Controller
Sardegna Innova
Viale Bonaria, 66 - Cagliari (CA) - Sardinia, Italy.
VAT number IT04028870923.
Privacy Policy
How we process the data you share with us
This page explains what data we collect through the website, why we process it, which legal bases apply, and which technical providers are involved.
Data Collected
What information we process
We collect only data that is relevant to incoming enquiries and to the technical controls required to keep the website secure and measurable.
Contact Form
Information entered by the user
When you submit the brief or contact us through the website, we may process your name, organisation, email address, project scope, project size and message content.
This information is provided directly by you and is used to assess the request and reply in a way that fits the context described.
Technical Data
Logs, metadata and service protection
While browsing, the server and security tools may process technical data such as IP address, user agent, timestamp, requested URLs and other information strictly required for security, diagnostics and proper service delivery.
Turnstile
Cloudflare anti-spam verification
Cloudflare Turnstile is enabled on pages that contain the form. The service performs automatic checks on the browser and request context to distinguish human traffic from automated abuse.
This processing is used to protect the form from spam, abuse and fraudulent submissions.
OpenAI Ads
Attribution and conversion data
Only after marketing consent, the OpenAI Ads Pixel may process the page URL, visit origin, date and time, browser technical data and the oppref attribution identifier, which is stored in the first-party __oppref cookie.
After a successful form submission, we send the lead_created event without manually sharing your name, email, organisation or message with OpenAI. If automatic advanced matching is enabled in Ads Manager, the Pixel may detect supported information on the page and send only SHA-256 hashes rather than raw values.
Purposes And Legal Bases
Why we process this data
Each processing activity is tied to a concrete website function and to a legal basis proportionate to the actual use of the site.
Replies
Handling contact requests and briefs
We use form data to review your request, reply to you and manage any follow-up pre-contractual discussion.
The legal basis is the performance of pre-contractual measures requested by the data subject or, where relevant, the legitimate interest in handling relevant enquiries received through the website.
Security
Abuse prevention and service protection
Technical data, security logs and Turnstile checks are processed to prevent spam, abusive traffic, automated submissions and service disruptions.
The legal basis is the legitimate interest of the controller in protecting the website and keeping the contact channel reliable.
Analytics
Traffic measurement only after consent
Google Analytics 4 is used only to measure traffic, visited pages, events and overall site performance in aggregate form.
The service is activated only after explicit consent through the cookie banner. Without consent, analytics does not run.
Advertising Measurement
Campaign attribution only after consent
The OpenAI Ads Pixel measures page views and contact requests that may be attributed to ads displayed in ChatGPT.
The legal basis is marketing consent. The SDK and its events remain blocked until the specific opt-in, and withdrawal stops future measurements.
Retention And Rights
How long we keep data and how you can act
Data is kept only for the period needed for the declared purposes and users can exercise the rights granted by the GDPR at any time.
Retention
Storage periods
Requests submitted through the form or email are kept for the time needed to handle the enquiry, the related correspondence and any follow-up operational steps.
Security-related data may be retained for limited periods that are consistent with abuse prevention and technical diagnostics.
Any analytics data depends on the retention settings configured in the Google Analytics 4 property and remains subject to prior consent.
OpenAI Ads attribution and conversion data is retained under the provider's applicable settings and terms; the __oppref cookie is deleted from the browser when you withdraw marketing consent.
Recipients
Who may process the data
Data may be processed by authorised staff or collaborators of Sardegna Innova and, when necessary, by technical providers acting according to their role as processors or independent controllers.
This includes, in particular, Google for Google Analytics 4, Cloudflare for Turnstile and OpenAI for ChatGPT Ads campaign measurement and attribution.
Rights
Access, rectification, erasure and objection
You may request access, rectification, erasure, restriction of processing, objection, or portability where applicable under the GDPR.
You may also withdraw analytics and marketing consent separately at any time by reopening the preference panel on this website.
- email: hello@sardegnainnova.com
- phone: +39 070 796 8422
- you also retain the right to lodge a complaint with the competent supervisory authority