In short
- This website uses no profiling cookies and no traffic statistics. It only uses technical tools.
- Two external services use their own cookies only if you consent in the banner: Calendly, to book a consultation on the page, and Google reCAPTCHA, against spam on the contact form.
- The server records some technical data about each visit (logs), for security.
- We only use your email address if you write to us, use the contact form, book a consultation or subscribe to the newsletter.
- The contact form goes to our own server, in Italy, and from there to our mailbox.
- The Parts: Inside Art app has its own notice: app privacy.
01 Data controller
The data controller is Parts Srl Società Benefit, VAT no. 10996271218, with registered office at Via Ottavio Caiazzo 4, 80129 Napoli (NA).
You can write to us at info@partshub.it with any question about this notice or to exercise your rights (see Your rights).
We have not appointed a data protection officer (DPO).
02 What data we process
Browsing data
When you visit the website, the server that hosts it automatically records some technical data in a log file: IP address, date and time of the request, page requested, browser and operating system, referring page. Every website works this way.
Emails you send us
If you write to info@partshub.it or to support@partshub.it (app support), we process your email address, your name if you give it, and what you write in the message.
Contact form
If you write to us with the form on the Contact page, we process the details you enter: full name, email, organisation if you give it, subject and message. You will find all the details in the Contact form section.
Booking a consultation
If you book a consultation with Calendly, we process your name, your email, the answers you give in the booking form and the date of the appointment. You will find all the details in the Booking a consultation section.
Newsletter
If you subscribe to the newsletter, we process your email address and the record of your consent. You will find all the details in the Newsletter section.
For cookies and data saved in your browser, see the Cookies section.
03 Purposes and legal basis
- Running the website and keeping it secure (browsing data, contact form rate limit): our legitimate interest in a secure, working website — Article 6(1)(f) GDPR.
- Replying to contact form messages and emails: steps you ask us to take before a possible contract — Article 6(1)(b) GDPR — if you write to us about consultancy, a quote or a partnership; otherwise (for example press enquiries), our legitimate interest in replying to you — Article 6(1)(f) GDPR.
- Booking and holding consultations: steps you ask us to take before a possible contract — Article 6(1)(b) GDPR.
- Calendly on our pages and Google reCAPTCHA: your consent to their cookies — Article 122 of the Italian Privacy Code and Article 6(1)(a) GDPR.
- Sending the newsletter: your consent — Article 6(1)(a) GDPR.
We do not use your data for profiling or for automated decisions. The Google reCAPTCHA score is only used to tell whether the form is being sent by an automated program.
05 Contact form
On the Contact page you can write to us with a form. When you press “Send message”, your details go to our own server, hosted by Aruba in Italy, which emails them to our info@partshub.it mailbox. Until then the page sends nothing.
- Data
- Full name, email, organisation if you give it, subject, message and the language of the page. As with every page, the server also receives the IP address and the technical data of the request.
- Purpose
- Replying to you and following up your request. We reply to the email address you give us.
- Legal basis
- Steps you ask us to take before a possible contract — Article 6(1)(b) GDPR — for consultancy, quotes and partnerships; our legitimate interest in replying to you — Article 6(1)(f) GDPR — for other topics. We do not need your consent and we do not sign you up to the newsletter.
- Where the message goes
- Our server does not store the message: it only sends it, by email, to our info@partshub.it mailbox, run by Aruba.
- Rate limit
- To prevent abuse, the server keeps for 24 hours a non-reversible fingerprint of your IP address (a code from which the address cannot be rebuilt) and the time of each message: at most 5 messages in 10 minutes and 20 a day. Legal basis: our legitimate interest in keeping the website secure — Article 6(1)(f) GDPR.
- Spam protection
- The form can be protected by Google reCAPTCHA (version 3, invisible). It only turns on if you allow it, in the cookie banner or in the box that appears when you send the form, and it only loads at that moment. reCAPTCHA analyses how you use the page (for example movements and the time taken to fill it in) and technical data about your browser, and returns a score that says whether a person is writing. Google does this on our behalf, as data processor, only to protect the form. It saves a technical cookie,
_GRECAPTCHA(see Cookies). If you would rather not use it, write to us directly at info@partshub.it. - Retention
- In our mailbox, as long as needed to reply and follow up your request, and no longer than 24 months, unless the law requires otherwise.
06 Booking a consultation
The “Book a consultation” buttons open Calendly, the service we use to schedule appointments. If you have consented in the cookie banner, the calendar opens in a window on our page; otherwise it takes you to the Calendly website, which has its own cookie banner.
- Data
- Name, email, the answers you give in the booking form, date and time of the appointment, time zone. Calendly also receives your IP address and technical data about your browser.
