Privacy Policy

The data controller is Flavio Galatro (Goflow), sole proprietorship.

• VAT number 06463140654
• Via Rocco Cocchia 27, Sc. A Int. 21, 84129 Salerno (SA), Italy
• Email: goflow.italia@gmail.com

No Data Protection Officer (DPO) has been appointed, as the legal conditions requiring one do not apply.

Through the contact form on this website we collect: name, company (optional), email address, and the content of the message you choose to send.

We collect no other personal data. This website uses no profiling cookies, analytics tools or tracking technologies. Our hosting provider records technical operation logs which may include your IP address, for security and diagnostic purposes.

We do not process special categories of personal data (Article 9 GDPR). Please do not include sensitive data or confidential third-party information in your message.

Purpose: to respond to your enquiry and, if you wish, to arrange an initial introductory call about our services.

Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.

Data collected through the form is not used for unsolicited marketing, nor shared with third parties for marketing purposes. Any promotional communication would require separate, specific and freely revocable consent.

For as long as needed to respond to your enquiry. If no relationship follows, data is kept for a maximum of 24 months from the last contact and then deleted.

If the contact leads to a contractual relationship, data is retained for the duration of that relationship and for the periods required by tax and legal obligations.

You may request deletion at any time by writing to the address in section 1.

Data is neither published nor sold. It is processed solely by the controller and by the following providers, acting as processors under Article 28 GDPR:

Data may also be disclosed to advisers and professionals assisting the controller, where necessary and subject to confidentiality obligations, and to competent authorities where required by law.

Some of the providers listed in section 5 are based in the United States, so processing involves a transfer of personal data outside the European Economic Area.

In particular, data submitted through the contact form is processed by Formspree, Inc. on infrastructure located in the United States. That transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission, as appropriate safeguards under Article 46 GDPR.

You may request a copy of the safeguards in place by writing to the address in section 1.

As a data subject you may exercise, at any time, the rights set out in Articles 15-22 GDPR:

• access your personal data and obtain a copy;
• request rectification or updating;
• request erasure;
• request restriction of processing;
• object to processing;
• receive your data in a structured format (portability).

To exercise them, simply write to goflow.italia@gmail.com. We will respond without undue delay and in any case within one month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of your country of residence, if you believe the processing infringes applicable law.

Providing your data is optional. However, without a name and email address we cannot respond to your enquiry. The “company” and “message” fields may be left blank.

No automated decision-making or profiling takes place, within the meaning of Article 22 GDPR.

This policy may be updated, for example if the providers we use or the purposes of processing change. The version in force is always the one published on this page, with the last-updated date shown at the top.