Privacy policy

Website-specific processing

Supplement last updated: 23 October 2026

This supplement completes, without replacing or amending, the privacy notice reproduced below in its Italian original, with regard to processing carried out through the https://www.dasabo.com website. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018. For the controller, the general purposes, the place of processing, recipients, transfers outside the EU/EEA, data subjects’ rights and complaints to the Italian Data Protection Authority, please refer to the notice below.

A. Scope: website and Client Area

The https://www.dasabo.com website provides information and lets you contact the Controller. Ordering services, registering and managing a client account, payments, invoicing and technical support take place in the Client Area at https://my.dasabo.com, to which the notice below applies.

B. Browsing data and security logs

In the course of normal operation, the systems running the website collect data whose transmission is implicit in the use of Internet protocols: IP address, date and time of the request, requested resource, server response code, referring page (referrer) and browser and operating system type (user agent). The website is also protected by an application firewall that inspects incoming requests and records in dedicated security logs the IP address, user agent, requested resource and the reason for any block, in order to detect and block attacks, abuse and unauthorised access.

Legal basis: the Controller’s legitimate interest in ensuring the operation and security of the website (Article 6(1)(f) GDPR). Retention: for the time strictly necessary and in any case no longer than 24 months, unless the data must be kept longer to establish or contest unlawful acts or to respond to requests from authorities.

C. Contact form

When you fill in the contact form you provide your first and last name, email address, company and phone number (if entered), subject and message; the system also records your IP address and the date and time of submission, for security and spam prevention. The form is protected by an anti-automation check (captcha) run directly by the Controller, without third-party services. Providing the data is optional, but the fields marked as required are needed to handle your request. Please do not include unnecessary data in your message and, in particular, special categories of data under Article 9 GDPR.

Legal basis: pre-contractual measures taken at your request (Article 6(1)(b) GDPR) and legitimate interest in replying to messages received and protecting the form against abuse (Article 6(1)(f) GDPR). Retention: for the time needed to handle the request and then no longer than 24 months, unless the request leads to a contract, in which case the periods set out in section 4 of the notice below apply.

D. Website administration area

The website’s administration area is restricted to the Controller’s authorised staff. For administrator users we process name, email address, login credentials (the password is stored only in hashed form), date, time and IP address of logins and a log of the operations performed, to ensure system security and the traceability of changes. Legal basis: legitimate interest in system security (Article 6(1)(f) GDPR) and performance of the employment or collaboration relationship (Article 6(1)(b) GDPR). Retention: for as long as access is enabled; access and operation logs are kept for no longer than 24 months.

E. First-party anonymous statistics

To implement the anonymous statistics purpose mentioned in section 4 of the notice below, the website produces aggregated visit statistics directly on its own systems, without using cookies and, by default, without third-party analytics services. IP addresses are truncated, visitors are counted with an anonymous code (hash) that changes every day, and individual visits are not stored; the data is not shared with third parties, combined with other information or used to profile users. The resulting statistics contain no personal data and may be kept indefinitely.

F. Cookies and third-party scripts on the website

Without requiring consent, the website sets only first-party technical cookies: dsb_sid (session and protection of forms against forged requests, duration: session), dsb_lang (selected language, duration: 12 months) and dsb_consent (your cookie choices, duration: 6 months). Any third-party analytics or marketing scripts, including those of the services listed in sections 9 and 10 of the notice below, are loaded only after you have given consent through the banner; without consent they stay disabled. You can change or withdraw your consent at any time through the “Cookie preferences” link on every page. For the full list, purposes and durations, please see the Cookie Policy.

G. Website-specific security measures

In addition to section 3 of the notice below, the measures adopted for the website under Article 32 GDPR include: encryption of communications over HTTPS, hashed password storage, protection of forms with anti-CSRF tokens and captcha, an application firewall, need-to-know access control for the administration area, security event logging, periodic backups and system updates.

H. Infrastructure provider

The website is hosted on servers located in the European Union by Dasabo SRL, acting as data processor under Article 28 GDPR. The up-to-date list of processors is available on request from the Controller.

