Privacy & Cookie policy

This Privacy Policy describes how the website spaiq-srl.com is managed with regard to the processing of the personal data of visitors who browse it and the performance of any contractual relationships.

SPAIQ S.r.l. ensures compliance with personal data protection legislation, namely Italian Legislative Decree No. 196/2003 and Regulation (EU) 2016/679 (GDPR).

Please read this document.

1. Data Controller and Data Protection Officer

SPAIQ S.r.l., with its registered office at Via F. Cavazzoni, 25 - 40139 Bologna (BO), Italy, VAT No. 04225751207, e-mail info@spaiq-srl.com and PEC spaiqsrl@legalmail.it.

The Data Controller has not appointed a Data Protection Officer.

2. Personal data processed

The Data Controller may process:

• internet traffic data necessary for the operation of the website, including information recorded by IT systems in the course of their normal service provision activities (e.g. information relating to internet communication protocols, IP addresses and system access logs);
• cookies. Cookies are small text files that websites visited by users send to their devices, where they are stored and then sent back to the same websites on subsequent visits. Cookies are used for various purposes, have different characteristics and may be used both by the operator of the website being visited and by third parties. This website uses only technical cookies to ensure that it functions correctly, as also stated in the disclaimer at the bottom of the home page.

3. Purposes and legal bases of processing

All data processing operations are carried out in a manner that ensures the integrity, confidentiality and availability of personal data.

Personal data are processed for the following purposes:

1. the operational, technical and administrative management of the website;
2. security and the prevention of fraudulent conduct.

For the purposes referred to in point a), the legal basis for processing is the performance of the contract and the provision of services relating to the request to access the website.

For the purposes referred to in point b), the legal basis for processing is compliance with a legal obligation.

4. Methods of processing

Personal data may be processed using paper records or magnetic, electronic or online media, solely to the extent necessary to fulfil the purposes specified in this Privacy Policy and set out above, and in a manner that ensures their security and confidentiality.

5. Consequences of not providing personal data

For all the purposes set out in section 3, the provision of data is necessary to fulfil the relevant contractual obligations and comply with the associated legal obligations.

6. Data retention

Personal data processed for the purposes set out above will be retained for as long as the Company is subject to statutory or regulatory retention obligations for tax or other purposes.

Data are also processed as part of routine activities associated with the provision of the website service (e.g. fraud detection), in accordance with applicable legislation. In such cases, data are retained subject to stringent security measures applied in accordance with the law and subsequently deleted.

7. Transfers of personal data

The Data Controller will not transfer data to a third country unless this is necessary for the performance of the contract and appropriate and suitable safeguards are in place.

Personal data may be transferred to countries outside the EU covered by an adequacy decision of the European Commission pursuant to Article 45 et seq. of Regulation (EU) 2016/679.

8. Profiling and public disclosure of personal data

Your personal data are neither disclosed to the public nor used for profiling.

9. Disclosure of personal data

Your personal data may be disclosed to:

• external personnel, employees and suppliers for the provision of services associated with the requested service;
• accountants, lawyers or debt collection companies providing services that support the purposes set out above;
• finance companies, banks, digital payment institutions and insurance providers providing services that support the purposes set out above;
• tax authorities, public bodies, judicial authorities and supervisory authorities for compliance with legal obligations and the defence of rights;
• third parties (including, by way of example, payroll processing companies, credit institutions, professional firms, consultants, etc.) that perform outsourced activities on behalf of the Data Controller in their capacity as data processors.

Third-party suppliers and/or data processors engaged by the Data Controller adopt security measures to ensure compliance with applicable personal data protection legislation.

10. Rights of data subjects

Your rights under the GDPR include the right to:

• request from the Company access to your personal data and the related information; rectification of inaccurate data or completion of incomplete data; erasure of personal data (where one of the conditions set out in Article 17(1) of the GDPR applies and subject to the exceptions set out in paragraph 3 of the same Article); and restriction of the processing of your personal data (where one of the circumstances set out in Article 18(1) of the GDPR applies);
• request and receive your personal data from the Company in a structured, machine-readable format, including for the purpose of transmitting those data to another data controller, where processing is based on a contract or consent and is carried out by automated means (the right to data portability);
• object at any time to the processing of your personal data on grounds relating to your particular situation;
• withdraw your consent at any time, where processing is based on your consent for one or more specific purposes and concerns either personal data that do not fall within special categories or special categories of personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
• lodge a complaint with the supervisory authority (the Italian Data Protection Authority, Garante per la protezione dei dati personali, www.garanteprivacy.it).

You may in any case submit a request to the Data Controller by email at info@spaiq-srl.com or by certified email (PEC) at spaiqsrl@legalmail.it.

11. Links to third-party services

Our website may contain links to websites and/or plugins operated by third parties. We are not responsible for the privacy practices or any content of such linked websites, and we have no control over or rights in relation to them. The privacy practices applicable to those other websites may differ substantially from our Privacy Policy, so we encourage you to read them before using those websites.

12. Updates

The Data Controller may update and/or amend this document following guidance from supervisory authorities or in the event of organisational changes. Users should therefore check periodically for any changes.

Last updated: June 2026.