1. Data Controller

The data controller for personal data collected through this website is:
Hygiene Care S.a.s. di Marco Tarducci & C.
Registered address: Via degli Artigiani 27, 50055 Lastra a Signa (FI), Italy
VAT No.: IT 06939970486
Email: hygienecare.mt@gmail.com
PEC: hygienecaresas@pec.it

2. Data Collected and Purposes

The website collects personal data exclusively through the contact and quote forms. Data collected includes:

Full name
Email address
Phone number
Company name (optional)
Area of interest selected
Free-text description of the enquiry

Purpose: data is processed solely to respond to the enquiry, consultation or quote request submitted by the data subject. It is not used for marketing, profiling or unsolicited commercial communications.

3. Legal Basis

Processing is based on the data subject's consent (Art. 6(1)(a) GDPR), given by ticking the privacy acceptance checkbox before submitting the form, and on pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).

4. Processing Methods and Recipients

Data entered in the consultation request form is sent to the website servers, hosted by OVH (data centres within the European Union, acting as data processor for the infrastructure only), and forwarded from there by email to Hygiene Care's team. It is not stored in any archive of the website: it remains solely in the company mailbox that receives the request. No third-party platform is involved in collecting the form.

As an alternative to the form, you may choose to write to us through the WhatsApp messaging platform (Meta Platforms Ireland Limited), which in that case acts as the forwarding channel to Hygiene Care's team. Meta Platforms Ireland Limited acts as an external data processor for transmission and infrastructure; WhatsApp's privacy policy applies, available at whatsapp.com/legal/privacy-policy .

Data is not shared with other third parties or sold for commercial purposes.

5. International Transfers

The website itself does not transfer personal data outside the European Union: fonts are self-hosted and no third-party tracking services are installed (no advertising pixels, no external profiling platforms).

To understand which pages are useful to visitors we use Matomo, an analytics system installed on our own servers (OVH, European Union): browsing data is never sent to any external provider and stays under our control. Matomo is configured to use no cookies, to anonymise the IP address — the last two groups of digits are zeroed before storage, and only that shortened address is used to estimate geographic origin — and to delete detailed data automatically after 6 months, keeping only aggregate statistics that cannot be traced back to any individual. In this configuration the measurement does not require user consent.

Transmission via WhatsApp involves Meta Platforms processing, which may entail transfers outside the EU based on Standard Contractual Clauses approved by the European Commission under Art. 46 GDPR. See WhatsApp's privacy policy for details.

6. Retention Period

Data transmitted via WhatsApp is retained on company devices and accounts for the time strictly necessary to handle the request, and in any case for no longer than 24 months from receipt, unless legal obligations or judicial defence require longer retention.

Data collected through the blog document request form (section 4-bis) is stored on the website servers and retained for as long as necessary to deliver the documents and maintain the delivery log, and in any case for no longer than 6 months after the personal download link expires (the link is valid for 7 days from the request); after that period the data is deleted automatically. The copy of the request sent to the company mailbox is retained, like other incoming correspondence, for no longer than 24 months.

7. Rights of the Data Subject

Under Arts. 15–22 GDPR, you have the right to:

Access (Art. 15): confirm processing and obtain a copy;
Rectification (Art. 16): correct inaccurate data;
Erasure (Art. 17): request deletion ("right to be forgotten");
Restriction (Art. 18): limit processing;
Portability (Art. 20): receive data in structured format;
Objection (Art. 21): object to processing at any time;
Withdrawal of consent (Art. 7(3)): withdraw consent without affecting prior lawful processing.

To exercise your rights, write to the data controller's email address listed in section 1.

8. Complaint to the Supervisory Authority

You have the right to lodge a complaint with the competent supervisory authority. In Italy: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it .

9. Cookies and Technical Storage

For information on cookies and local storage, see the Cookie Policy.

Privacy Policy