- Purpose
- Scheduling the consultation, sending you the confirmation and reminders with the link to join, and holding the meeting.
- Legal basis
- Steps you ask us to take before a possible contract — Article 6(1)(b) GDPR. For the Calendly window on our page, your consent to its cookies.
- Who processes the data
- Calendly LLC (Atlanta, United States), data processor on our behalf (Article 28 GDPR). Calendly participates in the EU-U.S. Data Privacy Framework (see Transfers outside the EU). Calendly’s privacy notice: calendly.com/legal/privacy-notice (opens in a new tab).
- Confirmation page
- After you book, Calendly brings you back to our “Consultation booked” page and passes it the appointment details in the web address: date and time, name and email. The page only uses the date, time and first name to show you a summary; it keeps them in your browser until you close the tab and immediately removes them from the address. Like every address visited, though, it ends up in the server logs (see How long we keep data). “Add to your calendar” sends the appointment details to Google or Microsoft only if you choose their calendar; the .ics file, instead, is created in your browser.
- Retention
- Up to 24 months after the appointment, unless the law requires otherwise; then we delete them from our Calendly account.
07 How long we keep data
- Browsing data (server logs): up to 12 months.
- IP address fingerprint for the contact form rate limit: 24 hours.
- Emails you send us and contact form messages: as long as needed to reply and follow up your request, and no longer than 24 months from the date of the message, unless the law requires otherwise.
- Consultation bookings: up to 24 months after the appointment, unless the law requires otherwise.
- Newsletter: until you unsubscribe.
- Your cookie choice: 6 months; then we ask you again.
08 Who receives the data
We do not sell or pass on your data to anyone. Only these providers receive it, and they process it on our behalf as data processors (Article 28 GDPR), under a contract.
| Provider | Service | Data |
|---|---|---|
| Aruba S.p.A.Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy | Website hosting, contact form and email | Technical server logs (browsing data); form messages; emails you send us |
| Calendly LLCAtlanta, Georgia, United States | Booking consultations | Name, email, booking form answers, date of the appointment |
| Google Ireland LimitedGordon House, Barrow Street, Dublin 4, Ireland | Google reCAPTCHA, spam protection for the contact form (only with your consent) | Technical browser data and data on how the contact page is used |
| Sendinblue SAS (Brevo)17 rue Salneuve, 75017 Paris, France | Newsletter delivery | Subscribers’ email addresses and consent records |
Emails you send us and contact form messages arrive in the info@partshub.it and support@partshub.it (app support) mailboxes, run by Aruba. We only use them to reply to you.
We disclose data to the competent authorities only when the law requires it.
09 Transfers outside the EU
Aruba and Brevo are based in the European Union and process the data in the European Union. The contact form stays in Italy.
Data only leaves the European Economic Area (EEA), for the United States, for two services:
- Calendly, if you book a consultation: Calendly LLC participates in the EU-U.S. Data Privacy Framework, which the European Commission found adequate (decision of 10 July 2023), and also uses the standard contractual clauses;
- Google reCAPTCHA, only if you turn it on: Google may also process the data in the United States, through Google LLC, which participates in the EU-U.S. Data Privacy Framework.
If a provider were in turn to use services outside the EEA, the transfer would only be allowed with the safeguards required by the GDPR (Articles 44–49), such as the standard contractual clauses approved by the European Commission.
10 Your rights
Under the GDPR (Regulation (EU) 2016/679) you have the right to:
- access your data (Article 15);
- rectify inaccurate or incomplete data (Article 16);
- erase your data (Article 17);
- restrict processing (Article 18);
- receive the data you gave us in a commonly used format and take it elsewhere (portability, Article 20);
- object to processing based on our legitimate interest and, at any time, to direct marketing (Article 21);
- withdraw your consent at any time, without affecting what was done before (Article 7(3)).
To exercise them, write to info@partshub.it. We reply within one month (Article 12(3) GDPR).
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it (opens in a new tab)) or with the supervisory authority of the country where you live or work.
12 Providing your data
Giving us your data is optional. Without your email address we cannot reply to you, schedule a consultation or send you the newsletter. In the contact form, your name, email, subject and message are needed to reply to you; the organisation is optional. Browsing data, on the other hand, is recorded automatically by the server at every visit: it is needed for the website to work.
13 Changes to this notice
If our processing changes, we update this page and the “last updated” date at the top.
14 Contact
For questions about this notice or to exercise your rights, write to the data controller:
- Parts Srl Società Benefit
- VAT no. 10996271218
- Registered office: Via Ottavio Caiazzo 4, 80129 Napoli (NA)
- Email: info@partshub.it
- Website: partshub.it