Privacy Policy

Last updated: 13 November 2026

This is a translation of the Italian text; in case of discrepancy, the Italian version prevails.

This notice explains how the personal data of visitors to enavia.it and of those who fill in the "Get a preview of OGMA" form are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

Enavia, a company in the process of incorporation. Company name, registered office and VAT number will be published here once the company is incorporated.

Contact for any request regarding personal data: [email protected]

Data collected

• Form data: first name, last name, email address, phone number, date and time of submission, confirmation that this notice has been read.
• Technical browsing data: IP address and browser information, logged by the systems serving the site for as long as needed to run and protect it.

The site uses only technical cookies, including the reCAPTCHA cookie required to protect the form, and no profiling or analytics cookies.

Purposes and legal basis

• Contacting those who ask to see Ogma and arranging the presentation: processing is necessary to respond to a request from the data subject prior to entering into a possible contract (Art. 6(1)(b) GDPR).
• Security and operation of the site, including protection of the form against automated submissions with reCAPTCHA: legitimate interest of the controller (Art. 6(1)(f) GDPR).

Form data are used only for these purposes. Sending marketing communications or newsletters requires separate consent, which the site does not currently collect.

Provision of data

The form fields are mandatory: without them the preview request cannot be handled.

Recipients and processors

Data are processed by the controller and by persons authorised by it. To run the site and the form, the controller relies on the following providers, appointed as data processors:

• DigitalOcean, LLC: website hosting, on servers in Frankfurt (Germany).
• Make (Celonis), Prague, Czech Republic: the platform that receives form data, on servers in the European Union.
• Google Ireland Limited: Google Workspace, where requests are stored.
• Google reCAPTCHA Enterprise (Google Ireland Limited): protects the form from automated spam by analysing technical device and browsing data, including the IP address, at the time of submission.
• Google Fonts: the site's typefaces are loaded from Google servers, which receive the visitor's IP address.

Data are never sold or transferred to third parties for their own purposes.

Transfers outside the European Union

Some providers belong to groups headquartered in the United States. Any transfers take place on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, for certified providers, or of standard contractual clauses (Art. 46 GDPR).

Retention

Form data are kept for 24 months from the last contact and then deleted. If a contractual relationship arises, the retention periods set for that relationship and by law apply.

Data subject rights

At any time you may ask the controller for access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest (Articles 15-22 GDPR), by writing to the contact above.

You may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

This notice may be updated. The version in force is always the one published on this page, with the date of the last update.