Ir al contenido principal

Websita Design

Menú

Privacy Policy

Privacy Policy

Last updated: November 2026

1. Introduction

Websita Design is committed to protecting the privacy and personal data of individuals who visit its website and use its services.

This Privacy Policy explains how personal data is collected, used, retained and protected through the website https://websitadesign.com, in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable data protection legislation.

This policy should be read together with the website’s Cookie Policy.

2. Data Controller

The data controller responsible for processing personal data is:

Websita Design is the trading name used to provide website design and development services.

3. Categories of Personal Data Collected

Depending on the relationship established with the user, Websita Design may collect the following categories of personal data:

  • Identification and contact data: first name, last name, email address, telephone number and other contact details voluntarily provided.
  • Business data: information about the data subject’s company, business or professional activity, as well as details of their enquiry or quotation request.
  • Contractual and billing data: information necessary to manage the engagement of services, service provision, payments and applicable administrative or tax obligations.
  • Technical and browsing data: IP address, browser information, device information, pages visited, dates and duration of visits, and other technical data, where collected by the tools used on the website.
  • Consent-related data: user preferences and decisions regarding the use of cookies and similar technologies.

Websita Design does not deliberately request special categories of personal data unless there is a legitimate need and a valid legal basis permitting their processing.

4. Purposes and Legal Bases for Processing

Personal data will only be processed for specified, explicit and legitimate purposes. Each processing activity will be based on one of the legal grounds provided for in Article 6 of the GDPR.

4.1. Handling Enquiries and Requests for Information

Data provided by users will be used to respond to enquiries, handle requests for information, assess their needs and prepare commercial proposals or quotations.

Legal basis: taking steps prior to entering into a contract at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR, where the enquiry relates to the potential engagement of a service. In other cases, processing may be based on Websita Design’s legitimate interest in handling and managing incoming communications, pursuant to Article 6(1)(f) of the GDPR.

4.2. Managing Contracts and Providing Services

Personal data will be used to manage the contractual relationship, organise projects, maintain necessary communications and provide the website design and creation services that have been contracted.

Legal basis: performance of a contract or taking steps prior to entering into a contract at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.

4.3. Managing Payments, Invoicing and Administrative Obligations

The necessary data may be used to manage payments, commercial transactions, invoicing documentation and any other applicable administrative, accounting or tax obligations.

Legal basis: performance of a contract, pursuant to Article 6(1)(b) of the GDPR, and compliance with legal obligations applicable to the data controller, pursuant to Article 6(1)(c) of the GDPR.

4.4. Ensuring Website Security and Functionality

Technical data may be processed to maintain security, prevent unauthorised access, detect fraudulent activities, resolve technical issues and ensure the proper functioning of the website.

Legal basis: Websita Design’s legitimate interest in protecting its website, systems and services, pursuant to Article 6(1)(f) of the GDPR, provided that such interest does not override the rights and freedoms of the data subject. Where applicable, processing may also be based on compliance with legal obligations, pursuant to Article 6(1)(c) of the GDPR.

4.5. Analysing Website Usage

Where analytics tools are active, browsing data may be processed to understand how the website is used, assess its performance and improve its content and functionality.

Legal basis: the user’s consent, pursuant to Article 6(1)(a) of the GDPR, where cookies or tracking technologies requiring such consent are used. Where technologies that do not require consent are used, processing must have an appropriate legal basis and comply with applicable legislation.

4.6. Managing Cookie Preferences and Consent

Data relating to user preferences may be processed to record, manage and retain users’ decisions regarding the use of cookies and similar technologies.

Legal basis: compliance with legal obligations applicable to the use of cookies and similar technologies, pursuant to Article 6(1)(c) of the GDPR, and the user’s consent where required, pursuant to Article 6(1)(a) of the GDPR.

4.7. Exercising or Defending Legal Rights

Data may be used where necessary to bring, exercise or defend legal claims, manage disputes or respond to administrative or judicial proceedings.

Legal basis: Websita Design’s legitimate interest in protecting and defending its rights and interests, pursuant to Article 6(1)(f) of the GDPR, and compliance with legal obligations where applicable, pursuant to Article 6(1)(c) of the GDPR.

Personal data will not be used for purposes incompatible with those described above unless there is a valid legal basis for doing so and the data subject is informed where required by applicable legislation.

5. Mandatory or Voluntary Nature of Data Provision

Providing personal data for general enquiries is, in principle, voluntary.

However, if the data subject does not provide the information necessary to respond to an enquiry, prepare a proposal or enter into a contract, it may not be possible to handle their request or provide the corresponding service.

Data required to fulfil contractual, administrative, accounting or tax obligations must be provided where required by applicable legislation. Failure to provide such data may prevent the engagement of services or the fulfilment of the relevant obligations.

6. Third-Party Tools and Services Used

To manage its website and carry out its business activities, Websita Design may use third-party technological tools and services, including:

  • WordPress: a content management system used to administer and maintain the website.
  • Cookiebot: a tool designed to manage consent for cookies and similar technologies.
  • Google Site Kit and Google Analytics: Google tools used to integrate measurement services and analyse website usage. Their operation will depend on the active configuration and the user’s consent preferences.
  • Calendly: an external platform that users may access through a link to book a meeting or consultation. The information requested will depend on the platform’s configuration.
  • Ruul.io: an external platform used by Websita Design to collect payments for its services through its payment and Merchant of Record (MoR) solution. The personal and payment data required to process transactions may be processed by Ruul.io in accordance with its own terms and privacy policies.
  • Hosting, domain, security, maintenance, email and technical support providers: services necessary to maintain and operate the website and business communications.

