Privacy notice

Controller and scope

The data controller is Carnovali SpA, via Industriale 2, Prevalle (BS), Italy. For personal data enquiries: privacymonitrag@pec.it.

This notice covers the www.monitrag.it marketing website in its four languages. The app.monitrag.it portal is a separate service with its own privacy notice.

Data, purposes and legal bases

The hosting service processes technical data needed to deliver pages, including IP address, HTTP request, date and browser information, to operate and secure the website. The legal basis is the controller’s legitimate interest in providing and protecting the service (Article 6(1)(f) GDPR).

Only after consent, Google Analytics 4 processes browsing data and pseudonymous identifiers: pages visited, traffic sources, campaigns, device, language, approximate geographical area and content interactions. This helps us measure and improve the website. The legal basis is consent (Article 6(1)(a) GDPR). The website configuration disables advertising features and Google Signals.

When you contact us by email or phone, we process the information you provide to respond to and handle your request, including possible pre-contractual steps (Article 6(1)(b) GDPR). There is no form on this website: contact links open your device’s applications. With consent, contact clicks are counted as interactions; the content of your communication is not recorded by Analytics.

Choice and retention

Analytics consent is optional. You can browse after declining and withdraw consent through “Cookie preferences”. Withdrawal stops future collection and removes Analytics cookies created by this website; it does not affect the lawfulness of earlier processing.

Your choice is remembered in the browser for 180 days. Analytics cookies are also configured for 180 days without automatic renewal. Detailed GA4 data is subject to the property’s retention settings, up to 14 months from the last activity; aggregated reports may be retained longer to compare website performance over time.

Enquiry data is retained for as long as necessary to handle the request and any resulting relationship, subject to legal obligations and the protection of rights. Technical logs are retained as necessary for operation, troubleshooting and security, or investigations following an incident.

Recipients and transfers

Authorised staff and providers supporting hosting, maintenance and communications may access data. With your consent, Google receives data required for Analytics. Names, email addresses, message contents and portal user identifiers are not intentionally sent to Google.

Google’s service may involve transfers outside the European Economic Area. Google describes the mechanisms it uses, including applicable adequacy decisions and standard contractual clauses, in the documents linked below.

Your rights

Where provided by the GDPR, you may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests and withdraw consent. Contact privacymonitrag@pec.it. You may also complain to the Italian data protection authority or the competent authority in your country.

The website’s analytics are not used for solely automated decisions with legal or similarly significant effects.