Privacy Policy

1. Data Controller

The Data Controller for personal data collected through the website stage3.it is:

For any request relating to the processing of your personal data, please write to the email address above.

2. Data processed, purposes and legal bases

2.1 Browsing data

The IT systems and software procedures that manage the website automatically collect certain technical data during normal browsing: IP addresses, browser type, operating system, pages visited, and access times.

This data is processed for security, technical monitoring and abuse prevention purposes. The legal basis is the Controller's legitimate interest (Art. 6(1)(f) GDPR). Data is retained for a maximum of 90 days in Cloudflare's logs, the provider that manages the site infrastructure.

2.2 Data provided voluntarily (contact form)

When you fill in the contact form, we process: first and last name, email address, company name (optional) and the content of your message.

This data is processed to respond to your request and, where applicable, for pre-contractual measures. The legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR). Data is retained for 24 months from receipt, unless required by law or a contractual relationship is established.

2.3 Analytical cookies (Google Analytics 4)

Subject to collecting your explicit consent via the cookie banner, we use Google Analytics 4 to collect aggregate data on site usage (pages visited, session duration, geographic origin at country level). The IP address is anonymised before transmission to Google.

The legal basis is the data subject's consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the "Manage cookies" link in the site footer. For more details on the cookies used, see the Cookie Policy.

3. Recipients and transfers outside the EU

Personal data may be shared with the following recipients, to the extent strictly necessary for the purposes described:

• Cloudflare, Inc. (USA) — CDN and security provider. Transfer outside the EU covered by adherence to the EU-US Data Privacy Framework.
• Google LLC (USA) — Google Analytics 4 provider, only with prior consent. Transfer outside the EU covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.

Data is not sold, transferred or shared with third parties for marketing or profiling purposes.

4. Retention period

5. Your rights

Under Articles 15–22 of the GDPR, you have the right to:

• Access — obtain confirmation of processing and a copy of your data;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion of your data ("right to be forgotten");
• Restriction — restrict processing in certain circumstances;
• Portability — receive your data in a structured, machine-readable format;
• Objection — object to processing based on legitimate interest;
• Withdrawal of consent — withdraw consent given at any time.

To exercise your rights, write to privacy@stage3.it. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority in your country of residence. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

6. Changes to this notice

The Controller reserves the right to update this notice to reflect regulatory changes or new processing activities. The "Last updated" date at the top of the page indicates the current version. For materially different processing from the current one, new consent will be requested where required.