Privacy & cookies.

This notice, provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the “GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, explains how we process the personal data of people who visit cibandum.com or contact us through the details and the form published on it.

This is an English translation provided for convenience. In the event of any discrepancy, the Italian version prevails.

1. Data controller

For any request concerning your data you can write to info@cibandum.com. No Data Protection Officer (DPO) has been appointed, as this is not required for our activities.

2. Data we process

Browsing data

During normal operation, the hosting provider’s systems automatically collect certain technical data whose transmission is inherent in the use of Internet protocols: IP address, date and time of the request, page requested, server response code, browser and operating system. This data is not used to identify or profile users; it is needed for the website to work and to keep it secure.

Data you provide

When you fill in the contact form we process your full name, company (if given), email address, project type and the text of your message. If you email us, call us or contact us on WhatsApp, we process the data contained in that communication (for example your phone number and email address).

Please do not include in your message any special categories of data (for example health data) or third-party data that is not needed for your request.

Data used to prevent abuse

To limit spam, the form stores for one hour a cryptographic fingerprint (hash) of the IP address of anyone submitting a request, without keeping the address itself in readable form. After one hour the fingerprint is no longer taken into account and is overwritten.

3. Purposes and legal bases

Your data is not used for newsletters, marketing communications or profiling, and is not subject to automated decision-making.

4. Providing your data

Providing the data requested in the form (name, email, message) is optional, but without it we cannot reply to your enquiry. Giving your company name is optional.

5. How long we keep your data

• Enquiries that do not lead to an engagement: up to 24 months from the last exchange, so that we can follow up on the conversation; they are then deleted.
• Data relating to an engagement: for the duration of the relationship and, for accounting and tax records, for 10 years as required by Italian law (Art. 2220 of the Italian Civil Code).
• Browsing data: for the limited period set by the hosting provider for technical and security purposes.
• Anti-spam IP fingerprint: one hour.

6. Who may receive your data

Your data is processed by the controller and by any authorised and instructed staff. It may also be processed, as processors under Art. 28 GDPR, by:

• the provider of the website’s hosting and email services (Keliweb);
• professionals who assist the controller (for example the tax adviser), limited to the data required if a professional relationship arises.

Data may be disclosed to public authorities where required by law. It is never published or sold to third parties.

7. Transfers outside the European Union

The website is hosted on servers located in the European Union. If you contact us via WhatsApp, the communication is handled by WhatsApp Ireland Ltd. under its own privacy policy and may involve transfers to countries outside the EU. Should any of our providers process data outside the European Economic Area, the transfer takes place only on the basis of a European Commission adequacy decision (for example the EU-U.S. Data Privacy Framework) or standard contractual clauses.

8. Your rights

At any time you can request access to your data, its rectification or erasure, the restriction of processing and data portability, and you can object to processing based on legitimate interest (Articles 15–21 GDPR). Write to info@cibandum.com: we will reply within one month of your request.

If you believe that the processing infringes data protection law, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU Member State where you live or work.

9. Cookie policy

This website does not use cookies, neither technical nor profiling cookies, nor any other tracking technology such as pixels, fingerprinting or local browser storage.

There are no analytics tools (such as Google Analytics), social media buttons or widgets, maps, videos or fonts loaded from third-party servers: all of the website’s resources are served directly by our hosting. For this reason, in line with the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools of 10 June 2021, the website does not display a cookie banner.

External links (for example to WhatsApp or the Garante’s website) lead to third-party websites, which apply their own cookie policies once you visit them. If we introduce tools that require cookies or your consent in the future, we will update this section and ask for your consent before activating them.

10. Changes to this notice

This notice may be updated to reflect changes in the law or to the website. The version in force is always the one published on this page.

Last updated: 1 October 2026