Privacy Policy

Last updated: September 7, 2026

This notice explains how Computer On Site di Mauro Nordio processes personal data from website visits and contact requests.

1. Data Controller

The Data Controller responsible for your personal data under the GDPR is:
Mauro Nordio
P. IVA: 03539820286
Registered Office: via Montegrotto 87, 35031 Abano Terme (PD), Italy
Email: info@computeronsite.it

2. Data We Process, Legal Bases, and Purposes

a) Contact Form Data

When you contact us using the forms on our site, we collect your name, email, phone number, company name, job title, size of your company, environment location, current technologies, and your message details.

• Purpose: To evaluate your infrastructure modernization needs, answer your inquiries, and schedule check-ups.
• Legal Basis: Article 6(1)(b) of the GDPR (performance of a contract or taking pre-contractual steps at your request).

b) Technical and Navigation Data

Our server automatically records standard access details such as your IP address, browser type, referral page, pages visited, date and time of visit, and session duration.

• Purpose: To maintain website security, prevent fraud, troubleshoot hosting errors, and optimize site speed.
• Legal Basis: Article 6(1)(f) of the GDPR (our legitimate interest in ensuring the safety, stability, and proper operation of our web infrastructure).

c) Analytics and Tracking Data

With your cookie consent, Google Analytics 4 processes website activity, device information and pseudonymous cookie identifiers for visitor statistics.

• Purpose: To analyze user trends, optimize content engagement, and improve website performance.
• Legal Basis: Article 6(1)(a) of the GDPR (your explicit, active consent). You can revoke consent at any time via the cookie settings.

d) AI-Assisted Processing

Inquiries submitted through our forms are recorded in Odoo CRM. Authorized personnel may use Odoo's integrated artificial intelligence features to retrieve and summarize relevant information and prepare draft responses. Depending on the selected feature, Odoo may send the prompt, relevant conversation history, and the Odoo record data needed for the request to the configured AI model provider.

• Purpose: To handle inquiries and customer relationships efficiently while supporting our staff's work.
• Legal Basis: Article 6(1)(f) of the GDPR: our legitimate interest in retrieving relevant business information and preparing timely responses. AI assistance is distinct from the processing necessary to handle your enquiry. You may object to this use by contacting us.
• Human review: Staff use AI for internal questions and drafts and decide what to send or do.

3. Data Recipients and Sharing

Your personal data is treated with strict confidentiality. It is only shared under the following conditions:

• Hosting and Infrastructure: Our website is hosted on secure AWS (Amazon Web Services) servers located within the EU.
• CRM and AI Platform: Odoo S.A. processes contact-form data in Odoo Online and provides the integrated AI functions used by authorized personnel.
• AI Model Providers: Depending on the Odoo function selected, relevant prompts and Odoo context may be processed by Google (Gemini) or OpenAI through Odoo's managed provider configuration.
• Analytics: Google Ireland Limited processes website usage data through Google Analytics 4 when you consent. These data are not necessarily anonymous.
• Legal Obligations: We may share data if required by public authorities or to comply with a valid legal mandate.

Odoo and its providers may process personal data outside the European Economic Area. Odoo describes hosting locations and standard contractual clauses for access by overseas subsidiaries in its Privacy Policy. Its AI privacy notice describes data sent to Google and OpenAI. Contact us for information about transfers and applicable safeguards.

We do not sell or rent personal data. We share data with providers for the purposes described in this notice.

4. Retention Periods

We only store your data for the time necessary to fulfill the purposes for which it was collected:

• Form Inquiries: Data are retained while needed to handle the enquiry and related follow-up. Further retention depends on an ongoing customer relationship, applicable accounting obligations or the need to establish, exercise or defend legal claims.
• AI Requests: Records and drafts stored in our CRM follow the retention criteria for the underlying enquiry or customer relationship. Odoo states that provider retention depends on the service terms and the time needed to process the request. Its AI privacy notice does not specify a fixed number of days.
• Server Logs: Retention depends on the security, diagnostic or legal purpose of the log and the applicable hosting-service settings.
• Cookies: Cookie lifetimes are listed in our Cookie Policy and are distinct from retention of analytics reports.

5. Security Measures

We have implemented appropriate technical and organizational security measures, including HTTPS/TLS encryption for all page requests, restricted access controls, and firewall defenses to prevent unauthorized access, alteration, or loss of your data.

6. Automated Decisions and Human Oversight

We do not use the AI functions described above to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you. AI output supports authorized personnel, who remain responsible for reviewing relevant information and decisions.

7. Your GDPR Rights

You possess the following rights under European data protection laws:

• Right to Access: Ask what data we hold about you and receive a copy.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your data when it is no longer needed.
• Right to Restriction: Request limitation of processing under specific circumstances.
• Right to Object: Object to processing based on legitimate interests.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke consent for analytics cookies at any time without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, including objecting to AI assistance based on legitimate interests, email info@computeronsite.it. We respond within one month. Where the GDPR permits an extension, we inform you within that month and explain why.

8. Right to Complain

If you believe our processing of your personal data infringes your rights under the GDPR, you have the right to lodge a formal complaint with the supervisory authority of your residence or with the Italian supervisory authority:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Roma, Italy
Website: www.garanteprivacy.it