Privacy Policy
This policy explains how Il Sito Giusto processes personal data received through the website, contact form, AI demo and direct contact channels.
Last updated: 16 July 2026.
Data controller
The data controller is Danilo Pellini, owner of the “Il Sito Giusto” project, VAT no. IT02847440035. For privacy requests, email danilo@ilsitogiusto.com or call +39 353 401 7530.
“Request the check” form and submitted data
The form is configured to send the entered data to FormSubmit by AJAX: name, business, town, selected issue, free-text description, phone number and acknowledgement of this policy. Acknowledging the privacy policy is required to submit the form, but it is not consent to newsletters or marketing.
The data is used to reply, assess the requested check, organise contact and handle any pre-contractual steps or later relationship. The legal basis is taking steps at the data subject's request before entering a contract and, where applicable, performing an agreement.
FormSubmit
FormSubmit receives the form fields and forwards them to the controller's email inbox. According to FormSubmit's privacy policy and help page, reviewed on 16 July 2026, the provider processes information to operate the service and states that it retains submissions for 30 days; before activation it also holds submissions pending form confirmation.
The public documentation reviewed does not clearly specify the provider's legal identity, processing locations or safeguards for possible transfers outside the European Economic Area. The controller must validate these points and the provider's suitability before publication; until that review is complete, processing outside the EEA cannot be ruled out.
AI / Hermes demo
When you use the demo, the selected business type, the text you enter and a pseudonymous session identifier needed to keep the short conversation context are processed. The content is handled by an isolated Hermes profile that uses an OpenAI service to generate the reply. The relevant OpenAI account and service terms and privacy policy also apply.
The demo is for demonstration purposes only. Do not enter passwords, credentials, health data, customer data, confidential information or other special-category data. Messages are not used to subscribe users to marketing communications.
Technical logs and abuse protection
The IP address is used temporarily in memory to enforce request-rate and concurrency limits. Standard server logs may record IP, date and time, requested path, HTTP outcome, user agent and technical signals needed for security and diagnosis. The application backend does not log message text or the session identifier; it logs only a technical request identifier, mode, outcome and duration.
Other channels and recipients
If you choose email, phone or WhatsApp, the data and content you voluntarily provide are processed and may pass through the relevant email, telecommunications and messaging providers. Recipients are limited to the controller and necessary technical providers under their respective roles and terms. Contact data does not authorise newsletters, automated campaigns or unsolicited marketing.
Retention
FormSubmit states that submissions are retained for 30 days. Emails and data used to handle an enquiry are kept for the time needed for the reply, any pre-contractual or contractual stages and legal obligations. Technical logs are kept for the period needed for security and diagnosis. The exact operational retention for the email inbox, any CRM, server logs and content processed by the AI provider must be formalised by the controller before publication.
Analytics
The Presenza Attiva pages do not load Google Analytics, advertising pixels or third-party trackers. Some legacy pages may contain a Google Analytics 4 setup with consent denied by default; see the Cookie Policy.
Your rights
Where applicable, you may request access, correction, deletion, restriction, objection and portability, withdraw any consent without affecting earlier processing, and lodge a complaint with the Italian Data Protection Authority. To exercise your rights, email danilo@ilsitogiusto.com.
Security and updates
Proportionate measures are used, including body-size and rate limits, input validation, timeouts and errors that do not expose internal details. No online transmission is risk-free. This policy will be updated when providers, flows, purposes or retention periods change.