1. Data controller
The data controller is EBM Solution S.r.l., with registered office at Via Alessandria 25, 00198 Rome (RM), Italy, VAT number 12900541009, REA RM1408768.
For any privacy-related matter you can contact us at:
- Email: [email protected]
- Certified email (PEC): [email protected]
- Phone: +39 06 9292 9454
2. Personal data collected and purposes
The site ebmsolution.com is a static information site with no registration, purchase or contact forms. The only structured collection of personal data takes place through the booking platform book.ebmsolution.com, developed and managed internally by EBM Solution S.r.l.
The details of the processing carried out are set out below.
| Processing | Data collected | Purpose | Legal basis |
|---|---|---|---|
| Site browsing | IP address, browser, pages visited, session duration | Aggregate statistical analysis of traffic (self-hosted Matomo), security and abuse prevention | Legitimate interest (Art. 6(1)(f) GDPR) |
| Call booking (book.ebmsolution.com) | Company name, VAT number, tax code, legal form, sector, PEC, website, registered office; first name, last name, role, email, phone of the contact person; free-text description of the request | Handling the commercial contact request and arranging the appointment | Explicit consent of the data subject (Art. 6(1)(a) GDPR) |
| Commercial communications | Email, first name | Sending newsletters, service updates and commercial communications | Optional consent of the data subject (Art. 6(1)(a) GDPR) — separate and independent from the mandatory consent |
3. Third parties processing data on behalf of the controller
Operating the site involves technical interaction with the following third parties, which act as data processors or as independent controllers for their own purposes.
Cloudflare Inc.
The site is protected and delivered through Cloudflare, which acts as a reverse proxy. Cloudflare processes visitors’ IP addresses for security purposes, DDoS attack prevention and content delivery optimisation. The processing is based on the controller’s legitimate interest in site security. Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare privacy policy: cloudflare.com/privacypolicy
Google LLC — Google Fonts
The site loads typefaces through the Google Fonts service (Google CDN). When the page loads, the user’s browser makes a request to Google’s servers, transmitting the IP address. This processing is based on the controller’s legitimate interest in the correct delivery of the service. Google is certified under the EU-US Data Privacy Framework. Google privacy policy: policies.google.com/privacy
Matomo Analytics (self-hosted)
The site uses Matomo Analytics in self-hosted mode, which means that all browsing data is stored exclusively on servers owned by EBM Solution S.r.l., with no transfer to third parties. IP addresses are anonymised before storage. No cross-site tracking cookies are used.
4. Data retention
Data collected through the booking form is kept for the time strictly necessary to manage the commercial relationship and, in the case of a contract, for the applicable legal obligations (generally ten years from the end of the contractual relationship for tax documents).
Browsing data recorded by Matomo is kept in aggregate and anonymised form for a maximum of 24 months.
Data processed on the basis of optional consent for commercial communications is kept until the data subject withdraws consent.
5. Rights of the data subject
Under Articles 15–22 of the GDPR, every data subject has the right to:
- Access — obtain confirmation that processing is taking place and receive a copy of the data;
- Rectification — have inaccurate data corrected or incomplete data completed;
- Erasure (“right to be forgotten”) — request the deletion of your data, subject to legal obligations;
- Restriction — obtain restriction of processing in certain circumstances;
- Portability — receive the data in a structured, machine-readable format;
- Objection — object to processing based on legitimate interest;
- Withdrawal of consent — withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights, simply send a written request to [email protected] or [email protected]. We will reply within 30 days of receiving the request.
You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
6. Transfers to third countries
Data processed through Cloudflare and Google Fonts may be transferred to the United States. Both entities adhere to the EU-US Data Privacy Framework, which ensures an adequate level of protection under Art. 45 GDPR and the European Commission’s adequacy decision of 10 July 2023.
Data collected through the booking platform and data processed by Matomo remain on servers located in Italy or in the European Union.
7. Data of minors
EBM Solution S.r.l.’s services are intended exclusively for adults acting as business owners, professionals or their representatives. We do not knowingly collect personal data of persons under 18 years of age.
8. Updates to this policy
This policy may be updated following legal, technological or organisational changes. The date of the last update is shown at the top of the page. In the event of substantial changes, we will notify users through a notice on the site.
9. Cookies
For detailed information on the use of cookies and tracking technologies by this site, please refer to the Cookie Policy.