Privacy notice for forms, guides and newsletters

1. Data controller

The data controller is Estro technologies s.r.l., Via della Chiusa 15, 20123 Milan (MI), Italy, VAT IT 10964560964. You can contact us at [email protected].

2. Data processed

We process the data entered in the form, such as first name, last name and email address, the initiative or content requested, and the technical information required for security, abuse prevention and correct delivery of communications. The anti-spam check may involve Cloudflare Turnstile processing the IP address and security token.

3. Purposes of processing

Data is used to manage the submitted request, provide the content described in the form, subscribe the user to Estro’s technical newsletter, send relevant editorial and technical updates, manage preferences and unsubscribes, and protect the service against automated or fraudulent submissions.

4. Legal basis and provision of data

Processing for delivery of the content and newsletter is based on the user’s consent under Article 6(1)(a) GDPR. As stated in the form, requesting the content and subscribing to the newsletter are part of the same initiative. Providing data is optional but necessary to join the initiative through the form. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Providers and recipients

Data may be processed on Estro’s behalf and only as needed to provide the service by MailerLite for subscriber management and email delivery, Amazon Web Services for the form infrastructure, and Cloudflare for anti-spam verification. These providers act as processors or independent controllers according to the service provided and their respective data protection agreements.

6. International transfers

Where a provider or sub-processor processes data outside the European Economic Area, the transfer takes place in accordance with Chapter V GDPR, based on an adequacy decision, standard contractual clauses or another safeguard permitted by applicable law. MailerLite states that subscriber data belonging to EEA customers is stored in the European Union.

7. Retention

Data is retained until the user unsubscribes or withdraws consent and afterwards only for the period strictly necessary to document the request, comply with legal obligations, handle disputes and prevent further unwanted messages. Technical security data is retained only as long as needed to prevent abuse and protect the service.

8. Withdrawal and unsubscribe

You may unsubscribe at any time by using the link at the bottom of each newsletter or by writing to [email protected]. After unsubscribing, no further newsletters will be sent, except for communications required to handle existing requests or comply with legal obligations.

9. Data subject rights

Where applicable under Articles 15-22 GDPR, you may request access, rectification, erasure, restriction, data portability and object to processing. You may also withdraw consent and lodge a complaint with the Italian Data Protection Authority. To exercise your rights, write to [email protected].

10. Automated decision-making

Data collected through these forms is not used for decisions based solely on automated processing that produce legal or similarly significant effects on the user.

Provider information

• MailerLite Data Processing Addendum
• Cloudflare Privacy Policy
• AWS Privacy Notice