This notice explains how Diaferia SRL processes personal data collected through www.diaferia.it, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable Italian law.

1. Data Controller

Diaferia SRL
Via degli Imbianchini, 7 - 70026 Modugno (BA), Italy
VAT IT04348260722
Email: privacy@diaferia.it

2. Data Processed

Browsing data: technical information generated when using the site, such as IP address, access date and time, browser and server log data.
Contact form data: name, surname, email, phone, company, request type and message.
Optional photos and technical notes: images voluntarily uploaded to request a preliminary technical sheet.
Application data: data voluntarily sent by email or through any active application form.
Cookie preferences: choices expressed through the cookie banner.

3. Purposes and Legal Bases

Replying to commercial or technical requests: pre-contractual measures requested by the data subject.
Generating a preliminary technical sheet from uploaded photos: handling the request voluntarily submitted by the user.
Managing applications and professional contacts: pre-contractual measures and legitimate interest in selecting collaborators.
Security, maintenance and abuse prevention: legitimate interest of the controller.
Legal compliance: legal obligation.
Non-technical cookies, if enabled in the future: user consent, withdrawable at any time.

4. Processing and Providers

Data is processed with IT tools and proportionate organisational measures. The website uses Resend for form and email handling. For the optional photo analysis feature, images and notes submitted by the user may be sent to Anthropic to generate an automated preliminary technical sheet. Providers are used only for the purposes needed to deliver the requested service.

5. Retention

Contact and quote requests: up to 24 months, unless a commercial relationship or legal obligation requires longer retention.
Contractual/accounting data: for the periods required by tax and civil law.
Applications: up to 12 months, unless consent or a legal need justifies longer retention.
Technical logs: for the time needed for security, maintenance and diagnostics.
Cookie preferences: until deleted from the browser or updated by the user.

6. Recipients and Transfers

Data may be processed by technical providers, hosting providers, email services, consultants and persons authorised by Diaferia SRL. Some providers, such as email or AI services, may involve transfers outside the EU; in that case transfers must rely on appropriate safeguards under Articles 44 et seq. GDPR.

7. Data Subject Rights

You may request access, rectification, erasure, restriction, objection, data portability and withdrawal of consent where processing is based on consent. Requests can be sent to privacy@diaferia.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.

8. Cookies and External Services

For information about storage tools and cookie preferences, please see the Cookie Policy.

9. Updates

This notice may be updated. The latest version is published on this page with the last update date.

Privacy Policy