1. Data controller
The data controller is:
- Company name: Synapsis FW S.r.l.
- Registered office: Via Sant'Ignazio di Loyola 130, 80131 Napoli (NA), Italy
- VAT / Tax code: 11136831218
- REA: NA 1157830
- Email: info@synapsisfw.it
- Certified email (PEC): sfw@pec.it
- Phone: +39 340 3542476
2. Personal data collected
This site collects the following personal data, voluntarily provided by the user through the contact form or through navigation:
- Contact data: first name, last name, email, phone (if provided), company, role;
- Communication content: text of the message sent through the form;
- Navigation data: IP address, browser type, operating system, pages visited, visit duration, collected through technical and analytical cookies (see Cookie Policy).
3. Purposes and legal bases
Personal data are processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Response to form requests | Pre-contractual measures at the data subject's request (Art. 6.1.b GDPR) |
| Accounting and tax obligations | Legal obligation (Art. 6.1.c GDPR) |
| Aggregated statistical analyses | Legitimate interest of the controller (Art. 6.1.f GDPR) |
| Direct marketing, newsletter | Explicit consent of the data subject (Art. 6.1.a GDPR) |
4. Processing methods
Data processing takes place using electronic and paper tools, with technical and organisational security measures appropriate to prevent loss, unlawful or unauthorised use and improper access. Data collected through the contact form are transmitted in encrypted mode (HTTPS/TLS) and processed via the Web3Forms service (see section 6).
5. Retention period
- Form data: retained for the time necessary to handle the request and for an additional [12/24] months for management archival purposes;
- Contractual and tax data: 10 years pursuant to civil and tax legislation;
- Navigation data: retained as indicated in the Cookie Policy.
6. Disclosure and transfer of data
Data may be disclosed to:
- Internal subjects: authorised employees and collaborators;
- External providers: as data processors under Art. 28 GDPR (hosting, email provider, analytics services, form management). In particular:
- Web3Forms (contact form management) — privacy: web3forms.com/privacy
- Aruba S.p.A. (hosting) — privacy: aruba.it/informativa-privacy
- Google Fonts — privacy: policies.google.com/privacy
- Competent authorities: in case of legal obligations.
Some providers may transfer data outside the European Economic Area. In that case, transfers occur on the basis of standard contractual clauses adopted by the European Commission or adequacy decisions under Art. 45 GDPR.
7. Data subject rights
Under Articles 15–22 of GDPR, the data subject has the right to:
- access their personal data (Art. 15);
- request rectification of inaccurate data or integration of incomplete data (Art. 16);
- request erasure ("right to be forgotten", Art. 17);
- request restriction of processing (Art. 18);
- receive data in structured format and transfer them to another controller (Art. 20);
- object to processing on legitimate grounds (Art. 21);
- withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before withdrawal;
- lodge a complaint with the Italian Data Protection Authority.
8. How to exercise rights
To exercise the listed rights or for any request relating to the processing of personal data, the data subject may write to info@synapsisfw.it, attaching a copy of an identity document.
9. Changes to this notice
This notice may be updated periodically to reflect regulatory or operational changes. Updated versions will be published on this page indicating the date of the last update.
Last updated: 27 April 2026