Privacy and cookie policy

1. Data controller

Sigemili S.r.l., Via Amatore Sciesa 13, 37122 Verona (VR), Italy · Tax code and VAT no. 02415860226
Email: sigemilibusinessevolution@sigemili.com · Phone: +39 331 268 0156

Sigemili has not appointed a Data Protection Officer (DPO), as it is not required to do so. For any privacy request, please write to the email address above.

2. What data we process, why, and on what legal basis

a) Browsing the website

When you visit the website, the server that hosts it automatically records some technical data (IP address, date and time of the request, page visited, browser and operating system). We use it only to keep the website running and secure and to prevent abuse.

Legal basis: our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

The website does not use analytics, advertising or profiling tools and does not load content from third-party sites: fonts and images are hosted on our own server.

b) Website contact form, email and phone

If you write to us using the form on the Contact page, by email or call us, we process the data you provide: name, email, optionally phone and company, area of interest and the content of your message.

Purpose: to answer your request and, if you wish, arrange a meeting or prepare a proposal.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

c) Contact forms in our Facebook and Instagram ads

Some of our ads on Facebook and Instagram include a form (an “instant form”) that lets you ask us to contact you without leaving the app. Meta may pre-fill the form with data from your account: it is sent only if you confirm. We process name, email, phone, company name and your answers to the form questions (for example, the process you would like to digitise).

Purpose: to contact you in response to your request.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

For these forms, Meta Platforms Ireland Limited acts as a processor on behalf of Sigemili. We do not use this data for newsletters or marketing communications without your specific consent.

d) Sigemili's Facebook Page

If you visit or interact with our Facebook Page or our ads (likes, comments, shares, messages on Messenger), Meta processes your data under its own privacy policy. For the aggregated Page statistics (“Insights”), Sigemili and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR, according to Meta's joint controller addendum; Meta takes primary responsibility for this processing and for handling data subject requests. Sigemili only receives aggregated statistics and, if you write to us, the messages you send.

Legal basis: our legitimate interest in presenting our business and answering people who contact us (Art. 6(1)(f) GDPR).

e) Ads on Facebook and Instagram

We run ads on Facebook and Instagram using Meta's advertising tools, under the name of our Facebook Page (Sigemili does not have its own Instagram profile). We choose the audience only with general criteria (for example location, age range and interests) and may also show ads to people who have already interacted with our Page or our ads (for example by watching a video or opening a form), or to people with similar characteristics. These audiences are created and managed by Meta based on the data Meta collects under its own policy: Sigemili does not receive data about the individuals reached, only aggregated statistics on ad performance.

Sigemili does not upload contact lists (emails or phone numbers) to Meta and does not install Meta pixels or other tracking tools on the website. You can manage your ad preferences in your Meta account ad preferences.

Legal basis: our legitimate interest in promoting our services (Art. 6(1)(f) GDPR); for the use of data for advertising purposes, Meta acts as an independent controller on its own legal bases.

f) Clients and suppliers

If a business relationship begins, the necessary data is processed to manage the contract and comply with legal obligations (tax and accounting), on the basis of Art. 6(1)(b) and 6(1)(c) GDPR. In these cases we provide a specific notice.

3. Providing your data

Providing your data is optional, but without your name and at least one contact detail (email or phone) we cannot answer your request. Technical browsing data is collected automatically.

4. How we process data and who receives it

Data is processed electronically, with appropriate security measures, by authorised Sigemili staff and associates and only for the purposes stated above. It is not published or sold and is not used for automated decision-making or profiling.

For some services we rely on providers acting as processors:

• Hostinger International Ltd. (Cyprus) — website hosting and server logs;
• Formspree, Inc. (United States) — receiving messages sent through the website contact form and forwarding them by email;
• Google Ireland Limited — business email (Google Workspace);
• Meta Platforms Ireland Limited — contact forms in Facebook and Instagram ads and messages received on the Facebook Page.

Data may also be disclosed to advisers (for example our accountant) and to authorities where required by law.

5. Transfers outside the European Union

Some providers (Formspree, Google, Meta) may process data in the United States. Such transfers are based on the EU-US Data Privacy Framework, for certified companies, or on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR), included in these providers' data processing agreements.

6. How long we keep data

• Contact requests (website, email, phone, ad forms and messages to the Facebook Page): for as long as needed to handle the request and in any case no longer than 24 months after the last contact, unless a contractual relationship begins;
• Contractual relationships: for the duration of the relationship and, for accounting and tax records, for 10 years as required by law;
• Server logs: for the period set by the hosting provider for security purposes, usually a few months.

7. Your rights

You may at any time ask to access, rectify or erase your data, restrict its processing, receive it in a structured format (portability) and object to processing based on legitimate interest (Arts. 15–21 GDPR). Just write to sigemilibusinessevolution@sigemili.com: we reply within one month.

If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

8. Cookies

Cookies are small files that a website stores in your browser. This website does not use profiling, analytics or third-party cookies and does not use tracking tools such as advertising pixels. For this reason it does not show a consent banner.

The website may only use technical cookies strictly necessary for its operation and security, which do not require consent under the law (Art. 122 of the Italian Privacy Code and the Garante's Guidelines of 10 June 2021). You can block or delete cookies in your browser settings at any time.

Links to other websites (for example Facebook or LinkedIn) take you away from this website: from that point the privacy policies of those sites apply.

If we introduce cookies or tools that require consent in the future (for example the Meta Pixel to measure ad results), we will update this policy and ask for your consent before activating them.

9. Changes to this policy

We may update this policy, for example if the services we use or the law change. The current version is always published on this page.

Last updated: 28 October 2026