Privacy Policy
Last updated: 26 June 2026
Draft prepared during website development. To be reviewed by a legal advisor / DPO before going live.
Notice on the processing of personal data pursuant to Regulation (EU) 2016/679 (GDPR) and applicable Italian law.
Data controller
Fortun S.r.l., registered office at Via Aldo Sandulli 91, 00156 Rome (RM), Italy. VAT and tax code 16828791000 — REA RM-1678563.
Email: info@fortunsrl.com — PEC: 16828791000@impresa.italia.it.
Data we process
We process the data you provide voluntarily and data collected automatically while browsing:
- Contact form data: full name, company, business email and the content of your message.
- Technical browsing data: IP address, browser type, pages visited and server logs, collected by the infrastructure for security and operation.
Purposes and legal basis
- Responding to business enquiries and managing pre-contractual relations — legal basis: pre-contractual measures at the data subject's request (Art. 6.1.b) and consent (Art. 6.1.a).
- Ensuring the security and correct operation of the website — legal basis: legitimate interest (Art. 6.1.f).
Nature of provision
Providing the form data is optional but necessary to receive a reply. Without it, we cannot follow up on the enquiry.
Recipients and processors
Data may be processed by technical service providers appointed as data processors, including the hosting provider (Vercel Inc.) and email tools. We do not disclose data or sell it to third parties for marketing.
Transfers outside the EU
Some providers may process data outside the European Economic Area. In that case the transfer relies on adequate safeguards (e.g. the European Commission's Standard Contractual Clauses).
Retention
Form data is retained for as long as needed to handle the enquiry and, where applicable, for the period required by law. Technical logs are kept for limited periods for security purposes.
Your rights
You may exercise the rights under Art. 15-22 GDPR at any time:
- access, rectification, erasure and restriction of processing;
- objection to processing and data portability;
- withdrawal of consent, without affecting the lawfulness of prior processing;
- lodging a complaint with the Italian Data Protection Authority.
Automated processing
We do not carry out profiling or automated decision-making within the meaning of Art. 22 GDPR.
Changes
This notice may be updated. The current version is always published on this page.