Privacy and cookie notice

1. Data controller

The data controller is the company shown below, which operates the European Gateway service.

For any request concerning personal data, write to the email address indicated: we reply within thirty days.

2. What data we collect

Data you give us through the contact form: company name, contact person, email, phone if provided, country, sector, website, main product, target markets, WeChat ID and the text of your message.

Data collected when the site is opened from a personal QR code: the team member code contained in the link, the page language, the path visited, the device time zone and the city derived from it, the country inferred from the connection, the browser type, date and time.

Server technical logs, generated automatically for security and diagnostics.

We do not collect special categories of data and we do not carry out automated profiling with legal effects on individuals.

3. Why we process it and on what legal basis

To answer your request and assess a possible collaboration: legal basis is the performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).

To understand which materials and which trade fairs generate contacts, in aggregate form: legal basis is our legitimate interest in measuring commercial effectiveness (Art. 6(1)(f) GDPR).

For site security: legitimate interest.

4. How long we keep it

Enquiries that do not lead to a relationship: 24 months from the last contact, then deletion.

QR scan records: 12 months, after which only aggregate data remains, identifying no one.

If a contractual relationship begins, documents follow the retention periods required by law, including tax rules.

5. Who processes data on our behalf

Vercel Inc., which hosts the site and its server functions, as data processor.

The database service that will receive enquiries, once activated, also as processor.

We do not sell or transfer your data to third parties for marketing purposes.

6. Transfers outside the European Union

The providers listed above may process data outside the European Economic Area. Where that happens, the transfer relies on the standard contractual clauses approved by the European Commission, or another mechanism provided for in Chapter V of the GDPR.

7. Your rights

You may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interest. Simply write to the controller's email address.

If you believe the processing breaches the rules, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local supervisory authority.

8. Cookies

This site uses no profiling cookies, has no third-party analytics and does not track browsing across other sites. That is why no consent banner appears: there is nothing to consent to.

We use a single technical cookie, eg_locale, which remembers the language you chose for twelve months, so the site opens in the right language when you return.

We also use browser session storage so the same QR scan is not counted twice. It is cleared when you close the browser and is sent to no one.

If we add analytics in the future, a banner will appear and this page will be updated before activation.