Privacy Policy

1. Why this information

Pursuant to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter the «Regulation» or «GDPR») and to Legislative Decree no. 196 of 30 June 2003, as amended by Legislative Decree no. 101 of 10 August 2018 (the «Italian Data Protection Code»), this page describes how the personal data of users who visit the website stline.it are processed.

This notice relates solely to this website and not to other sites, pages or online services that may be reached via hyperlinks to resources external to the domain.

2. Data Controller

The Data Controller is STLINE S.r.l. socio unico (Società a Responsabilità Limitata — Socio Unico) — hereinafter «ST-LINE» — with registered office at Via Cornarotta, 26 — 31100 Treviso (TV), Italy.

• P.IVA / C.F. (Italian VAT / Tax Code): 05154470289
• REA (Italian Business Register): TV-439063
• Email: info@stline.it
• PEC (Italian Certified Email): stline@pec.stline.it
• Phone: +39 0422 14 98 129

The Data Controller has not appointed a Data Protection Officer pursuant to Art. 37 of the Regulation, as the conditions set out in Art. 37(1) do not apply.

3. Types of data processed and purposes

3.1 Navigation data

The IT systems and software procedures responsible for the operation of this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols: IP address, user agent, date and time of the request (timestamp), URL of the requested resource, request headers, server response status code, and parameters relating to the user's operating system and browser.

• Processed by: register.it (hosting; Apache server logs).
• Purpose: operation and proper delivery of the web services, aggregate website-usage statistics, and security.
• Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) of the Regulation).
• Retention: log files are archived on a monthly basis and automatically deleted after six months. The access statistics processed by the hosting provider from those files include the list of visitors' IP addresses and are subject to the same retention period. This is without prejudice to any need to investigate criminal offences on the part of the judicial authorities.

3.2 Data provided by the user (contact form)

The optional, explicit and voluntary sending of messages through the contact form entails the acquisition of the data provided by the user: name, email, phone (optional), company (optional), subject and content of the message.

• Legal basis: consent of the data subject (Art. 6(1)(a)) and performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) of the Regulation).
• Data Processor (Art. 28 of the Regulation): Brevo — Sendinblue SAS, Paris, France. The provider declares possible transfers to the United States and India, covered by the safeguards under Chapter V of the Regulation, including the EU-US Data Privacy Framework.
• Final recipient: info@stline.it.
• Retention: data are kept for the time necessary to respond to the request and, where the request develops into a business relationship, for the duration of the relationship and for 10 years thereafter, to meet civil-law, tax and accounting obligations (Art. 2220 of the Italian Civil Code, Presidential Decree 600/1973). In the absence of business developments, data are deleted within 24 months of the last contact.

3.3 Tracking data (cookies and similar tools)

Consent is managed by a self-hosted tool (vanilla-cookieconsent), served from the same domain: no third-party service is used for consent. Non-technical tools stay inactive until the user expresses a choice.

• Statistical tools (subject to consent): Microsoft Clarity and Google Analytics 4. Clarity captures heatmaps and session recordings, with text input fields masked. Google Analytics 4 does not store the full IP address: the platform truncates it before storage.
• Maps (no cookies): the contact page embeds an OpenStreetMap map, and the two acoustics tools acoustic map and barrier calculation load map tiles when the page opens. They set no cookies and perform no profiling, but when the tiles load the IP address is disclosed to the OpenStreetMap Foundation to deliver the images. In those same two tools, when the user places a source, building geometry is requested from the Overpass API on two independent servers, both within the European Union (overpass-api.de, Germany, and kumi.systems, Austria), which receive the area coordinates and the IP address.

Legal basis: consent of the data subject (Art. 6(1)(a) of the Regulation). The detailed and always up-to-date list of cookies is available in the Cookie Policy.

3.4 SoundPro newsletter subscription

Through the form available on the SoundPro product page (/en/products/sound-pro/) the user may voluntarily subscribe to receive communications about the development and release of the SoundPro product. The form collects: email address (required), name (optional).

• Specific purpose: sending updates related to the development, release, and commercial news of the SoundPro product. The purpose is limited solely to the SoundPro product and does not include other commercial communications about products, services, or newsletters of STLINE S.r.l. socio unico.
• Legal basis: explicit consent of the data subject (Article 6(1)(a) of the Regulation), given by ticking the checkbox in the form.
• Data Processor (Article 28 of the Regulation): Brevo — Sendinblue SAS, Paris, France, as processor. The provider declares possible transfers to the United States and India, covered by the safeguards under Chapter V of the Regulation, including the EU-US Data Privacy Framework.
• Final recipient: info@stline.it.
• Retention: data are retained until the release of SoundPro version 1.0 or until consent is withdrawn by the data subject (see section 5), whichever occurs first. If the product is not released within 36 months from subscription, data are deleted automatically.
• Withdrawal of consent: the data subject may withdraw consent at any time by writing to info@stline.it or using the unsubscribe link in every received email. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Separate processing: data collected through the SoundPro form are processed exclusively for the purpose described above and are not combined with data collected through the generic contact form (section 3.2), unless the data subject explicitly writes for other purposes.

4. External data processors

To deliver the service, the Data Controller relies on the following parties, appointed as data processors where applicable (Art. 28 of the Regulation):

5. Data subject's rights

The data subject may exercise, at any time and within the cases and limits provided for by the Regulation, the following rights:

• right of access to their personal data (Art. 15);
• right to rectification (Art. 16);
• right to erasure («right to be forgotten», Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object to processing (Art. 21);
• right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3));
• right to lodge a complaint with the Italian Data Protection Authority ("Garante per la protezione dei dati personali", www.garanteprivacy.it).

Rights may be exercised by writing to info@stline.it or via PEC to stline@pec.stline.it.

6. Transfer of data outside the EU

The register.it service processes data exclusively on servers located within the European Union; consent is handled by a self-hosted tool (no transfer). The Brevo service (Sendinblue SAS, Paris, France), used to deliver contact-form messages and SoundPro updates subscriptions, processes data within the European Union; the provider declares possible transfers to the United States and India, covered by the safeguards under Chapter V of the Regulation, including the EU-US Data Privacy Framework. The OpenStreetMap map only involves a technical disclosure of the IP to the OpenStreetMap Foundation (United Kingdom / EU), with no cookies.

The services Microsoft Clarity and Google Analytics 4 (subject to consent) may involve the transfer of data to the United States. Such transfers are safeguarded by the Standard Contractual Clauses approved by the European Commission pursuant to Art. 46 of the Regulation and by the adequacy decision relating to the EU-US Data Privacy Framework, adopted by the European Commission on 10 July 2023.

7. Changes to this notice

The Data Controller reserves the right to amend or update this notice, also as a result of regulatory changes. The version in force is the one published on this page, identified by the date of last update. In the event of substantial changes, users may be informed through a notice (banner) on the website or, where the relevant contact details have been provided, by email. Users are invited to consult this page periodically.

Related documents: Cookie Policy · Terms & Conditions.