Privacy policy

Data controller

The data controller is Daniele Pastori — FullBL (VAT IT15977701000), based in Italy.

To exercise your rights or ask about personal data: info@fullbl.it — certified email daniele.pastori@pec.libero.it.

Data we collect

Depending on how you use the site, we may process:

• contact details you submit voluntarily (email, message, preferred language);
• an advertising click identifier (gclid) if you arrive from a Google Ads click, stored with the message to measure campaigns without tracking cookies on the site;
• technical browsing data (IP address, user agent, pages visited, timestamps) in server logs;
• anti-spam data processed by Mosparo when you submit a form;
• aggregated or pseudonymised statistics via Umami (when enabled);
• email submitted on the opt-out page for commercial communications.

Purpose and legal basis

Contact form data is processed to reply to requests and manage any commercial relationship (Art. 6(1)(b) GDPR — pre-contractual/contractual steps; alternatively Art. 6(1)(f) — legitimate interest in handling enquiries).

Any gclid is processed to measure Google Ads campaign performance (Art. 6(1)(f) GDPR — legitimate interest in evaluating advertising spend), without installing Google tracking cookies or scripts on the site.

Technical logs and anti-spam are used for security and site operation (Art. 6(1)(f) GDPR).

Umami statistics, when enabled, measure site usage in a privacy-friendly way (Art. 6(1)(f) GDPR).

Commercial email opt-out is processed to honour your choice (Art. 6(1)(c)/(f) GDPR).

Retention

We keep contact messages and CRM data for as long as needed to handle the request and any business relationship, unless longer retention is required by law.

Server and anti-spam logs are kept for limited periods, proportionate to security and troubleshooting.

Opt-out data remains recorded as long as needed to avoid contacting you again.

Where data is processed

Anti-spam, statistics and contact management run on FullBL-managed infrastructure in Europe.

If you upload offline conversions to Google Ads using the gclid, that identifier is shared with Google as an independent controller for its advertising processing.

Cookies and similar technologies

The site does not use third-party profiling cookies or Google Ads/Analytics scripts.

To remember a gclid during browsing we only use the browser’s sessionStorage (not a cookie, and it is not sent automatically to Google).

Umami, when enabled, is configured in a privacy-friendly way and does not use invasive cookies.

Mosparo may use technical cookies or storage needed for anti-spam protection.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability (where applicable), and to withdraw consent without affecting prior processing.

You may lodge a complaint with your data protection authority.

For commercial email you can also use the opt-out page.

Updates

This policy may be updated. The date of the latest update is shown at the top.