PRIVACY

Pursuant to Regulation (EU) 2016/679 (“GDPR”)
Website: www.skytool.it

1. Data Controller

The data controller for the personal data collected through this website is:

For any request regarding the processing of personal data or the exercise of rights under the GDPR, the data subject may contact the Data Controller at the contact information provided above, specifying “GDPR Request” in the subject line.

2. Scope of the Privacy Policy

This privacy policy applies exclusively to this website www.skytool.it and describes how the personal data of users who visit the site or interact with the services and forms on the site is processed.

This privacy policy does not apply to other websites that the user may visit via external links on this site.

3. Types of Data Processed

The Data Controller may process the following categories of personal data:

a) Browsing data
The computer systems and software procedures used to operate the website automatically collect certain data during their normal operation; the transmission of this data is implicit in the use of Internet protocols.
These may include, by way of example: IP addresses or domain names of the devices used, URI identifiers of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, a numeric code indicating the status of the server’s response, and other parameters related to the user’s operating system and computing environment.

b) Data voluntarily provided by the user
The optional, explicit, and voluntary submission of messages via the contact information published on the website or through the information request forms entails the processing of the data provided by the user, such as: name, email address, company, phone number, subject of the request, and content of the message.

c) Data collected through cookies and similar technologies
This website uses technical cookies and, subject to the user’s choice where required, may also use analytics cookies and/or other tracking tools, as described in more detail in the Cookie Policy section.

4. Purposes of Processing and Legal Bases

Personal data is processed for the following purposes:

a) To enable navigation and the proper technical functioning of the site
Legal basis: Article 6(1)(f) of the GDPR; the Data Controller’s legitimate interest in ensuring the functionality, security, and stability of the website.

b) Handle requests for information, business inquiries, demonstrations, or communications sent by the user
Legal basis: Article 6(1)(b) of the GDPR, the performance of pre-contractual measures taken at the request of the data subject.

c) Ensure the security of the site; prevent abuse, unauthorized access, fraudulent activity, or unlawful use
Legal basis: Article 6(1)(f) of the GDPR; the Data Controller’s legitimate interest in protecting its rights and systems.

d) Collect aggregate statistics on website usage and improve its content, performance, and usability
Legal basis:

• Article 6, paragraph 1, subparagraph (f) of the GDPR, if the analytics tools are configured in such a way that they are comparable to technical cookies under applicable law;
  or

• Article 6, paragraph 1, subparagraph (a) of the GDPR; user consent, where required.

The Data Controller does not carry out processing based solely on automated decision-making or automated profiling that has legal effects or similarly significant effects on the data subject.

5. Nature of the Data Provision

Providing the information requested in the contact forms is optional, but necessary in order to respond to the user’s requests.
Failure to provide this information may make it impossible to process the requests you have submitted.

6. Methods of Processing

Data processing is carried out using IT and telecommunications tools, as well as, where necessary, manually, in accordance with the principles of lawfulness, fairness, transparency, data minimization, and integrity set forth in the GDPR.

The Data Controller implements appropriate technical and organizational measures to protect personal data from destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

7. Recipients of the Data

Personal data may be processed, on behalf of the Data Controller, by parties that provide services necessary for the operation of the website and the delivery of related services, such as, for example:

• hosting and IT infrastructure providers;

• providers of technical maintenance and on-site support;

• persons responsible for managing information technology systems and security;

• any providers of the cookie consent management platform;

• any analytics service providers, if they act as data processors.

These individuals act, when necessary, as Data Controllers pursuant to Article 28 of the GDPR or as independent data controllers, depending on their respective roles.

The data are not being disclosed.

8. Transfer of Data to Third Countries

Personal data is processed primarily within the European Economic Area.

If, for technical or organizational reasons, certain services involve the transfer of data to third countries, such transfer will be carried out in accordance with the conditions set forth in Articles 44 et seq. of the GDPR, with the appropriate safeguards in place.

9. Retention Period

Personal data is retained for no longer than is necessary to fulfill the purposes for which it was collected.

Specifically:

• Data submitted via contact forms or email is retained for as long as necessary to process the request and, thereafter, for the period required to handle any related developments;

• Technical data and system logs are retained for the time strictly necessary for security, monitoring, and maintenance purposes, within the limits permitted by applicable law;

• The data collected through cookies is retained for the duration specified in the relevant section of this policy or in the consent management system.

10. Rights of the Data Subject

The data subject may exercise, in the cases provided for, the rights set forth in Articles 15–22 of the GDPR, including:

• right of access to personal data;

• right to correction;

• right to erasure;

• right to restrict processing;

• right to object;

• the right to data portability, where applicable;

• the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise their rights, data subjects may contact the Data Controller using the contact information provided in this privacy notice.

The data subject also has the right to file a complaint with the Data Protection Officer, in accordance with the procedures set forth in current legislation.

COOKIE POLICY

11. What Are Cookies?

Cookies are small text files that the websites a user visits send to the user's device, where they are stored and then sent back to those same websites on the user's next visit.

While browsing, users may also receive cookies sent by other websites or services, which are installed through embedded elements on the page they are visiting.

12. Types of Cookies Used by the Website

Based on the information currently visible on the website, the following categories of cookies may be used.

a) Technical and operational cookies

These cookies are necessary for the proper functioning of the website, for secure browsing, for session management, and for storing user preferences regarding the cookie banner.

These cookies do not require the user's consent.

These may include, for example, cookies used by the consent management system, such as:

• viewed_cookie_policy

• cookielawinfo-checkbox-necessary

• cookielawinfo-checkbox-functional

• cookielawinfo-checkbox-analytics

• cookielawinfo-checkbox-performance

• cookielawinfo-checkbox-others

These cookies are associated with the consent system in use on the website.

b) Analytics cookies

The website states that it uses Matomo Analytics to collect aggregate statistics on the use of the site.

If Matomo is configured to significantly limit the ability of cookies and collected data to identify individuals, such tools may be processed as permitted by applicable laws and regulations. If, however, the actual implementation does not meet these requirements, the relevant cookies or tracking mechanisms will be activated only with the user’s prior consent.

The information collected may include, for example:

• number of visitors;

• pages viewed;

• length of the visit;

• traffic source;

• Aggregate interactions with the site.

c) Third-party cookies or embedded content

The website may include, now or in the future, third-party content or features. In such cases, the relevant providers may set cookies or similar tools in accordance with their own privacy policies.
Users are encouraged to review the policies of the respective providers, when applicable.

13. Legal Basis for the Use of Cookies

The use of technical cookies is based on the need to make the website and its essential features available.

The use of any analytics cookies that are not considered technical cookies, as well as any profiling or marketing cookies, is based on the user’s consent, which is expressed via the banner or the preferences management panel.

14. Consent Management

The website features a consent management system that allows users to:

• accept all cookies;

• reject non-essential cookies;

• Select your preferences in the “Cookie Settings” section or equivalent.

Users may change their preferences or withdraw their previously given consent at any time through the same consent management system, if available on the website.

15. Managing Cookies Through Your Browser

Users can also manage or disable cookies directly from their browser settings.
Disabling technical cookies may prevent certain sections of the website from functioning properly.

For more information, users can consult the documentation for the browser they are using.

16. Updates to This Privacy Policy

The Data Controller reserves the right to modify or update this Privacy and Cookie Policy, including in light of any regulatory, interpretive, or technical changes relating to the website and the services offered.

Last updated: March 12, 2026