Privacy
Privacy Policy.

1. Data Controller

For any questions regarding this policy or the processing of your personal data, please contact us at the email address indicated above.

2. Personal data processed

We collect and process the following categories of personal data:

• Contact data — first name, last name, email address, phone number, name of the organisation, voluntarily provided through the contact form.
• Browsing data — IP address, browser type, operating system, pages visited, date and time of access, automatically collected by the website's systems.
• Communications — the content of messages sent via the contact form or by email.

We do not collect data belonging to special categories (sensitive data) within the meaning of Art. 9 GDPR.

3. Purposes and legal basis of processing

• Handling contact requests — responding to messages sent via the form or by email. Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).
• Security and operation of the website — ensuring the correct technical operation of the website and preventing abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Statistical analysis and marketing — measuring the performance of the website and advertising campaigns, subject to consent. Legal basis: consent (Art. 6(1)(a) GDPR). Currently not active — in preparation.
• Legal obligations — complying with applicable legal obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Retention period

Data provided through the contact form is retained for the time necessary to handle the request and, thereafter, for a period not exceeding 24 months, unless otherwise required by legal or contractual obligations.

Browsing data is retained for a maximum period of 12 months and used exclusively for technical and security purposes.

5. Recipients of data

Personal data is not sold or transferred to third parties for commercial purposes. It may be shared exclusively with:

• Technical and IT service providers acting as data processors (e.g. hosting, email).
• Public, judicial or administrative authorities, as required by law.

All parties processing data on our behalf have been appointed as data processors pursuant to Art. 28 GDPR and operate according to documented instructions.

6. Transfer of data outside the EU

Personal data is processed primarily within the European Union. Should it be necessary to transfer data to third countries, this will occur exclusively in the presence of adequate safeguards pursuant to Arts. 44–49 GDPR (e.g. adequacy decisions, standard contractual clauses).

7. Cookies and tracking technologies

The website uses technical cookies necessary for the functioning of the pages (e.g. session, navigation). These do not require consent pursuant to the applicable regulations.

The website is also set up for the future activation of third-party analytical and marketing cookies, including:

• Google Analytics 4 (Google Ireland Ltd.) — anonymised statistical analysis of visits.
• Meta Pixel (Meta Platforms Ireland Ltd.) — conversion measurement and remarketing on Facebook/Instagram.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) — campaign analysis and remarketing on LinkedIn.
• Google Ads (Google Ireland Ltd.) — advertising conversion tracking.

These tools will be activated exclusively upon the user's explicit consent via the cookie banner on the website. Without consent, no profiling or analytical cookies are installed. The legal basis for processing is the data subject's consent (Art. 6(1)(a) GDPR).

Consent may be withdrawn at any time by deleting cookies from your browser or by contacting hello@pulse.srl.

8. Data subject rights

As a data subject, you have the right to:

• Access — obtain confirmation as to whether or not personal data concerning you is being processed and receive a copy thereof (Art. 15 GDPR).
• Rectification — request the correction of inaccurate or incomplete data (Art. 16 GDPR).
• Erasure — request the deletion of your data, in the cases provided for by Art. 17 GDPR ("right to be forgotten").
• Restriction — request the restriction of processing in the cases provided for by Art. 18 GDPR.
• Portability — receive your data in a structured, machine-readable format (Art. 20 GDPR).
• Objection — object to processing based on legitimate interest (Art. 21 GDPR).
• Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, please write to hello@pulse.srl. We will respond within 30 days of receiving the request.

You also have the right to lodge a complaint with the competent supervisory authority: Italian Data Protection Authority (Garante) — www.garanteprivacy.it.

9. Updates to this notice

Pulse S.r.l. reserves the right to update this policy at any time, including following regulatory changes. Updated versions will be published on this page with the revision date. We recommend checking it periodically.