Privacy Policy
Personal data
privacy notice
In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
Version 3.0, effective 25 September 2026. English wording reviewed on 2 October 2026; substantive terms unchanged.
1
Data controller
The data controller of the personal data collected through the website raveng.it is:
CE4U S.r.l., a sole-shareholder company trading as RAVENG. Registered office: Via G. Rossini 29/2, 37012 Bussolengo (VR), Italy. Tax code, VAT and Verona Companies Register number: 04731920239. REA VR-444364. Share capital EUR 10,000.00, fully paid up. Certified email (PEC): posta@pec.ce4u.it. Telephone: +39 045 7861075. Represented by its legal representative for the time being.
For any request regarding the processing of personal data: privacy@raveng.it.
Data Protection Officer (DPO). At the date of this notice, CE4U has not appointed a DPO for the processing described. Direct communications to privacy@raveng.it. If a DPO is appointed, their contact details will be published here.
2
Data we process, purposes and legal bases
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| a) Browsing and security | IP address, date and time, requested URL, response code, user agent | Website operation, computer security, prevention of abuse | Legitimate interest (art. 6, par. 1, lit. f, GDPR) | 90 days, unless longer retention is necessary to investigate unlawful activity |
| b) Contact requests (form, email, phone) | First name, last name, company, email, phone, service of interest, message; IP and date and time of sending (security and prevention of abuse) | Respond to the request and provide information or quotes; sending an automatic confirmation email | Pre-contractual steps at the data subject's request (Article 6(1)(b)); legitimate interests for general enquiries and form security (point (f)) | 24 months after the last contact if no contract is entered into; otherwise, as set out in item e) |
| c) Download of free resources (templates, checklists) | Name, email, company, role | Provide the requested resource and manage the request | Fulfilling the data subject's request (Article 6(1)(b)) | 24 months |
| d) Commercial communications and regulatory updates | Name, email, company, role, preferences | Newsletter sending, regulatory updates and commercial communications of CE4U | Separate, optional consent (Article 6(1)(a) GDPR; Article 130 of Legislative Decree 196/2003) | Until consent is withdrawn, or 24 months without interaction |
| e) Customer and supplier management | Personal data, contact details, tax and contractual data | Contract performance, invoicing and compliance with legal obligations | Contract (lit. b); legal obligation (lit. c) | 10 years after the relationship ends (Article 2220 of the Italian Civil Code) |
| f) Usage statistics (Google Analytics 4, Microsoft Clarity) | Online identifiers, browsing events, device information | Measure the use of the site in aggregate and improve it | Consent expressed through the banner (art. 6, para. 1, lit. a, GDPR; art. 122 D.Lgs. 196/2003) | See the cookie policy |
| g) Protection of rights | Data relevant to the previous purposes | Establishing, exercising or defending legal claims, in or out of court | Legitimate interest (lit. f) | For the duration of the dispute and the applicable limitation period |
Third-party content is loaded only upon request. The Google Maps map (Contact page) and YouTube videos are loaded only if you click on "Load content". From that point on, Google processes your data as an independent controller, in accordance with its own privacy policy (policies.google.com/privacy).
Site virtual assistant. The assistant at the bottom of each page provides predefined answers and works entirely in your browser: the text you enter is not sent to CE4U or third parties. It is not an artificial intelligence system.
3
Whether providing data is required
For contact and download requests, you must provide at least your name and email address and read this notice. Without those details, we cannot respond or provide the resource. Other fields are optional. Consent to commercial communications is optional: declining it does not affect the requested service. Consent to statistical cookies is optional and can be withdrawn at any time through Manage cookies in the footer.
4
Data recipients
Data is processed by authorised CE4U personnel and may be disclosed to the following parties, appointed as processors under Article 28 GDPR or acting as independent controllers:
| Party | Role | Service | Location |
|---|---|---|---|
| Aruba S.p.A. | Processor | Website hosting, email server | Italy |
| Microsoft Ireland Operations Ltd / Microsoft Corp. | Processor | Email service (backup routing); Microsoft Clarity, only with consent | Ireland / USA |
| Google Ireland Ltd / Google LLC | Processor (GA4, only with consent); independent controller (Maps and YouTube, only on request) | Statistics, maps, videos | Ireland / USA |
| Email marketing provider based in the EU (only if activated) | Processor | Newsletter sending to subscribers with consent | EU |
| Tax and legal consultants, banks | Independent controllers or processors | Administrative and tax compliance | Italy |
| Public authorities | Independent controllers | On request, in the cases provided for by law | Italy / EU |
Data is not publicly disseminated or sold. An up-to-date list of processors is available on request at privacy@raveng.it.
5
Transfers outside the European Economic Area
Google and Microsoft services (statistics only with consent; maps and videos only on request; backup email routing) may involve transfers to the United States. Transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework (Decision (EU) 2023/1795; Article 45 GDPR), in which Google LLC and Microsoft Corporation participate, and, as a fallback, standard contractual clauses (Article 46 GDPR). Request information about safeguards at privacy@raveng.it.
6
Automated decision-making processes and artificial intelligence
Data collected through this website is not used for decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect a person (Article 22 GDPR). For CE4U's use of AI systems, see AI transparency.
7
Your rights as a data subject
You may exercise the rights under Articles 15–22 GDPR: access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests and, without having to give reasons, to direct marketing (Article 21(2)). You may withdraw consent at any time without affecting the lawfulness of earlier processing. For marketing, use the link in each email or write to privacy@raveng.it; for cookies, use Manage cookies.
Requests should be sent to privacy@raveng.it or via PEC to posta@pec.ce4u.it. We respond within one month; this period may be extended by two further months for complex requests (art. 12, para. 3).
You may lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or the supervisory authority in the EU country where you live or work, or where the alleged infringement occurred.
8
Security
CE4U implements technical and organisational measures appropriate to the risk (Article 32 GDPR): encrypted connections (HTTPS with HSTS), access control, updates, form-submission rate limits and backups. No measure guarantees absolute security. In the event of a personal-data breach, CE4U follows the procedures in Articles 33 and 34 GDPR.
9
Minors
The website is intended for businesses and professionals. We do not knowingly collect data from individuals under the age of 18 years.
10
Changes
This notice may be updated following changes in legislation or processing. The current version and update date appear on this page. Previous version: 25 March 2026.