Privacy Policy

Full notice

Controller. The data controller is PATAVIUM IT S.r.l., which runs the PATAVIUM.tech project and processes personal data collected through this website to manage contact requests, startup applications, newsletter subscriptions and activities strictly connected to the operation of the site. Privacy-related requests can be sent to go [at] patavium.tech.

Categories of data processed. We may process identification and contact data, professional information shared through forms, message content, files uploaded through application flows, technical browsing data, security logs and information generated by anti-spam or anti-bot systems.

Purposes and lawful bases. Data is processed to respond to requests, assess applications, manage appointments, deliver requested communications, protect the website and comply with legal obligations when applicable. The main lawful bases are the performance of pre-contractual steps requested by the data subject, consent where required and the controller's legitimate interest in protecting the site and organising its operations.

Mandatory nature of data. Data marked as required in the forms is necessary to submit the request or complete the application. If such data is not provided, PATAVIUM.tech may be unable to reply, assess the submission or schedule a follow-up.

Recipients and service providers. Data may be processed by technical providers supporting the website and the operational flows, including hosting and deployment services, anti-bot protection, email delivery, newsletter delivery, scheduling tools and analytics platforms when enabled. At the date of publication the site may rely on services such as Vercel, Cloudflare Turnstile, Resend, Beehiiv, Calendly and analytics tools configured by the controller.

Retention periods. Contact requests are retained for the time needed to manage follow-up and, unless further needs arise, for no longer than 12 months. Startup applications may be retained for up to 24 months for later evaluations compatible with the original request. Newsletter data is processed until consent is withdrawn or deletion is requested. Technical and security logs are retained only for the period strictly necessary to ensure protection and service continuity.

Transfers outside the EEA. Some technical providers may process data outside the European Economic Area. In those cases, processing is carried out under the safeguards required by applicable law, including standard contractual clauses or equivalent lawful mechanisms.

Data subject rights. Within the limits set by the GDPR, you may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent. You may also lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority where applicable.

Cookies and similar technologies. The website uses technical technologies necessary for operation, security and form management. Any measurement or analytics tools that are not strictly necessary should be handled consistently with the cookie banner and the preferences expressed by the user.