Privacy notice
Under Articles 13 and 14 of Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003. Last updated: 24 October 2026.
1. Data controller
Oliviero Dall'Asta, sole proprietorship (ditta individuale) WebbyDO
Registered office: Via G. Randaccio 39, 25128 Brescia, Italy · VAT no. (P.IVA) 03269620179
Email: [email protected] · Phone +39 393 670 0296
Certified email (PEC): [email protected]
The controller has not appointed a Data Protection Officer (DPO).
2. What data we process
- Browsing data: IP address, date and time, page visited, browser and operating system, recorded automatically in the hosting provider’s technical logs.
- Data you give us by email, phone or WhatsApp: name, company, email, phone, content of the message.
- Data of clients and suppliers needed for contracts, invoices and tax obligations.
- Data we may see while working on a client’s systems: processed only on the client’s instructions and under the agreements made with the client (Art. 28 GDPR).
We do not process special categories of data (Art. 9 GDPR). Please do not send any.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Answering your requests for information or a proposal | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Carrying out consulting and development work | Performance of a contract (Art. 6(1)(b) GDPR) |
| Invoicing and legal obligations (tax, accounting) | Legal obligation (Art. 6(1)(c) GDPR) |
| Security and operation of the website (technical logs) | Legitimate interest (Art. 6(1)(f) GDPR) |
| Defending our rights in case of disputes | Legitimate interest (Art. 6(1)(f) GDPR) |
We do not carry out profiling or automated decision-making (Art. 22 GDPR). We use software and artificial intelligence tools in our work, with human review; no client secrets or credentials are placed in the context of AI tools.
4. Cookies and statistics
The website uses no profiling, advertising or statistics cookies.
5. Who receives the data
Data is not sold or published. It may be processed, as processors (Art. 28 GDPR), by the providers of the services we use:
- website hosting: Cloudflare;
- email: Aruba S.p.A. (mailbox [email protected]), with automatic forwarding to Gmail (Google);
- other technical service providers appointed as processors;
- accountant and advisers, for legal obligations;
- authorities, only when required by law.
6. Transfers outside the European Union
If a provider processes data outside the EU, the transfer takes place only with the safeguards set out in Articles 44–49 GDPR, for example adequacy decisions (such as the EU-U.S. Data Privacy Framework) or standard contractual clauses.
7. How long we keep the data
- Contact requests: for as long as needed to answer the request and in any case within the limits set by law.
- Contract and invoice data: 10 years, as required for accounting records (Art. 2220 of the Italian Civil Code).
- Technical logs: for the period set by the hosting provider for the security and operation of the service.
8. Your rights
You can ask at any time to access, correct or erase your data, restrict processing, receive it in a portable format, and object to processing based on legitimate interest (Articles 15–21 GDPR). Write to [email protected]. You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.
9. Changes
This notice may be updated. The current version is always on this page, with the date of the last update: 24 October 2026.