How we process your personal data

1. Who processes your data

The data controller is Skill-box S.r.l.. You can reach us at the details below for anything concerning your personal data.

The controller does not carry out activities that make the appointment of a Data Protection Officer (DPO) mandatory.

Registered office

Via Guelfa 76 – 40138 Bologna (BO)

E-mail

privacy@skill-box.com

PEC

skill-box@pec.it

Phone

0733 815791

VAT no.

02588581203

2. Which data we collect

Through this website we collect two kinds of data, and no others.

• The data you send us by filling in one of the contact forms: first and last name, business e-mail address, company, telephone number and the text of your message.
• The technical browsing data the server records automatically with every request: IP address, date and time, requested page, browser type and operating system. These are the ordinary logs of a web server and serve the operation and security of the service.

The site sets no cookies and uses no analytics, advertising or profiling tools. Details are in the cookie policy.

3. Why we process it, and on which legal basis

• To answer your request and give you the information you ask for about products, courses and services. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• To keep the site secure, available and maintained. Legal basis: our legitimate interest in protecting the infrastructure and the people who use it (Art. 6(1)(f)).
• To comply with legal obligations, where your request leads to a contractual relationship (Art. 6(1)(c)).

We do not process your data to send you unsolicited marketing, and we use it for no automated decision-making and no profiling.

4. If you choose not to provide it

Providing your data is voluntary. The data requested in the forms is however what we need to get back to you: without it we cannot follow up on your request. There is no other consequence.

5. How long we keep it

• Data sent through the forms: for as long as it takes to handle the request and, where a contractual relationship follows, for the duration of that relationship and the retention periods required by law. If the request leads nowhere, no longer than 24 months from the last contact.
• Server logs: no longer than 12 months, unless they must be kept longer to establish liability in the event of computer crime.

6. Who can access the data

The data is processed by the controller's authorised staff and by the suppliers that provide us with technical services — in particular whoever hosts the site and provides our e-mail service. These suppliers are appointed as processors under Art. 28 GDPR and act on our written instructions.

We do not transfer, sell or disclose your data to third parties for purposes of their own.

7. Transfers outside the European Union

The pages of this site load no resources from third-party services: typefaces, images and video are served from our own domain. Simply visiting the site therefore involves no communication of data abroad.

Where a technical supplier processes data outside the European Economic Area, the transfer takes place only under an adequacy decision of the European Commission or the other safeguards set out in Chapter V GDPR.

8. How we protect it

Processing is carried out with electronic means and with technical and organisational measures appropriate to protect the data against unauthorised access, loss, alteration and disclosure. The site is served exclusively over an encrypted connection (HTTPS).

9. Your rights

At any time you can exercise the rights set out in Articles 15-22 GDPR:

• access your personal data and obtain a copy of it;
• ask for it to be corrected, if inaccurate, or erased;
• ask for processing to be restricted, or object to processing based on our legitimate interest;
• receive your data in a structured, commonly used format and transmit it to another controller (portability);
• withdraw your consent, where processing is based on it, without affecting the lawfulness of processing already carried out.

To exercise them write to privacy@skill-box.com or, by certified e-mail, to skill-box@pec.it: we will reply within one month. If you believe the processing of your data infringes the GDPR you may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or bring the matter before the courts.

10. Changes to this notice

We may update this notice to reflect changes in the law or in how the site works. The date of the last update is shown at the top of the page; where changes are substantial, we will say so clearly.