In short: we collect what you write in the contact form so we can reply, we keep it in a protected spreadsheet, and we never sell or share it for commercial purposes. Visit statistics are anonymous and use no cookies.
1. Who processes your data
The data controller is Innovative Things S.r.l.,
registered office at Via XX Settembre 54 int. 32, 22066 Mariano Comense (CO), Italia.
VAT no. IT03910540131 — REA ComoCO-406026.
For anything concerning your data, write to info@innovativethings.it .
No Data Protection Officer has been appointed: our activity involves neither large-scale systematic monitoring nor processing of special categories of data.
2. What data we collect
2.1 Data you give us
When you fill in the contact form you provide:
- your name and email address (required);
- phone number, product of interest and how you describe yourself (optional);
- the text of your message;
- your optional request to be notified when the product launches.
If you place a pre-order in future, we will also collect the details needed for invoicing: company name, VAT or tax number, electronic invoicing code or certified email, billing address. Your card details never pass through our site and we never see them: they are handled directly by the payment provider (section 4).
2.2 Data collected automatically
- Referral and device: which site or search brought you here, and whether you are on a phone or a computer. This tells us which channels work.
- IP address: used temporarily to limit repeated form submissions and for the anti-bot check. It is not stored alongside your enquiry.
- Anonymous visit statistics: page views and visits, with no cookies and no retention of your IP address (section 6).
3. Why we process it, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to requests for information, quotes or demonstrations | Pre-contractual steps at your request — Art. 6(1)(b) GDPR | 24 months from last contact |
| Handling a pre-order and the subsequent order | Performance of a contract — Art. 6(1)(b) GDPR | Duration of the relationship |
| Tax and accounting obligations (invoices, records) | Legal obligation — Art. 6(1)(c) GDPR | 10 years (Art. 2220 Italian Civil Code) |
| Telling you when the product is available and sending news | Your consent — Art. 6(1)(a) GDPR, withdrawable at any time | Until withdrawal |
| Protecting the form from automated submissions and abuse | Legitimate interest in security — Art. 6(1)(f) GDPR | A few minutes |
| Measuring advertising campaigns and re-showing our products | Your consent — Art. 6(1)(a) GDPR, via the cookie banner | See cookie policy |
Providing the fields marked as required is necessary only so that we can reply to you: without them we cannot get back to you. Everything else is optional and leaving it blank has no consequence whatsoever.
4. Who we share data with
We do not sell or trade your data. It is processed on our behalf, as data processors, only by the technical providers needed to run the service:
| Provider | What it does | Where |
|---|---|---|
| Netlify | Hosts the site and runs the form code | EU / USA |
| Google (Sheets, Apps Script) | Stores incoming enquiries | EU / USA |
| Aruba | Sending and receiving email | Italy |
| Cloudflare | Form anti-bot check and anonymous statistics | EU / USA |
| Stripe Payments Europe | Collecting the pre-order deposit, once active | Ireland |
| Meta, Google | Advertising measurement, only with your consent | EU / USA |
| OpenStreetMap | Map of our offices, only if you choose to load it | EU / UK |
Data may also be disclosed to professional advisers (accountant, lawyer) and to authorities where required by law.
5. Transfers outside the European Union
Some of the providers listed above may process data in the United States. Where they do, the transfer relies on the Standard Contractual Clauses approved by the European Commission and, where applicable, on the provider’s certification under the EU-U.S. Data Privacy Framework. You can ask us for a copy of the safeguards in place at the address in section 1.
6. Cookies and similar technologies
This site installs no profiling cookies without your consent. Strictly necessary technical cookies and the anonymous statistics — which use no cookies and do not retain your IP address — are always active because they are essential or exempt from consent.
The full category-by-category detail is in the cookie policy. You can change your choice at any time from the Cookie preferences link at the bottom of every page.
7. Your rights
At any time you can ask us to:
- access the data concerning you and obtain a copy (Art. 15);
- correct it if inaccurate or incomplete (Art. 16);
- erase it, where we are not legally required to keep it (Art. 17);
- restrict the processing or object to it (Arts. 18 and 21);
- receive it in a machine-readable format to move it elsewhere (Art. 20);
- withdraw your consent, without affecting the lawfulness of processing carried out before (Art. 7(3)).
Write to info@innovativethings.it: we reply within one month. If you believe the processing breaches the rules, you may lodge a complaint with the Italian Data Protection Authority or bring the matter before a court.
8. Security and automated decisions
The site is served exclusively over an encrypted connection (HTTPS) and access to the enquiry archive is protected by credentials. We carry out no automated profiling producing legal effects concerning you: no decision about you is taken by an automated system.
9. Changes
If we change how we handle data we will update this page and change the date at the top. We invite you to re-read it from time to time.