1. Data Controller
The data controller for this website is:
2. What Data We Collect
We collect personal data only when you actively provide it or when it is automatically generated by your use of the site. This includes:
- Contact form data — when you submit an enquiry, we collect your name, email address, company name, and the message you send.
- Usage data — via Google Analytics 4, we automatically collect anonymised information about how you use our website, including pages visited, time spent, device type, and approximate geographic location (country/city level).
- Cookie data — we use cookies to enable analytics and to remember your cookie consent preference.
3. How We Use Your Data
We use the data we collect for the following purposes:
- To respond to your enquiries and provide information about our products and services.
- To understand how visitors use our website and improve the user experience (analytics).
- To comply with legal obligations.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing
Under GDPR, we process your personal data on the following legal bases:
- Consent — for analytics cookies (Google Analytics 4), which are only activated when you accept cookies via our cookie banner.
- Legitimate interest — to respond to enquiries you initiate through our contact form.
- Legal obligation — where required by applicable law.
5. Cookies
Our website uses the following types of cookies:
- Essential cookies — required for the site to function correctly, including remembering your cookie consent choice. These cannot be disabled.
- Analytics cookies — Google Analytics 4 cookies that help us understand site traffic. These are only set if you click "Accept" on our cookie banner. You can withdraw consent at any time by clearing your browser cookies.
For more information about how Google uses data collected via Analytics, visit Google's Privacy Policy.
6. Data Retention
We retain contact form submissions for as long as necessary to respond to your enquiry and maintain a record of our correspondence — typically no longer than 3 years. Analytics data is retained in Google Analytics for 14 months by default.
7. Third-Party Services
We use the following third-party services that may process your data:
- Google Analytics 4 (Google LLC) — website analytics. Data may be transferred to and processed in the United States under Google's standard contractual clauses.
- Web3Forms — contact form processing. Your form submission data is transmitted securely to deliver your message to our inbox.
8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your personal data.
- Right to object — you can object to our processing of your data.
- Right to withdraw consent — for analytics cookies, you can withdraw consent at any time by clearing your browser cookies.
To exercise any of these rights, please contact us at info@kkdc.it. We will respond within 30 days.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and hosted on Cloudflare Pages, which provides enterprise-grade security infrastructure.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.
11. Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) at garanteprivacy.it.