Public website: www.digihoreca.it
Privacy notice provided pursuant to Articles 12 and 13 of Regulation (EU) 2016/679 (GDPR).
Last updated: 4 November 2026 | Version: 1.2
1. Data controller and contact details
Saetta Technologies S.R.L. (hereinafter “Saetta” or the “Controller”), with its registered office at Piazza Sandro Pertini 7, 47035 Gambettola (FC), Italy, tax code and VAT number 04834370407, registered with the Business Register of Romagna – Forlì-Cesena and Rimini, REA FO-445152, is the controller of the processing described in this notice.
For information or to exercise your personal data protection rights, you can write to info@digihoreca.it or to the certified email address (PEC) saetta.technologies@pec.it. The internal privacy and security contact is Alessandro Desolda, CTO; this internal role does not, in itself, constitute appointment as a Data Protection Officer (DPO).
2. Scope
This notice covers browsing the corporate website www.digihoreca.it, using the “Request a call” form, requests for information and communications through the contact details published on the website.
It does not fully cover the management of accounts on the DigiTracker platform, accessible at st.digihoreca.it, or personal data contained in documents uploaded by client companies: specific notices and agreements apply to that processing.
3. Categories of data processed
Data provided by the data subject: first name, last name, email address, any telephone number, business or company name, the text of the request and any further information voluntarily submitted through the form or other contact channels.
Technical browsing data: IP addresses, technical device and browser data, access times, system requests, application and security logs, to the extent actually collected by servers, hosting services and protection tools.
Usage and tracking data: with consent to Statistics, Google Analytics 4 measures visits and successfully submitted demo requests using pseudonymous identifiers and technical browsing data. We do not send form contents to Analytics. Cookiebot manages and documents cookie choices; Google Tag Manager distributes the relevant tags. Details, providers and lifetimes are described in the Cookie Policy. No advertising pixels are active.
We do not ask you to enter special categories of data in the form (for example, health information). Please therefore avoid providing information that is not relevant to your request.
4. Purposes and legal bases
Responding to requests and arranging information calls or demos: we use the data to handle the message and respond with relevant communications. When a request comes from a company's contact person, the legal basis is the Controller's legitimate interest in handling requests received in the course of its B2B activities (Article 6(1)(f) GDPR), subject to an assessment balancing the relevant interests. Where the data subject directly requests pre-contractual steps concerning them, Article 6(1)(b) GDPR may apply.
Website operation, maintenance and security: we process the data strictly necessary to make the service available, prevent misuse and cybersecurity incidents, resolve malfunctions and protect systems, on the basis of the Controller's legitimate interest (Article 6(1)(f) GDPR), without prejudice to specific applicable legal provisions.
Any legal obligations and protection of rights: where necessary, we may process data to comply with obligations laid down by law (Article 6(1)(c) GDPR) or to establish, exercise or defend rights before the competent authorities.
Measuring visits and successfully submitted demo requests: Google Analytics 4 is activated only after consent to Statistics (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code). User and event data retention is 2 months, without resetting on new activity; this limit does not apply to aggregated reports. Consent may be changed or withdrawn through the footer. Withholding consent does not prevent you from requesting information through the website. Introducing advertising tools will require updating the notices and consent configuration beforehand.
The contact form does not automatically subscribe you to newsletters or email marketing lists. A response to your request does not, by itself, authorise further promotional communications.
5. Provision of data
Providing the information marked as mandatory in the form is necessary to identify your request and enable us to respond. Other fields are optional. Failure to provide necessary data may prevent us from handling the request. Consent to marketing purposes is not required to submit the form.
6. Processing methods and recipients
Data submitted through the form is sent by email to the company mailbox managed through Google Workspace, so that authorised staff can handle the request. The form also sends a confirmation email to the requester and does not save the data in a database. We do not use the form to automatically create entries in external CRM systems or subscriptions to bulk email marketing platforms.
The corporate website is hosted on Aruba infrastructure, which also provides technical services and website storage resources.
Data may be accessed by expressly authorised company staff and technical providers involved in hosting, email, maintenance and security, within the limits of their respective roles and applicable agreements. We do not publicly disclose form data.
7. Transfers to third countries
Saetta uses primary infrastructure located in Europe for the services indicated. However, the location of the data centre does not, in itself, rule out transfers or access from countries outside the European Economic Area through ancillary services, support, logs or subprocessors.
Where international transfers of personal data occur, they are subject to the applicable conditions and safeguards under Chapter V of the GDPR, including, where relevant, adequacy decisions or standard contractual clauses. Information on the safeguards applied to individual processing activities can be requested using the Controller's contact details.
8. Retention periods
Requests for information and related contact data that do not lead to a contractual relationship are retained for a maximum of 12 months from the last meaningful interaction. After that period, the data is deleted or anonymised in operational email accounts, unless there is a specific need for further retention required by law or justified by the protection of rights.
Where a request leads to a commercial relationship, relevant data may be retained for the duration of that relationship and for any additional periods applicable to the relevant purposes, in accordance with the pertinent notices and contractual documentation.
Technical data and logs are retained for a period proportionate to the purposes of operation, security and incident management, according to the services' actual configurations. Any backups are managed according to technical retention and deletion cycles, in compliance with applicable purposes and obligations.
9. Data subjects' rights
Subject to the conditions laid down by the GDPR, data subjects may request access to their data, rectification, erasure, restriction of processing and portability, and may object to processing based on legitimate interests. Where processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of previous processing.
Requests may be sent to info@digihoreca.it. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) and to seek judicial remedies as provided by law.
10. Cookies and similar technologies
Information on the use of cookies and other tracking tools, their categories and the management of preferences is provided in the Cookie Policy published on the website. Where provided for, preferences can be changed or withdrawn through the dedicated cookie management system.
11. Updates
This notice may be updated following regulatory, organisational or technological changes. The updated version will be made available on this page and, where required or appropriate, substantial changes will be communicated through suitable means.