Privacy Policy
Last updated: October 9, 2026
Website Data Collection
This Website collects some Personal Data from its Users. This information is based on Art. 13 of Regulation (EU) 2016/679 "related to the protection of natural people about the processing of personal data and the free movement of these, repealing Directive 95/46/EC (General Data Protection Regulation)" (c.d. GDPR) with the scope of inform you about the methods of data processing.
Owner and Data Controller
Elevate S.r.l.
Viale Ancona 26, 30172 Venezia - Mestre (VE)
Owner contact email: dpo@i-elevate.com
Types of Data Collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are:
- Trackers
- Usage Data
- Number of Users
- City
- Device information
- Session statistics
- Latitude and longitude (of city)
- Browser information
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Contact Form Data Collection
When you send a message through the contact form on this website, we process the following personal data:
- Full name - Required
- Company - Optional
- Email address - Required, so we can reply
- Telephone - Optional
- Area of interest - Required (one of our services, or "Other")
- How you heard of us - Optional
- Your message - Required
- The page you sent the form from and the time of submission - Recorded automatically
We do not store your IP address. It is used only to limit how many messages can be sent from the same address in a short time: it is held in the working memory of the server that processes the form for about 10 minutes, and it is not written to the emails we receive or to our logs. Our hosting provider may also record your IP address in short-lived technical request logs, for security and operational purposes.
Purpose: We use this data to answer your enquiry, and to send you an automatic email confirming that we have received your message. That confirmation contains only your first name and none of the other information you entered.
Legal basis: We process this data to take steps at your request before a possible contract (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in answering the enquiries we receive (Art. 6(1)(f) GDPR). Submitting the form does not sign you up for marketing: we do not send you marketing communications without your separate consent.
How it is processed: The form is submitted through this website, which is hosted by Vercel Inc. The form is processed on Vercel's servers in the European Union (Frankfurt, Germany). From there, your message is sent by email through our company email service, Google Workspace, to our team mailbox, and the confirmation is sent to the email address you entered.
Google acts as our data processor for Google Workspace under Google's Cloud Data Processing Addendum. Google may process data outside the EU, including in the United States. Transfers to the United States are made under the EU-U.S. Data Privacy Framework, under which Google LLC is certified. For other transfers, and if the Data Privacy Framework no longer applies, the EU Standard Contractual Clauses incorporated into Google's Cloud Data Processing Addendum apply.
Vercel acts as our data processor under its Data Processing Addendum. Vercel is based in the United States and may process data there. Such transfers are covered by the EU Standard Contractual Clauses included in Vercel's Data Processing Addendum, and Vercel is certified under the EU-U.S. Data Privacy Framework.
Retention: We keep contact form messages for as long as necessary to answer your enquiry and to handle any business relationship that follows, typically for 2 years, after which they are securely deleted.
Your rights: You can exercise the rights described in this policy at any time by writing to dpo@i-elevate.com.
Data Usage and Processing
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner. Any use of Cookies – or of other tracking tools — by this Application or by the owners of third-party services serves the purpose of providing the Service required by the User.
Security Measures
We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed as Data Processors by the Owner.
Legal Basis of Processing
The Owner may process Personal Data if one of the following applies:
- Users have given their consent for one or more specific purposes
- Provision of Data is necessary for the performance of an agreement with the User
- Processing is necessary for compliance with a legal obligation
- Processing is related to a task in the public interest or exercise of official authority
- Processing is necessary for the purposes of legitimate interests pursued by the Owner
Data Retention
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
- Data for contract performance shall be retained until such contract has been fully performed
- Data for legitimate interests shall be retained as long as needed to fulfill such purposes
- Contact form data is typically retained for 2 years unless ongoing consent is given
Third-Party Services
Google Analytics
Google Analytics is a web analysis service provided by Google Ireland Limited. Google utilizes the Data collected to track and examine the use of this Application. Personal Data processed includes Trackers and Usage Data. Privacy Policy |Opt Out
Google Tag Manager
Google Tag Manager is a tag management service provided by Google Ireland Limited. Personal Data processed includes Trackers and Usage Data. Privacy Policy
Your Rights
Users may exercise certain rights regarding their Data processed by the Owner:
- Withdraw consent - You can withdraw consent you have given at any time
- Object to processing - You can object if processing is on a legal basis other than consent
- Access your Data - You can request what Data is being processed and obtain a copy
- Rectification - You can request inaccurate Data be corrected
- Restrict processing - You can request processing of your Data be limited
- Erasure - You can request your Data be deleted
- Data portability - You can receive your Data in a structured format
- Lodge a complaint - You can file a complaint with your data protection authority
Any requests to exercise User rights can be directed to the Owner through the contact details provided above. These requests can be exercised free of charge and will be answered within one month.
Changes to This Policy
We reserve the right to make changes to this privacy policy at any time by notifying Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification. Should changes affect processing activities performed on the basis of User consent, we shall collect new consent where required.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: dpo@i-elevate.com