Privacy Policy
Last updated: 5 October 2026
This notice explains how we process the personal data collected through cyberkord.com, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
1. Data controller
| Company | CyberKord S.r.l. |
|---|---|
| Office | Via Genova Thaon di Revel 21, 20159 Milano (MI), Italy |
| VAT | IT14569340962 |
| Contact | contact@cyberkord.com |
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. For any privacy matter, write to the addresses above.
2. What data we collect
- Contact form: your name, business email, the topic you select and your message.
- Emails you send us: your address and whatever you choose to include.
- Technical data: our hosting provider records standard server logs (IP address, date and time, requested page, browser type) to deliver the site and keep it secure.
We do not use analytics, advertising or profiling cookies. The site stores only your light or dark theme choice in your browser (local storage); it never leaves your device and is not used to identify you.
3. Why we process it, and on what legal basis
- Replying to your request and, if you wish, setting up a call or a pilot: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
- Running and securing the site: our legitimate interest in protecting our systems (Art. 6(1)(f) GDPR).
- Defending our rights in case of disputes: our legitimate interest (Art. 6(1)(f) GDPR).
We do not send newsletters or marketing emails based on the contact form. Providing your details is optional, but without them we cannot reply.
4. Who processes it for us
Your data is handled by authorised CyberKord staff and by these providers, acting as data processors under Article 28 GDPR:
- Web3Forms (Web3Creative): receives the contact form and forwards it to our mailbox.
- Google Workspace (Google Ireland Ltd.): our email.
- Scaleway SAS (France): website hosting.
We do not sell your data or share it with third parties for their own purposes.
5. Transfers outside the EU
Some providers may process data outside the European Economic Area. When they do, the transfer relies on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or on the Standard Contractual Clauses. You can ask us for a copy of these safeguards.
6. How long we keep it
- Contact requests: up to 24 months after our last exchange, unless they lead to a contract, in which case contract records follow the retention required by law.
- Server logs: for the period set by the hosting provider, normally a few weeks.
7. Your rights
You can ask at any time to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format (Articles 15–21 GDPR). Write to contact@cyberkord.com; we reply without undue delay and within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of your EU country of residence.
8. Automated decisions
We do not make decisions based solely on automated processing, including profiling, about the people who contact us.
9. Changes
We may update this notice. The date at the top always shows the latest version.