Privacy Policy
Bitia S.r.l. guarantees the proper management of your privacy. This page describes how we process the personal data of visitors to this website. For the detailed notices dedicated to specific categories of data subjects, please refer to your profile:
Data Controller
Bitia S.r.l.
Registered office: Strada Torino 43, 10043 Orbassano (TO), Italy
Operational office: Via Alessandro Antonelli 10, 10093 Collegno (TO)
VAT no. 11629560019 — REA TO-1228625
Contact email: info@bitia.it — PEC bitiasrl@pec.it
Types of data collected
Among the types of personal data that this website collects, by itself or through third parties, are: first name; last name; email address; the content of messages you send us; usage data; and trackers. Usage data may include, for example, the IP address, browser type and version, operating system, the pages visited, the time of the visit and other technical parameters, as well as an approximate location (such as city or region) derived from the IP address.
Personal data may be provided freely by you (for example when using the contact form) or collected automatically while you browse (usage data and trackers). Failing to provide data marked as mandatory may make it impossible for us to provide the requested service. You are responsible for any third-party personal data you provide through this website.
Mode and place of processing
Methods of processing
We take appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the data. Processing is carried out using IT tools and organisational procedures strictly related to the purposes indicated. In addition to us, data may be accessible to parties involved in operating this website (e.g. administration, IT) or to external providers appointed as data processors (such as hosting providers or IT companies). An updated list of these parties may be requested at any time.
Place
Data is processed at our operational offices and wherever the parties involved in the processing are located. Depending on your location, transfers may involve moving your data to a country other than your own — including outside the EU (for example the United States) when using providers such as Google. In such cases, transfers are governed by appropriate safeguards (such as the European Commission's Standard Contractual Clauses).
Retention time
Personal data is processed and stored for as long as required by the purpose for which it was collected. Data sent through the contact form is kept for the time needed to handle your request and to comply with legal obligations. Analytics data is retained according to the settings of the relevant service. The record of your cookie consent is kept for up to one year. Once the retention period expires, data is deleted.
Purposes of processing
Your data is collected to allow us to provide our service, respond to your requests, comply with legal obligations, protect our rights and interests, detect malicious or fraudulent activity, and for the specific purposes described below: replying to enquiries, hosting and backend infrastructure, displaying content from external platforms, and measurement.
Detailed information on the processing of personal data
Contact form
We process the data submitted through the form to respond to your enquiry and take any pre-contractual steps you request. Personal data: first name, email address, message content and technical submission data. The required checkbox records that you have read this policy; it does not constitute consent to unrelated processing or marketing.
Form submissions are handled by Formspree, Inc., acting as a service provider and data processor. Formspree may process the submitted data and technical information such as the IP address, browser, access time and referring page in the United States. According to Formspree, transfers are governed by the European Commission's Standard Contractual Clauses. See the Formspree privacy policy.
Spam protection with Google reCAPTCHA
The contact form uses Google reCAPTCHA (Google Ireland Limited) to distinguish legitimate submissions from automated abuse and protect the website. Google may process the IP address, device and browser information, interaction and risk signals, and set the necessary _GRECAPTCHA cookie. The legal basis is our legitimate interest in the security and availability of the website. Place of processing: Ireland / United States. See the Google Privacy Policy and Terms of Service.
Hosting and backend infrastructure
This website is hosted on Microsoft Azure (Microsoft Ireland Operations Ltd / Microsoft Corporation). Personal data: usage data and technical log data. Place of processing: EU / United States.
Displaying content from external platforms
Google Maps (Google Ireland Limited) is used to display an interactive map on the Contacts page; it is loaded only after consent. Personal data: trackers; usage data. Place of processing: Ireland / United States.
Measurement
Google Analytics 4 (Google Ireland Limited) is used to collect aggregate statistics on how the website is used; it is activated only after consent. Personal data: trackers; usage data. Place of processing: Ireland / United States.
This website uses trackers. To learn more, see our Cookie Policy.
Legal basis of processing
We process personal data relating to you where one of the following applies: you have given consent for one or more specific purposes; processing is necessary to perform an agreement with you or to take pre-contractual steps at your request; processing is necessary to comply with a legal obligation; or processing is necessary for our legitimate interests (such as the security and proper operation of the website), provided these do not override your rights and freedoms.
Your rights under the GDPR
To the extent permitted by law, you have the right to:
- withdraw your consent at any time, where processing is based on consent;
- object to processing carried out on a legal basis other than consent;
- access your data and obtain a copy of it;
- verify its accuracy and ask for it to be corrected or updated;
- restrict the processing of your data;
- obtain the erasure of your data;
- receive your data in a structured, commonly used, machine-readable format and, where feasible, have it transmitted to another controller (portability);
- lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
To exercise your rights, contact us at info@bitia.it. Requests are free of charge and will be answered as soon as possible, and in any case within one month.
Additional information
Legal action. Your personal data may be used for legal purposes by us in court or in the stages leading to possible legal action arising from improper use of this website. You are aware that we may be required to disclose personal data upon request of public authorities.
System logs and maintenance. For operation and maintenance purposes, this website and any third-party services may collect files that record interactions with it (system logs) or other usage data (such as the IP address).
Changes to this privacy policy. We reserve the right to make changes to this privacy policy at any time by notifying Users on this page. Please check this page regularly, referring to the last-updated date below. Where changes affect processing based on consent, we will collect new consent if required.
Legal references
This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).
Definitions
- Personal Data — any information that, directly or indirectly, identifies or makes identifiable a natural person.
- Usage Data — information collected automatically, such as IP address, browser type, operating system and pages visited.
- Tracker — any technology that stores or accesses information on the user's device.
- Data Controller (Owner) — the party that determines the purposes and means of the processing; here, Bitia S.r.l.
- Data Processor — a party that processes personal data on behalf of the Data Controller.
- User — the person visiting this website.
Last updated: 21 July 2026.