This notice describes how Abra Robotics collects and processes the personal data of users who visit this website or contact us, in accordance with Regulation (EU) 2016/679 (hereinafter "GDPR") and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 ("Privacy Code").
1. Data Controller
The Data Controller is Abra Robotics, sole proprietorship of Niccolò Mazzoleni, operating under individual VAT number 04800170278, with registered address at Viale Trieste 105, 30026 Portogruaro (VE), Italy.
For any request relating to the processing of personal data, please write to: info@abrarobotics.com (PEC: abrarobotics@pec.it).
The Data Controller has not appointed a Data Protection Officer (DPO), as the mandatory conditions under Article 37 GDPR are not met. Should a DPO be appointed in the future, their contact details will be indicated in this section.
2. Categories of data processed
Depending on how you interact with us, we may process the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Contact data | Name, email address, phone number, company/organisation, message content | Provided voluntarily via the contact form or by email |
| Browsing data | IP address, browser and device type, pages visited, date and time of access (technical logs) | Collected automatically by the hosting infrastructure |
We do not intentionally collect special categories of data (Article 9 GDPR). We ask that you do not include sensitive data in the free-text fields of the contact form.
3. Purposes and legal bases for processing
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Responding to information requests, quotes, and call bookings | Pre-contractual measures at the data subject's request (Art. 6.1.b) |
| Management of the contractual relationship and related obligations | Performance of a contract (Art. 6.1.b) and legal obligations (Art. 6.1.c) |
| Ensuring the security and proper functioning of the website | Legitimate interest of the Data Controller (Art. 6.1.f) |
| Sending commercial communications or newsletters (if enabled) | Consent of the data subject (Art. 6.1.a), revocable at any time |
Providing contact data is optional; however, failure to do so makes it impossible to respond to your requests.
4. Processing methods
Data is processed using electronic tools, with appropriate technical and organisational measures in place to ensure security and confidentiality (Article 32 GDPR). In particular:
- the website is hosted on GitHub Pages (GitHub, Inc.), which processes technical access logs;
- data submitted via the contact form is transmitted and stored through Google services (Google Apps Script / Google Sheets, provided by Google Ireland Ltd.);
- web fonts are loaded from the Fontshare service (Indian Type Foundry), which may receive the visitor's IP address in order to deliver the typefaces.
5. Recipients and data processors
Data is not disclosed or sold to third parties for marketing purposes. It may be processed, as Data Processors (Article 28 GDPR) or as independent controllers for technical logs, by the following service providers:
- GitHub, Inc. - website hosting;
- Google Ireland Ltd. / Google LLC - collection and storage of contact form data;
- Indian Type Foundry (Fontshare) - font delivery.
Data may also be disclosed to public authorities, advisors, and professionals when necessary to comply with legal obligations.
6. Transfers of data outside the EU
Some of the service providers listed above are based in or use servers located in the United States. Such transfers are carried out in compliance with Articles 44 et seq. of the GDPR, on the basis of appropriate safeguards such as Standard Contractual Clauses adopted by the European Commission and/or adherence to the EU-U.S. Data Privacy Framework.
7. Retention period
- Contact requests: for the time necessary to handle the request and, where a business relationship is established, for the duration of that relationship and within the statutory limitation periods (generally 10 years for contractual and fiscal documentation).
- Technical logs: for the period strictly necessary for security purposes, in accordance with the hosting providers' policies.
8. Data subject rights
As a data subject, you may exercise at any time the rights set out in Articles 15-22 of the GDPR:
- access to your data;
- rectification and updating;
- erasure ("right to be forgotten");
- restriction of processing;
- data portability;
- objection to processing;
- withdrawal of consent, without prejudice to processing carried out prior to withdrawal.
To exercise your rights, write to info@abrarobotics.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Cookies
This website uses only technical cookies and tools. For details, please consult the Cookie Policy.
10. Changes to this notice
The Data Controller reserves the right to modify or update this notice to reflect new regulatory requirements or for organisational reasons. The updated version will be published on this page with the revision date indicated.