AdVinci ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit https://advinci.it (the "Website") or engage our digital advertising, design and consultancy services (collectively, the "Services"). It also describes your rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR) and applicable Italian data‑protection laws.
1. Who is the Data Controller?
- Controller
- AdVinci
- Address
- Loc. Parolito, 62027 San Severino Marche (MC), Italy
- P. IVA
- 02154870436
- E‑mail
- privacy@advinci.it
- Phone
- +39 350 525 8588
2. What Personal Data do we collect?
| Category | Examples | Source |
|---|---|---|
| Identification & Contact | name, business name, e‑mail address, phone number | provided by you (contact form, e‑mails, contracts) |
| Content & Creative | ad creatives, images, copy, files you upload (≤ 20 MB) | provided by you |
| Transactional | invoices, payment details, VAT ID, campaign history | generated in the course of business |
| Usage & Technical | IP address, browser type, pages visited, time‑zone, cookie identifiers | collected automatically via cookies & similar tech |
| Marketing Preferences | newsletter opt‑in/opt‑out, language | provided by you |
We do not intentionally collect special categories of data (art. 9 GDPR) unless you choose to include such information in ad creatives or communications.
3. Legal Bases & Purposes of Processing
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Responding to inquiries, preparing quotes, providing Services | (b) Contract performance |
| Managing customer accounts, issuing invoices, keeping tax records | (c) Legal obligation |
| Operating, securing and improving the Website (analytics, logs) | (f) Legitimate interest (efficient, secure service) |
| Sending service‑related or promotional e‑mails | (b) Contract or (a) Consent (for marketing) |
| Showcasing completed campaigns in our portfolio | (f) Legitimate interest (marketing) unless you object |
Where we rely on legitimate interest, we have balanced our interests against your fundamental rights and freedoms.
5. Who will receive your data?
- Service providers: hosting (Vercel Inc., EU data centre), e‑mail & CRM (Google Workspace, HubSpot), payment processors, analytics providers, professional advisers.
- Business partners & subcontractors strictly for fulfilling design or campaign services.
- Public authorities if required by law or to defend legal claims.
All processors act under written agreements that meet art. 28 GDPR obligations. We never sell your personal data.
6. International Transfers
Some providers (e.g., Vercel Inc. & Google LLC) are located outside the European Economic Area. Where this results in a transfer of personal data, it is safeguarded by EU Standard Contractual Clauses or adequacy decisions in accordance with arts. 44‑49 GDPR.
7. Data Retention
| Data set | Retention period |
|---|---|
| Contact inquiries (no contract) | 12 months after last contact |
| Client contractual records | 10 years (Italian Civil Code & tax law) |
| Invoices & accounting | 10 years |
| Analytics data | 14 months (GA4 default) |
| Cookies | see Cookie Policy |
We will delete or anonymise data once the retention period expires unless longer storage is required by law or necessary for the establishment, exercise or defence of legal claims.
8. Your Rights
Under the GDPR you may:
- Access your personal data (art. 15);
- Rectify inaccurate or incomplete data (art. 16);
- Erase data ("right to be forgotten", art. 17);
- Restrict processing (art. 18);
- Port data to another controller (art. 20);
- Object to processing based on legitimate interest or direct marketing (art. 21);
- Withdraw consent at any time (art. 7 §3), without affecting legality of prior processing.
To exercise any right, e‑mail privacy@advinci.it. We may need to verify your identity. You also have the right to lodge a complaint with the Italian supervisory authority: Garante per la Protezione dei Dati Personali.
9. How we protect your data
- SSL/TLS encryption
- Access controls & role‑based permissions
- Encrypted backups
- Regular software updates & security monitoring
- Processor due‑diligence & NDAs
10. Automated decision‑making
We do not use your data for automated decision‑making or profiling that produces legal or similarly significant effects.
11. Third‑party links
The Website may contain links to sites we do not operate. We are not responsible for their privacy practices. Please review their policies before submitting data.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change accordingly. Significant changes will be communicated via the Website or by e‑mail if appropriate.
13. Contact us
- DPO
- Matthew Kirk
- E‑mail
- privacy@advinci.it
- Address
- Loc. Parolito, 62027 San Severino Marche (MC), Italy