Privacy Notice

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

Last update: May 10, 2025

This privacy notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and describes how Italtax S.r.l. Unipersonale collects and processes the personal data of users who interact with the website https://digitax.com.

1. Data Controller

The Data Controller is:
Italtax S.r.l. Unipersonale
Registered office: Piazza di Sant’Emerenziana, 1 – 00199 Rome, Italy
Email: info@digitax.com

2. Types of Data Processed

a) Browsing Data

During browsing, certain personal data are acquired, the transmission of which is implicit in the use of Internet communication protocols.
Such data may include, by way of example:

  • IP address

  • Time of the request

  • Method used to submit the request

  • Numeric code indicating the status of the server response (e.g., error, success)

  • Other parameters related to the user’s operating system and computing environment

These data are stored in server logs for security purposes and for technical monitoring of the website’s proper functioning.

b) Data Provided Voluntarily

We process personal data voluntarily provided by the user through the following channels:

  • Contact forms (name, email, message)

  • Newsletter subscription forms

  • Other direct communications via email

Providing such data is optional but necessary to receive a response or communication from us.

3. Purpose of Processing

The data collected are processed for the following purposes:

  • To respond to requests sent via contact forms or email

  • To subscribe the user to the newsletter (subject to prior consent)

  • To fulfill contractual or pre-contractual obligations

  • To comply with legal obligations

  • To ensure the security of the website and data through technical logs

  • To send commercial communications relating to the services offered by Italtax (only with the user’s explicit consent)

4. Legal Basis for Processing

The processing of personal data is carried out on the following legal bases:

  • Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR)

  • Consent of the data subject (Article 6(1)(a) GDPR)

  • Compliance with legal obligations (Article 6(1)(c) GDPR)

  • Legitimate interest of the Data Controller (Article 6(1)(f) GDPR), for purposes related to IT security and technical management

5. Methods of Processing and Data Retention

The processing of personal data is carried out using electronic and/or telematic tools, adopting appropriate technical and organizational measures to ensure the security and confidentiality of the data.

Data are retained for the time necessary to achieve the purposes for which they were collected and, in any case, as follows:

  • Server logs: up to 12 months, unless required for judicial purposes

  • Contact or newsletter data: until withdrawal of consent or a request for deletion

  • Contractual data: in accordance with the time limits established by tax or accounting regulations (10 years)

6. Data Communication and Disclosure

Personal data are not subject to dissemination.
However, they may be communicated to third parties engaged to provide services related to the management of the website or the delivery of the requested services (e.g., IT providers, consultants, newsletter service providers), who have been duly appointed as Data Processors.

7. Transfer to Third Countries

Data are not transferred outside the European Economic Area (EEA).
Should such a transfer occur, the Data Controller ensures that it will be carried out in compliance with Articles 44 et seq. of the GDPR, by adopting appropriate safeguards (e.g., adequacy decisions or Standard Contractual Clauses).

8. Rights of the Data Subject

The user may exercise, at any time, the rights provided for in Articles 15–22 of the GDPR, including:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object

  • Right to withdraw consent

To exercise these rights, the user may contact: info@digitax.com.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

9. Changes to This Privacy Notice

Italtax reserves the right to update this privacy notice at any time.
Users will be informed of any changes through the website or other appropriate channels.

 

Torna in alto