These providers may process personal data to the extent necessary to deliver their respective services. Each provider will be subject to its own terms and privacy policies, without prejudice to the obligations applicable to Websita Design as the data controller.

7. Disclosure of Data to Third Parties and International Transfers

Personal data may be disclosed to third parties only where necessary for the purposes described in this policy, where there is a legal obligation to do so or where a valid legal basis exists.

Potential recipients include:

  • Web hosting, infrastructure, security and maintenance providers.
  • Consent management and analytics tool providers.
  • Meeting booking platforms.
  • Payment and invoicing service providers.
  • Professional, accounting and tax advisers.
  • Public authorities and competent bodies where there is a legal obligation to do so.
  • Other providers necessary for the performance of contracted services or for legitimate purposes.

Personal data will not be sold to third parties.

The role of each provider and whether it acts as an independent data controller or as a data processor will depend on the services actually provided and the applicable agreements.

International transfers: some providers may process data outside the European Economic Area (EEA). Where applicable, such transfers will be carried out in accordance with the GDPR and subject to the legally required safeguards.

8. Data Retention Periods

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and, subsequently, for the periods required by legal obligations or necessary to address potential liabilities.

By way of guidance:

  • Enquiries and commercial requests: for as long as necessary to handle the request and carry out any relevant follow-up.
  • Contractual and billing data: throughout the contractual relationship and for the applicable statutory accounting, tax and administrative retention periods.
  • Communications and complaints: for as long as necessary to manage the relationship and, where applicable, to bring or defend legal claims.
  • Technical data and security logs: for as long as necessary to ensure the security and proper functioning of the systems.
  • Analytics and consent data: in accordance with the configuration of the tools used, the user’s preferences and the applicable statutory periods.

Once personal data is no longer necessary, it will be securely deleted or anonymised unless it must be retained to comply with a legal obligation or address potential liabilities.

9. Data Subject Rights

In accordance with the GDPR, data subjects may exercise the following rights, where applicable:

  • Right of access: to find out whether their personal data is being processed and obtain information about such processing.
  • Right to rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure: to request the deletion of their data where the legal requirements are met.
  • Right to restriction of processing: to request that the use of their data be temporarily restricted in the circumstances provided for by applicable legislation.
  • Right to data portability: to receive the data they have provided in a structured, commonly used and machine-readable format, where the legal requirements are met.
  • Right to object: to object to certain processing activities based on legitimate interests.
  • Right to withdraw consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, the data subject may submit a request to:

info@websitadesign.com

The request should specify the right the individual wishes to exercise. Additional information may be required to verify the applicant’s identity where necessary.

Websita Design will respond within the time limits established by applicable legislation.

10. Right to Lodge a Complaint with a Supervisory Authority

If the data subject considers that the processing of their personal data infringes data protection legislation, they have the right to lodge a complaint with a competent supervisory authority.

In Italy, the relevant supervisory authority is:

Garante per la protezione dei dati personali

Website: https://www.garanteprivacy.it/

The data subject may also contact the supervisory authority of the relevant European Union Member State, particularly where they habitually reside, work or believe that an infringement has occurred in that Member State.

11. Security of Personal Data

Websita Design adopts reasonable technical and organisational measures to protect personal data against loss, destruction, alteration, disclosure or unauthorised access.

These measures may include access controls, security tools, software updates, SSL certificates and protective measures for the systems and services used.

Nevertheless, no information transmission or storage system can guarantee absolute security.

12. Links to External Websites

The website may contain links to third-party platforms or websites, such as Calendly and Ruul.io.

Calendly is used to facilitate the booking of meetings or consultations, while Ruul.io is used to collect payments for Websita Design’s services through its payment and Merchant of Record (MoR) solution.

By accessing these services, users become subject to the terms and privacy policies of the respective providers.

Websita Design does not control the privacy practices or operation of external websites and recommends reviewing their policies before providing any personal data.

13. Personal Data of Minors

Websita Design’s services are primarily aimed at companies, businesses and professionals and are not designed to collect personal data from minors.

If it is discovered that personal data relating to a minor has been collected without a valid legal basis or the necessary authorisations, appropriate measures will be taken to delete such data or bring its processing into compliance with applicable legislation.

14. Automated Decision-Making and Profiling

Websita Design does not intend to make decisions based solely on automated processing, including profiling, which produce legal effects concerning the data subject or similarly significantly affect them.

Should this situation change, the relevant information will be provided and the rights established under the GDPR will be safeguarded.

15. Amendments to the Privacy Policy

Websita Design may update this Privacy Policy to reflect regulatory, technical or operational changes or changes relating to the services offered.

The current version will always be available on the website and will indicate the date of its most recent update.

Users are encouraged to review this page periodically to remain informed about how their personal data is processed.

16. Applicable Law

This Privacy Policy is governed by the General Data Protection Regulation (EU) 2016/679, applicable Italian legislation on the protection of personal data and any other relevant legal provisions.

17. Contact

For any enquiries relating to this Privacy Policy or the processing of personal data, data subjects may contact Websita Design using the following details: