How we handle your data

The data controller is Dimma S.r.l.. The full identification and contact details are in this site’s legal notice.

For anything concerning your personal data, including the rights described below, write to the address at the foot of this page.

Only what you send us through the contact form. There are no accounts to register, no members’ area, and we do not buy address lists.

Along with what you write, the form sends two technical details: the language you are reading the site in, and the address of the page you wrote from. They tell us which product you mean and which language to reply in.

• Name and email: required, we cannot reply without them.
• Company or organisation, phone and sector: optional.
• The message itself, with whatever you choose to put in it.
• The page language and the address of the page the request came from.

For one reason: to read your enquiry and answer it. We do not use it for anything else, we do not pass it on and we do not sell it.

The grounds are the steps taken at your request before entering into a contract, and our legitimate interest in responding to people who write to us. We do not ask for your consent, because answering an enquiry you sent us does not require it, and asking would wrongly suggest you could withdraw it to stop a reply you asked for.

Enquiries that lead nowhere are deleted within 24 months of the last contact.

If an enquiry turns into a business relationship, the data follows that relationship from then on, and the retention periods the law sets for accounting and contractual records.

The system that receives the form keeps nothing: it checks the message and forwards it to our mailbox, which is where it then lives. The technical records of that step delete themselves after thirty days.

Nobody, in the sense that matters: we do not pass it to third parties and we do not publish it. It does travel through two suppliers who provide the tools we receive it with, and who handle it on our behalf and on our instructions, as processors.

Neither of them takes the data outside the Spazio economico europeo: the message starts here and stays here.

• Amazon Web Services, for the program that receives the form and turns it into an email. It runs in a data centre in Italy.
• Aruba, which hosts the mailboxes of the dimma.it domain, where the message arrives and is read.

This site uses no cookies. None: not its own, not third-party, not technical, not for profiling. There is no Google Analytics and no other measurement system, no social buttons and no embedded maps. The typefaces are hosted on this site rather than on an external delivery network, so opening a page does not make your browser contact any other domain.

That is why there is no banner asking you to accept anything: there is nothing to accept. If we ever add visit measurement, the banner will appear and this page will be rewritten before it does.

The site stores two items in your browser, and neither is an identifier: they cannot recognise you, they do not tell us who you are and they never leave your device. They remember a choice you made yourself, which is why the law does not require consent for them. You can delete them at any time by clearing this site’s data in your browser settings: all you lose is the stored language.

You have the rights Regolamento (UE) 2016/679 (GDPR) gives you over the data concerning you. A message to the address at the foot of this page is enough: we answer within a month, and if the request is complex we tell you beforehand that we need longer.

If you believe we are handling your data improperly, you can turn to the supervisory authority, Garante per la protezione dei dati personali, as well as to a court.

• Find out whether we hold data about you, and obtain a copy of it.
• Have it corrected if it is wrong, or completed if it is partial.
• Have it erased.
• Ask us to restrict its use while we look into an objection of yours.
• Object to handling that rests on our legitimate interest.
• Receive it in a machine-readable format, or have it passed to someone else.

The site is reachable over HTTPS only, and browsers enforce that even for people arriving from an old link. The form accepts requests from the site’s official addresses alone, and has a submission limit that stops automated abuse.

The program that receives the form can do exactly one thing: send a message to our sales mailbox. It has no store, it cannot write anywhere else and it cannot send to a different recipient, even if it were tampered with.

The date at the top of this page says when it was last revised. If we change how we handle data, we will change this text first: a page describing how things stood last month is not a notice.