I. Automated decision-making

Data collected through the website features described in this supplement is not subject to automated decision-making, including profiling, under Article 22 GDPR.

J. Additional contacts and response times

In addition to the contacts given in section 11 of the notice below, data protection requests can also be sent to [email protected] or [email protected]. The Controller replies without undue delay and in any case within one month of receipt, which may be extended by two further months for complex or numerous requests, in which case you will be informed (Article 12 GDPR); we may need to verify your identity. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome (www.garanteprivacy.it), under Article 77 GDPR, without prejudice to judicial remedies (Article 79 GDPR).

Privacy notice (Italian original)

The Italian text below is the original privacy notice of DASABO SRL and is reproduced unchanged; the supplement above completes it for the processing carried out through this website.

Informativa per la Protezione Dati Personali

(ai sensi degli artt. 13 e 14 GDPR)

1. Soggetti del trattamento

Titolare: Dasabo Srl, Via Imperatore Federico 100, 90143 Palermo (PA), [email protected], PEC [email protected]. I gestori dei siti ospitati sono autonomi Titolari. Per i domini .it e .eu Dasabo agisce come Responsabile per conto delle Authority; per le altre estensioni come Titolare o co-Titolare.

2. Tipologie di dati raccolti

Dati anagrafici, dati di pagamento limitati (IBAN, token, ultime 4 cifre carta – mai CVV), documenti di identità, dati di traffico telematico (IP, email, parametri dispositivo). Non raccogliamo dati di minori di 16 anni.

3. Sicurezza e modalità di trattamento

Trattamento con strumenti informatici, logiche di minimizzazione, personale autorizzato vincolato da riservatezza.

4. Finalità, base giuridica e periodi di conservazione

Le finalità includono: gestione richieste (base: misure precontrattuali; conservazione: tempo necessario); fornitura servizio e gestione contrattuale (base: contratto e obblighi di legge; conservazione: durata contratto + 10 anni); registrazione domini e prevenzione abusi (base: contratto, consenso, legittimo interesse; conservazione: durata contrattuale + 10 anni); adempimenti fiscali (base: obbligo legale; conservazione: 10 anni); difesa dei diritti (base: legittimo interesse; conservazione: durata contenzioso); statistica anonima; sicurezza fisica e informatica; prevenzione frodi; verifica identità per recupero credenziali (dati cancellati subito); verifica identità per modifiche contrattuali critiche (conservazione: durata contratto + 10 anni); attività promozionali (base: consenso; fino a revoca o 24 mesi); marketing personalizzato; invito a recensire (base: legittimo interesse); soft spam (base: legittimo interesse). I dati sono conservati per il tempo necessario, più max 90 giorni per backup.

5. Luogo del trattamento

SEE (Spazio Economico Europeo).

6. Destinatari dei dati

Non ceduti né diffusi, ma comunicati a soggetti esterni (banche, professionisti, autorità, Registry, fornitori di servizi) e Responsabili esterni.

7. Trasferimenti extra UE/SEE

Garantiti da decisioni di adeguatezza, clausole contrattuali standard (SCC) o Data Privacy Framework (es. Meta).

8. Cookie e tecnologie similari

Cookie tecnici (necessari, senza consenso), cookie di analisi (anonimizzati), cookie di profilazione/marketing (richiedono consenso). L’utente può rifiutare o revocare tramite browser o link “Preferenze cookie”.

9. Servizi di terze parti

Google Analytics (IP anonimizzato, UE), Google Tag Manager, Meta Platforms (Facebook Fanpage, Remarketing), PayPal, Stripe, Trustpilot, Feedaty, Zapier, ActiveCampaign, Yandex Metrica, Crisp, Telegram, WhatsApp.

10. Servizi pubblicitari

Cookie di profilazione di terze parti per annunci personalizzati. Disattivabili tramite browser, AppChoices, o impostazioni social network.

11. Diritti degli interessati

Accesso, copia, revoca del consenso, rettifica, opposizione, cancellazione, limitazione, portabilità, reclamo al Garante, informazione sui processi automatizzati. Esercitabili via [email protected] o PEC.

12. Aggiornamenti

Consulta periodicamente questa pagina.