Notice on the processing of personal data

1. Who the data controller is

The data controller is Skill-box S.r.l.. For any question about this notice, or to exercise your rights, you can write to privacy@skill-box.com.

Registered office

Via Guelfa 76 – 40138 Bologna (BO)

E-mail

privacy@skill-box.com

PEC

skill-box@pec.it

Phone

0733 815791

VAT no.

02588581203

Skill-box S.r.l. is not required to appoint a data protection officer (DPO).

2. What data we process

• Browsing data. Like any web server, the server hosting this site records the IP address, the date and time of the request, the page requested and the browser used.
• Data you write in the forms. Request for information or a demo: name, company (optional) and e-mail. Contact page and a course's «Ask for information»: name, e-mail and, if you wish, surname, company, phone and message. «Work with us»: name, e-mail and, if you wish, a message.
• Data that comes with every request. Together with what you write we record the language and address of the page the request was sent from, including any campaign parameters that brought you to us (UTM codes), the course it refers to if it started from a course page, the date, the version of this notice you were shown, the browser used and the IP address in pseudonymised form: a code derived from it that does not show it in clear, used only to counter automated submissions and abuse.
• Statistical data about your visit, only if you accept analytics cookies: see section 5.

We do not ask for special categories of data, meaning those listed in Art. 9 of the GDPR: data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; genetic data; biometric data used to uniquely identify a person; data concerning health, sex life or sexual orientation. Please do not write them in the message field.

If you write more data in the message than we ask for, we process it in compliance with the law, and we delete whatever is not needed to answer your request.

3. Why we process it, and on what legal basis

• Running and protecting the site, including countering automated form submissions: the controller's legitimate interest in the security of the service (Art. 6(1)(f) GDPR).
• Answering a request you made — information, a demo, a quote, a course: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Assessing an application sent with «Work with us»: pre-contractual measures at your request (Art. 6(1)(b) GDPR). Consent is not required for unsolicited applications (Art. 111-bis of the Italian Privacy Code).
• Producing visit statistics with Google Analytics: your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time.
• Complying with legal obligations and, where necessary, establishing or defending our rights: legal obligation and legitimate interest (Art. 6(1)(c) and (f) GDPR).

We do not use form data to send you marketing you have not asked for. We make no decisions based solely on automated processing and we do no profiling.

Our newsletter is published on LinkedIn: you subscribe there, under LinkedIn's privacy notice. This site does not collect subscriptions.

4. Do you have to give us your data?

Browsing data is needed to show you the site. In the forms only the fields marked as required are mandatory: without them we cannot answer you. Consent to analytics cookies is free, and refusing it changes nothing in how you can use the site.

5. Visit statistics (Google Analytics)

We use Google Analytics 4, loaded through Google Tag Manager, and only if you accept analytics cookies in the banner. Until you accept, the site loads nothing from Google: no script, no request, no cookie.

If you accept, Google Analytics records information about the visit: the pages viewed and time spent, the referring page, the type of device and browser, the language and an approximate location derived from the IP address, which Google Analytics does not store. It recognises you from one visit to the next through a random identifier saved in the «_ga» cookies: this is pseudonymous data, not anonymous data.

It also records some actions on the site, as codes and never as content: a successfully sent form (which form and, if it concerns a course, which course — never the data you entered), opening a course page and clicks on «Ask for information», «Watch the demo», «Request a demo» and «Request a call».

Advertising features are switched off. The site tells Google that your consent covers analytics only and not advertising, and Google Signals is disabled: the data is not used to profile you or to show you ads, on this site or elsewhere.

The provider is Google Ireland Limited, which processes the data on our behalf as a processor; the data may be transferred to Google LLC in the United States (section 8). Data collected by Google Analytics is kept for no longer than 14 months.

You can withdraw your consent at any time from the «Manage cookie preferences» link at the bottom of every page: from then on Google Analytics is no longer loaded and its cookies are deleted from your browser. Each cookie is described in the cookie policy.

6. How we process the data

Data is processed electronically, by the people at Skill-box S.r.l. authorised to do so and with appropriate security measures. Requests sent through the forms reach our contact management system and, as a notification, an internal mailbox.

Fonts, images and icons are hosted on our own domain. Course covers and demo videos — the latter only when you choose to play them — come from other Skill-box S.r.l. domains. Without your consent to analytics, the site contacts no third-party service.

Links to our LinkedIn profiles take you to LinkedIn's website: until you open them, LinkedIn receives nothing from this site.

7. Who we share the data with

• The people at Skill-box S.r.l. authorised to process it.
• The providers of the technical services the site uses — hosting of the site and systems, e-mail — appointed as processors under Art. 28 GDPR.
• Google Ireland Limited, for visit statistics, only if you have given consent.
• Public authorities, when the law requires it.

We do not sell your data and we do not publish it. The up-to-date list of processors is available by writing to privacy@skill-box.com.

8. Transfers outside the European Union

With Google Analytics, data may be transferred to Google LLC in the United States. Google LLC participates in the EU-US Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023; the transfer is also covered by the standard contractual clauses approved by the Commission.

Should another provider process data outside the Union, this will only happen towards countries with an adequacy decision or with the safeguards set out in Articles 44-49 GDPR, and we will say so on this page.

9. How long we keep the data

• Browsing data in the server logs: for as long as needed to keep the site secure and working, unless it is needed to investigate a computer crime.
• Requests sent through the forms: for as long as needed to handle the request and any business relationship that follows; then they are deleted.
• Applications: up to 12 months from when they are sent, so that we can also consider them for positions that open in that period; then they are deleted.
• Google Analytics statistics: no longer than 14 months. How long the cookies last is in the cookie policy.
• Your cookie choice: 6 months, in your browser; then the banner asks you again.

If data is needed to comply with a legal obligation or to defend our rights, we keep it for as long as that obligation or defence requires.

10. Your rights

At any time you can ask us:

• to access your data and to know how we process it (Art. 15 GDPR);
• to correct it (Art. 16) or erase it (Art. 17);
• to restrict its processing (Art. 18);
• to receive it in a machine-readable format, to pass it to another controller (Art. 20);
• to object to processing based on our legitimate interest (Art. 21);
• to withdraw your consent to analytics, without affecting the lawfulness of what was done before the withdrawal (Art. 7).

To exercise them, write to privacy@skill-box.com: we answer within one month. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

11. If this notice changes

When the processing changes we update this page and the date at the top. If the change concerns analytics cookies, the banner asks for your choice again.