Privacy Policy

Last updated: 20/10/2025

1) Who we are (Data Controller)

• Owner: EKAN S.R.L.
• Registered office: ZONA INDUSTRIALE NORD, VIA VILLAFALLETTO SNC, 12020 TARANTASCA (CN) – Italy
• VAT number: IT12018820964 — C.F.: 12018820964
• Website: https://www.ekan.it
• Privacy Contacts: info@ekan.it
• PEC: ekan@pec.it
• Phone: +39 01711874992

The Data Controller determines the purposes and means of the processing of personal data (Article 4, no. 7 GDPR). A DPO has not been appointed at the moment (Art. 37 GDPR).

2) Data processor (Art. 28 GDPR)

The Data Controller has appointed Clara Bisotto as Data Processor for the activities entrusted to her.
Any additional external Data Processors (e.g. hosting, IT maintenance, e-mailing/CRM services, consultants) are appointed pursuant to Article 28 of the GDPR; The updated list is available on request from the contacts in §1.

3) Types of data processed

• Browsing data: IP address, timestamps, requested URLs, user-agents, system and security logs.
• Cookies/similar technologies: technical, preferences, statistical/analytics, marketing (see Cookie Policy).
• Contact details: first name, last name, email, telephone, company/role, country/language.
• Contract data and billing (B2B): VAT/C.F., headquarters, contact persons, orders, payments.
• Job Applications: CV and professional information provided by the interested party.
• Communications: content of messages sent via forms, e-mail or other channels.

As a rule , we do not process special categories of data (Art. 9 GDPR). Any exceptional treatment will take place only if necessary and lawful.

4) Purposes and legal bases (Art. 6 GDPR)

1. Navigation and security of the site (logs, prevention of abuse): legitimate interest of the Data Controller (art. 6.1.f).
2. Response to contact/quote requests: execution of pre-contractual measures (art. 6.1.b).
3. Management of contracts, orders, assistance, invoicing: execution of the contract (art. 6.1.b) and legal accounting/tax obligations (art. 6.1.c).
4. Regulatory obligations (fiscal, administrative, compliance): legal obligation (art. 6.1.c).
5. B2B/soft-spam commercial communications about similar products/services: legitimate interest (Art. 6.1.f) with the right to opt-out at any time.
6. Marketing and newsletters based on consent: consent (Art. 6.1.a), which can be revoked at any time.
7. Personnel selection (evaluation of applications): legitimate interest / pre-contractual measures (Art. 6.1.f / 6.1.b).
8. Non-anonymised analytics: consent (art. 6.1.a).
9. Judicial/extrajudicial protection of rights: legitimate interest (art. 6.1.f).

5) Nature of the provision

The provision of data necessary for contractual/legal purposes is mandatory; Otherwise, we will not be able to provide the services or conclude the contract.
Consent-based processing (e.g. marketing, non-anonymized analytics) is optional.

6) Processing methods and security

The data are processed with paper and digital tools according to the principles of lawfulness, fairness, transparency, minimization, accuracy and limitation of storage (art. 5 GDPR) and with appropriate technical/organizational measures (art. 32 GDPR): authentication and access control, encryption/https, backup, access tracking, privacy by design/by default (art. 25 GDPR). The staff is licensed and trained.

7) Retention periods (data retention)

• Technical/security logs: 6–12 months.
• Contact/quote requests: up to 24 months from the last useful contact.
• Contract/invoicing data: up to 10 years (civil/tax obligations).
• Marketing on consent: up to 24 months or until revocation/opt-out.
• Light profiling on consent (if any): max 12 months.
• Applications (CV): 12 months (unless otherwise agreed).

8) Recipients of the data

• External data processors (art. 28) for: hosting/housing, IT maintenance, CRM/e-mailing, consulting, administration/accounting, analytics/marketing.
• Authorised persons within the Data Controller, adequately trained.
• Authorities or public entities for legal obligations or orders.
• Professionals/consultants (e.g. accounting firm, legal).

The updated list of Data Processors is available on request at the contacts in §1.

9) Extra-EU data transfers

Some providers may involve transfers to countries outside the EEA. In such cases, transfers will take place in compliance with Chapter V GDPR (EU adequacy decisions, Standard Contractual Clauses/SCCs or other appropriate safeguards). A copy of the guarantees may be requested from the Data Controller.

10) Rights of the data subject (Art. 15–22 GDPR)

The data subject may:

• Access and obtain a copy of the data;
• Rectify inaccurate data or supplement incomplete data;
• Delete data in the cases provided;
• Restrict processing;
• Object to processing based on legitimate interest (including soft-spam);
• Revoke consent at any time, without prejudice to the lawfulness of the processing prior to withdrawal;
• Obtain data portability , where applicable.

To exercise your rights, please write to info@ekan.it or ekan@pec.it. It is also possible to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

11) Cookies and tracking tools

For information on cookies used, categories, purposes, duration and management of preferences, consult the Cookie Policy available at /cookie-policy (link in the footer). From the banner or from the Cookie Settings it is always possible to change/revoke consent.

12) Minors

The services of the site are not intended for children under the age of 14. If we discover that we have unintentionally collected data from children without the consent of their parents/guardians, we will delete it immediately.

13) Automated decisions

We do not carry out automated decisions that produce legal effects on the data subject, nor invasive profiling . Any light profiling for marketing purposes will only take place with prior consent and with limited storage times (§7).

14) Changes to this policy

This policy may be updated to reflect regulatory or organizational changes. The current version is published on this page with the update date at the top. In the event of substantial changes, specific notice will be given (e.g. banner/notice on the site).

15) Contact

EKAN S.R.L. — ZONA INDUSTRIALE NORD, VIA VILLAFALLETTO SNC, 12020 TARANTASCA (CN), Italy
E-mail: info@ekan.it — PEC: ekan@pec.it — Tel.: +39 01711874992
Data processor: Clara Bisotto (pursuant to art. 28 GDPR)