This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation, including Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018.
Last updated: August 31, 2026
The Data Controller responsible for the processing of personal data through this website is:
THELIA SRLS
Via Giovanni XXIII 7, Cesate (Milano) 20031, Italy
Email: info@thelia.tech
Phone: +39 3338697737
THELIA SRLS is established in Italy and therefore no representative pursuant to Article 27 GDPR is required.
No Data Protection Officer (DPO) has been appointed.
This Privacy Policy explains how we collect and process personal data when you visit thelia.tech, contact us through the website or interact with its services.
Depending on how you use the website, we may process the following categories of personal data.
When you contact us through the website, we may collect your name, email address, company or organisation, the content of your message and any other information you voluntarily provide. Fields indicated as mandatory are necessary for us to receive and respond to your enquiry, while any additional information is provided voluntarily.
When you access the website, our systems and technical service providers may process technical information necessary for the operation and security of the website, such as IP address, browser and device information, requested pages, date and time of access and technical logs.
With your prior consent, we use Google Analytics to understand how visitors use our website. Analytics data may include information about pages viewed, interactions with the website, session information, traffic sources, browser and device characteristics and approximate geographic information.
Google Analytics cookies and related technologies remain disabled until you provide your consent through our cookie banner.
We use CookieYes to collect and store your cookie preferences. This may include a consent identifier, your consent choices and the date and time at which those choices were recorded.
For further information about cookies and tracking technologies, please see our Cookie Policy.
We process personal data only where we have an appropriate legal basis under applicable data protection law.
We process the information submitted through our contact form or other communications in order to answer your request and communicate with you.
Where your request concerns a potential contract or business relationship, the legal basis is Article 6(1)(b) GDPR, relating to steps taken at your request prior to entering into a contract.
For other general enquiries, processing is based on our legitimate interest in responding to communications addressed to our company pursuant to Article 6(1)(f) GDPR.
Technical data and server logs may be processed to operate, secure, maintain and troubleshoot the website and to prevent abuse or unauthorised access.
The legal basis is our legitimate interest in ensuring the security, availability and proper functioning of our website pursuant to Article 6(1)(f) GDPR.
We use Google Analytics only with your prior consent to measure website usage and understand how visitors interact with the website.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR.
You may refuse or withdraw your consent at any time through the cookie settings available on the website. Refusing analytics cookies does not prevent you from using the website.
We record cookie preferences in order to remember your choices and, where necessary, demonstrate that consent was obtained or withdrawn.
This processing is carried out for compliance and accountability purposes under applicable data protection and cookie legislation.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
Contact requests that do not lead to an ongoing contractual or business relationship are retained for 24 months after the request has been dealt with, unless a longer period is necessary to establish, exercise or defend legal claims.
Where a contractual or business relationship is established, relevant correspondence and documentation may be retained for the periods required by applicable legal, accounting and contractual obligations.
Technical and security logs are retained only for the period necessary for the operation, security and troubleshooting of the website, subject to the retention periods applied by our technical service providers.
Google Analytics event data are retained for 14 months, in accordance with the retention settings configured in our Google Analytics property. Aggregated reporting data may remain available for longer periods where it no longer identifies individual users.
Cookie consent information is retained for the period necessary to document and manage your preferences.
We may disclose personal data only where necessary for the purposes described in this Privacy Policy.
Personal data may be processed by:
Register S.p.A., which provides the hosting infrastructure and email services used for the website and the info@thelia.tech email account;
CookieYes Limited, which provides our cookie consent management platform and records cookie preferences;
Google, through Google Analytics and the related technical integration provided by Google Site Kit, for website analytics subject to the user’s consent choices;
technical consultants and service providers who assist us in maintaining and securing the website, where necessary and subject to appropriate confidentiality and data protection obligations;
public authorities, courts or other competent bodies where disclosure is required by applicable law.
We do not sell personal data
We use Google Analytics to obtain statistical information about the use of the website.
Google Analytics is activated only after you have given your consent to analytics cookies. If you reject analytics cookies or close the cookie banner without consenting, analytics storage remains denied.
You may withdraw your consent at any time through the cookie settings available on the website.
Google provides information about its processing practices through its Privacy Policy and its documentation concerning Google Analytics and data protection.
We use CookieYes to display our cookie banner, collect cookie preferences and maintain records of consent choices.
CookieYes Limited acts as a service provider in connection with these functions. CookieYes states in its Data Processing Agreement that restricted international transfers are protected, where applicable, through mechanisms including the European Commission’s Standard Contractual Clauses.
For more information about the cookies used for consent management, please refer to our Cookie Policy.
Some of our technology providers may process personal data outside the European Economic Area.
Where personal data are transferred to countries outside the EEA, we rely on the safeguards provided under applicable data protection law, which may include adequacy decisions adopted by the European Commission, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses approved by the European Commission.
Google states that Google LLC participates in the EU-U.S. Data Privacy Framework and also provides contractual safeguards for relevant international transfers.
CookieYes provides contractual safeguards, including EU Standard Contractual Clauses, for restricted transfers where applicable.
Under the GDPR, subject to the applicable conditions, you may have the right to:
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact us at info@thelia.tech.
We will respond to requests without undue delay and, in principle, within one month of receipt. Where permitted by the GDPR, this period may be extended by up to two additional months depending on the complexity and number of requests. If an extension is necessary, we will inform you accordingly.
You also have the right to lodge a complaint with the Garante per la protezione dei dati personali, or with another competent supervisory authority where applicable.
The GDPR expressly requires disclosure of these rights and of the right to lodge a complaint with a supervisory authority.
Providing information through the contact form is voluntary.
However, certain information, such as a valid contact address and the information necessary to understand your request, may be required for us to respond. If this information is not provided, we may be unable to process your enquiry.
Consent to Google Analytics is entirely optional and refusing or withdrawing it does not affect your ability to use the website.
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no transmission or storage system can guarantee absolute security.
Our website may contain links to websites or services operated by third parties.
When you follow an external link, the processing of your personal data by that third party is governed by its own privacy information and practices. We recommend reviewing the relevant privacy policy before providing personal data to third-party websites.
We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significantly affect users.
We may update this Privacy Policy when our processing activities, technologies or legal obligations change.
The updated version will be published on this page together with a revised “Last updated” date. Where required by applicable law, we will provide additional notice or request new consent before carrying out materially different processing based on consent.
