Last updated: 3 July 2026
This notice describes how the personal data of users who browse this website and use the contact form is processed, pursuant to Art. 13 of EU Regulation 2016/679 ("GDPR").
1. Data Controller
The Data Controller is Alfredo Della Penna, based in Fabriano (AN), Italy, VAT no. IT02975110426, certified email (PEC) alfredo.dellapenna@ingpec.eu. For any request regarding your data you can write to info@sestantegroup.eu.
2. What data we process
We process the data you voluntarily provide by filling in the contact form: first and last name, company, email address, phone number (optional) and the content of your message.
We also automatically collect the technical browsing data strictly necessary for the website to function (for example the IP address in the server logs and a technical session cookie). See the Cookie Policy for details.
3. Purposes and legal basis
- Responding to requests sent through the contact form. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
- Ensuring the operation and security of the website. Legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR).
- Statistical analysis of traffic through Google Analytics 4, user-experience analysis (heatmaps and aggregated recordings of interactions) through Microsoft Clarity and, on advertising campaign pages, conversion measurement through Google Ads. Legal basis: your consent (Art. 6.1.a GDPR), collected via the cookie banner and withdrawable at any time.
- Complying with any applicable legal obligations. Legal basis: legal obligation (Art. 6.1.c GDPR).
4. How data is processed
Data is processed using IT tools and security measures appropriate to reduce the risks of unauthorised access, loss or disclosure. The contact form sends the data by email to the Controller; the website does not use any database to store user data.
5. Data retention
Data sent through the contact form is kept for the time needed to handle the request and any resulting relationship, and in any case no longer than the periods required by law. Technical server logs are kept for the time strictly necessary for security purposes.
6. Disclosure of data and transfer outside the EU
Data sent through the contact form is not disseminated or sold to third parties for marketing purposes. It may be processed by parties providing technical services to the Controller (for example the hosting provider), appointed as Data Processors pursuant to Art. 28 GDPR, with data stored on servers located within the European Union.
Data collected by statistics, user-experience analysis and measurement cookies is processed by Google Ireland Ltd. (Google Analytics 4 and Google Ads) and by Microsoft Corporation (Microsoft Clarity) as Data Processors. These services may involve a transfer of data to the United States: such transfer takes place on the basis of the safeguards provided for by the GDPR, namely Google's and Microsoft's adherence to the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Google Analytics 4 processes IP addresses in anonymised form. Further details about cookies and how to withdraw consent are in the Cookie Policy.
7. Your rights
As a data subject, you may exercise at any time the rights provided for by Arts. 15-22 GDPR: access, rectification, erasure, restriction, objection to processing and data portability. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
To exercise your rights, write to info@sestantegroup.eu.
8. Provision of data
Providing the data marked as mandatory in the contact form is necessary in order to respond to your request. Failure to provide it makes it impossible to follow up on the request.
9. Changes to this notice
The Controller reserves the right to update this notice. Any changes will be published on this page with the date of last update.