Privacy notice

Data controller

Formulas S.r.l., Vicolo Cannella 6, 95037 San Giovanni La Punta (CT), Italy. VAT / Tax ID 06227750871; REA CT-480606. PEC: formulas@pec.it.

Data we process

The data depends on the feature you choose to use.

• Contact: your name, email, company, optional role, subject and message. The form does not ask for special-category data; please do not include it in your message.
• Account: email, credentials sent to the account service, profile details, preferences, notifications and a profile image if you upload one. Session credentials are held in HttpOnly cookies, not localStorage.
• Privacy preferences: optional categories accepted or rejected and the identifier of the related consent record, used to retrieve and update your choice.
• Security: tokens and technical signals from Cloudflare Turnstile when verification is required and you start it, including IP address, user-agent, TLS fingerprint and sitekey/origin data.

Purposes and legal bases

We use data only for purposes connected to the feature you request.

• Reply to an enquiry and take requested pre-contractual steps: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)); for other enquiries, our legitimate interest in handling correspondence (Article 6(1)(f)).
• Create and manage an account, authenticate you and provide the selected features: performance of the requested service or contract (Article 6(1)(b)).
• Prevent spam, unauthorised access and technical incidents: our legitimate interest in service security and continuity (Article 6(1)(f)).
• Comply with legal obligations and protect rights in a dispute, where applicable: legal obligation or legitimate interest (Article 6(1)(c) or (f)).

How data is shared

Data is accessible to authorised personnel and may be processed by technical providers supporting the website, account and security, in accordance with their applicable role and instructions. The account service, contact form and privacy preferences are forwarded to Formulas APIs. When the backend requires verification and you start it, your browser loads Cloudflare Turnstile; Cloudflare receives the technical signals needed to assess automated requests, but not the form fields. Data may also be disclosed to public authorities where required by law.

Transfers and retention

Data is kept for as long as needed for its purpose: contact requests to manage the conversation and any follow-up; account data while the account is active and then as needed for closure, applicable obligations or the protection of rights; security data for as long as needed to prevent and handle abuse and incidents. If a provider processes data outside the European Economic Area, the safeguards required by Chapter V GDPR apply. You can request information about providers and safeguards from the controller.

Your rights

Where the law provides, you can request access, rectification, erasure, restriction, portability or object to processing; if processing is based on consent, you can withdraw it without affecting prior processing. To exercise your rights, write to formulas@pec.it. You can also lodge a complaint with the Italian Data Protection Authority (Garante). Turnstile automatically assesses whether a request appears automated; it does not make decisions with legal or similarly significant effects on you.