Privacy policy

Enret srl, Piazza XX Settembre 1- 40121 Bologna, VAT 04408151209. Privacy enquiries: info@enret.it. No Data Protection Officer has been appointed; if this changes, the relevant contact details will be published here.

• Data submitted through the contact form: name, email, optional company and message.
• Technical navigation data generated by the hosting servers: IP address, request date and time, requested page and browser type.
• Account data for the restricted area: email, user identifier, registration date and Google identity when Google sign-in is used.
• Cookie preferences stored in your browser.

• Responding to contact requests — pre-contractual measures at your request (Article 6(1)(b) GDPR).
• Operating the website securely and preventing abuse — legitimate interests (Article 6(1)(f) GDPR).
• Managing restricted-area access — performance of the relationship with staff and clients (Article 6(1)(b) GDPR).
• Analytics and marketing cookies — only with your consent (Article 6(1)(a) GDPR).
• Compliance with legal, tax and accounting obligations (Article 6(1)(c) GDPR).

• Contact requests: 24 months from the last contact, unless a contractual relationship begins.
• Contractual and tax data: 10 years where required by law.
• Technical logs: up to 12 months.
• Cookie preferences: 6 months, after which consent will be requested again.

Data is handled by authorised Enret personnel and processors providing hosting, database and email services. Some providers may process data outside the EU under an adequacy decision or Standard Contractual Clauses and supplementary safeguards. We do not sell personal data.

You may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. Consent may be withdrawn at any time. Write to info@enret.it. You may also lodge a complaint with the Italian Data Protection Authority.

This website does not make automated decisions with legal effects and does not profile visitors. We use HTTPS encryption, authenticated access, separated administrative roles, database access rules and periodic backups. Our approach is described in the AI Act assessment.