Privacy Policy in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679)

This Privacy Policy describes how we at Sentrynet collect, use, store, and disclose the personal information of users who visit our website sentrynet.it and interact with our services, particularly through the contact form. We are committed to protecting your privacy and processing your personal data transparently and in compliance with the GDPR.

Data Controller

The Data Controller for your personal data is:

Sentrynet srl
C.so Lodi 18, 20135 Milano (MI) - Italy
info@sentrynet.it

Data Collected and Purposes of Processing

We collect and process your personal data for the following purposes:

Data provided via the Contact Form:

Data collected: name, surname, email address, and message text.
Purposes:This data is collected to respond to your requests, provide support, and manage your communications.
Legal Basis for Processing:Our legitimate interest in responding to user requests (Art. 6 para. 1 lit. f GDPR).

Data collected via Google reCAPTCHA:

Data collected: To protect our site from spam and abuse, we use the Google reCAPTCHA Enterprise service from Google Ireland Limited (or Google LLC for users outside the EU). reCAPTCHA analyzes user behavior based on various characteristics (e.g., IP address, time spent on the site, mouse movements, keyboard input, linked Google account).
This process occurs in the background, and the user is not necessarily aware of it.
Purposes: The purpose is to prevent the automated sending of unwanted messages and to protect the security of our site.
Legal Basis for Processing: Our legitimate interest in protecting our website and systems from abuse and spam (Art. 6 para. 1 lit. f GDPR).
Additional Information: the use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. Data collected by reCAPTCHA may be transferred to the United States. Google has adhered to the EU-US Data Privacy Framework (or Standard Contractual Clauses), ensuring an adequate level of data protection. Further information can also be found through the "Privacy" and "Terms" links within the reCAPTCHA widget.

Data Processing Methods

Personal data is processed using automated and/or manual tools, strictly for the time necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.

Data Communication and Recipients

Your personal data will not be disseminated.
It may be communicated to external parties acting on behalf of the Data Controller as Data Processors (e.g., IT service providers, hosting providers) or to independent data controllers (e.g., judicial or supervisory authorities). Communication will only occur for the purposes indicated above and in compliance with current regulations. Google is a recipient of data collected via reCAPTCHA.

Transfer of Data Abroad

Data collected via Google reCAPTCHA may be transferred outside the European Economic Area (EEA), particularly to the United States. Google ensures an adequate level of data protection through its adherence to the EU-US Data Privacy Framework and/or the use of Standard Contractual Clauses.

Data Retention Period

Data collected via the contact form will be retained for the time strictly necessary to manage your request and, subsequently, for a period not exceeding 12 months for administrative purposes or until you withdraw your consent, unless a longer retention period is required by legal obligations or for the defense of a right in court. Data collected by reCAPTCHA is managed by Google according to its own retention policies.

Your Rights (Data Subject Rights)

Under the GDPR, you have the right to:

Access: Obtain confirmation as to whether or not personal data concerning you is being processed, and to access such data (Art. 15 GDPR).
Rectification: Obtain the rectification of inaccurate personal data concerning you or the completion of incomplete data (Art. 16 GDPR).
Erasure (Right to be Forgotten): Obtain the erasure of personal data concerning you (Art. 17 GDPR).
Restriction of Processing: Obtain restriction of processing (Art. 18 GDPR).
Data Portability: Receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format (Art. 20 GDPR).
Objection: Object at any time to the processing of personal data concerning you (Art. 21 GDPR).
Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (if processing is based on consent).
Lodge a Complaint: Lodge a complaint with the Data Protection Authority.

To exercise your rights, you can contact the Data Controller using the contact details provided on top.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time, by giving notice to users on this page. We invite you to consult this page regularly, referring to the date of last modification indicated at the bottom.

Last updated: July 17, 2025