Privacy Policy

1. Introduction

GSTRAIN S.r.l. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Data

When you contact us through our website, we may collect:

• Name and surname
• Email address
• Company name (optional)
• Message content
• Any other information you voluntarily provide

2.2 Technical Data

We automatically collect certain information when you visit our website:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use the collected information for the following purposes:

• To respond to your inquiries and provide customer support
• To send you information about our services, projects, and research
• To improve our website and user experience
• To analyze website usage and optimize our content
• To comply with legal obligations
• To protect against fraudulent or illegal activity

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Legitimate interests: Processing is necessary for our legitimate interests (e.g., improving our services)
• Legal obligation: Processing is necessary to comply with the law

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers: Third-party companies that help us operate our website and conduct our business
• University partners: University of Rome Tor Vergata for research collaboration purposes
• Legal authorities: When required by law or to protect our rights

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Contact form submissions are typically retained for 2 years.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

8. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device. You can control cookie preferences through your browser settings.

8.1 Types of Cookies We Use

• Essential cookies: Necessary for website functionality
• Preference cookies: Remember your settings (language, theme)
• Analytics cookies: Help us understand how visitors use our website

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. We ensure that such transfers comply with applicable data protection laws, including the use of Standard Contractual Clauses where required.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically.

13. Contact Information

14. Supervisory Authority

If you believe that we have not complied with this Privacy Policy or European data protection laws, you have the right to lodge a complaint with:

15. Consent

By using our website and submitting your personal information through our contact form, you consent to the collection and use of information in accordance with this Privacy Policy.