email or by phone | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Protecting the form from spam with Cloudflare Turnstile and keeping the site secure | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Statistics on how the site is used (Google Analytics 4) | Consent given through the cookie banner (Art. 6(1)(a) GDPR) |
| Complying with legal obligations and defending our rights in case of disputes | Legal obligation and legitimate interest (Art. 6(1)(c) and 6(1)(f) GDPR) |
To reply to your request we need at least your name and email address; without them we cannot get back to you. Data is not used for automated decision-making or profiling, and is not passed on to third parties for marketing.
How we process data
Data is processed electronically by the controller and by authorised persons, with security measures appropriate to prevent loss, misuse and unauthorised access. The site uses HTTPS.
Who receives the data
Data is not made public. It may be received, only as far as needed for their task, by:
- Protocolli Creativi SNC, which develops and maintains the site;
- OVHcloud (OVH SAS, France), which hosts the site and its database in data centres in the European Union;
- Brevo (Sendinblue SAS, France), which delivers the emails sent by the site, including contact form requests;
- Google and Cloudflare, for the services described below;
- consultants and professionals working with us, when needed to follow up your request;
- public authorities, when required by law.
These parties act as data processors (Art. 28 GDPR) or as independent controllers for their own services.
Third-party services used by the site
- Google Analytics 4 (Google Ireland Limited): aggregated visit statistics. It is activated only if you accept the Statistics category in the cookie banner. Google Analytics 4 does not store IP addresses. Google Privacy Policy – opt-out browser add-on.
- Cloudflare Turnstile (Cloudflare, Inc.): protects the contact form by checking that it is filled in by a person and not by an automated program, without asking you to solve puzzles. To do this it receives your IP address and technical browser data. Cloudflare Privacy Policy.
- External links: the link to our location on Google Maps and the links to other websites (for example INSULAE Papers, partners and awards) load nothing until you click them. Once on the destination site, that site’s privacy notice applies.
The site’s fonts are hosted on our own server: displaying them does not send any data to third parties.
Transfers outside the European Union
The site is hosted in the European Union. Google LLC and Cloudflare, Inc. are based in the United States and participate in the EU-U.S. Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023: data processed for statistics and spam protection may be transferred to the United States under this safeguard. Brevo processes data in the European Union.
How long we keep data
- Requests via the form, email or phone: for as long as needed to reply and follow up, and in any case no longer than 24 months after the last contact unless a working relationship follows. In that case the retention periods required by law for contract and tax records apply (10 years).
- Browsing data and server logs: for as long as needed for site security, unless required to investigate crimes.
- Google Analytics statistics: 14 months.
- Cookies: for the duration shown in the Cookie Policy.
Your rights
At any time you can ask the controller to:
- confirm whether we process your data and give you a copy (Art. 15 GDPR);
- correct or update it (Art. 16);
- erase it (Art. 17), except data we must keep by law;
- restrict its processing (Art. 18);
- receive it in a structured format or have it transmitted to another controller (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw your consent to statistics cookies using the Cookie preferences link at the bottom of every page, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights write to info@insulaesrl.it. Requests are free of charge and you will receive a reply within one month.
If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the country where you live or work.
Minors
The site is aimed at professionals, companies and organisations. The contact form may only be used by people aged 14 or over.
Changes to this notice
We may update this notice, for example if the services used by the site change. The version in force is always the one published on this page.
Last updated: 27 October 2026