Liberatori
IT EN ES
Let's talk
Legal document

Privacy Policy.

Last updated · July 20, 2026 · v 3.0

This policy describes how Liberatori collects, uses and protects personal data, in compliance with EU Regulation 2016/679 (GDPR) and applicable Italian law. It is written to be read, no pointless legalese, no hidden clauses.

01Data controller

The data controller is Liberatori (liberatori.eu), Italy.

For any request concerning your personal data you can contact us at info@liberatori.eu: it is the fastest channel, monitored directly by the team. The controller has not appointed a Data Protection Officer (DPO), as the conditions set out in Art. 37 GDPR do not apply; for any privacy matter, the contact point above applies.

02Personal data collected

We collect only the data needed to provide our services and improve your experience. The categories of data we may process are:

2.1Contact data

First name, last name, business email, company name, role. Provided voluntarily through contact forms, call bookings or newsletter sign-ups.

2.2Technical data

IP address, browser type and operating system, pages visited, time spent on pages. Collected automatically for security purposes and anonymous analytics.

2.3Interaction data

Form responses (industry, type of process to automate, company size), used to qualify your request and prepare for the call.

Note. We do not collect special categories of data, financial data or data relating to children under 16. We do not sell your data to third parties, under any circumstances.

03Purposes of processing

Data is processed exclusively for:

3.1Responding to contact requests

Managing call bookings, replying to form submissions, communications about the services you requested.

3.2Providing our services

Carrying out pre-contractual and contractual measures at your request: quotes, audits, development, maintenance.

3.3Anonymous website analytics

Understanding which content works, optimising the experience. We use aggregate metrics, with no individual profiles.

3.4Legal compliance

Responding to requests from competent authorities, protecting our rights, tax and administrative obligations.

3.5B2B business outreach

We may process professional contact details (such as name, business email and role) obtained from public sources (e.g. company websites or LinkedIn) in order to offer services relevant to the data subject's professional activity.

This processing is based on the controller's legitimate interest in developing business relationships with companies and professionals, in full respect of the data subject's fundamental rights and freedoms.

The data subject always has the right to object to such communications at any time by contacting us at the details provided in this notice.

04Legal basis

Processing relies on the following legal bases under Art. 6 GDPR:

  • Explicit consent of the data subject (Art. 6(1)(a)), for newsletters and marketing communications.
  • Performance of pre-contractual measures taken at your request (Art. 6(1)(b)), for calls, quotes, contracts.
  • Legitimate interest of the controller (Art. 6(1)(f)), for website analytics, security, B2B communications based on public data.
  • Compliance with legal obligations (Art. 6(1)(c)), for invoices, contracts, communications to the authorities.

05Retention period

Data is kept only for as long as strictly necessary for the purposes for which it was collected:

  • Contact data provided at the data subject's initiative, until you request its deletion or, in any case, no longer than 24 months after the last interaction.
  • Professional contact data processed for the B2B communications described in section 3.5, until the data subject objects and, in any case, no longer than 12 months after collection if there has been no interaction.
  • Technical data, up to 12 months, for security purposes.
  • Contract and billing data, as required by Italian tax law (10 years).

Once these periods expire, data is deleted or irreversibly anonymised.

06Data sharing

Your data is never sold or traded. It may be shared exclusively with:

  • Technical service providers needed to run the site (hosting, email, calendar booking via Calendly), all bound by GDPR-compliant data processing agreements.
  • Competent authorities, exclusively where legally required.

All providers are selected to guarantee an adequate level of protection and, where applicable, transfers outside the EU are governed by standard contractual clauses approved by the European Commission.

07Your rights

At any time you can exercise the rights set out in Arts. 15-22 GDPR:

  • Access to the personal data concerning you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data (the "right to be forgotten").
  • Restriction of processing.
  • Portability of your data in a structured format.
  • Objection to processing, including the B2B communications described in section 3.5.
  • Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
  • Complaint to the Italian Data Protection Authority (Garante).

To exercise these rights, write to info@liberatori.eu. We will reply within 30 days.

The site uses technical cookies that are essential to its operation and, subject to your explicit consent, anonymous analytics cookies. We do not use advertising cookies or cross-site profiling cookies.

For full details, see the Cookie Policy. You can change your preferences at any time from the cookie preferences panel.

09Data security

We adopt appropriate technical and organisational measures to protect data from unauthorised access, alteration, disclosure or destruction: TLS 1.3 across the whole site, encrypted access, redundant backups, role-based access control, audit logs of sensitive operations.

No transmission over the Internet can be considered completely secure: we do our best, but we cannot guarantee absolute invulnerability. In the event of a data breach posing a risk to your rights, we will notify the Italian Data Protection Authority (Garante) and, where required, you, within the timeframes set out in Arts. 33-34 GDPR.

10Automated decision-making

We do not use fully automated decision-making or profiling that produces legal or similarly significant effects on data subjects (Art. 22 GDPR). Website metrics are aggregate and anonymous; every assessment of requests and contacts is carried out by people.

11Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. Changes are published on this page with a revised update date. If the changes are substantial, we will inform you by email if we have your contact details.

12Contact

For any question about this Privacy Policy or how we process data, write to info@liberatori.eu.

Have a specific privacy question? Write to us → info@liberatori.eu