Updated on
This policy explains which personal data Oltre Digital collects through oltredigital.com, why, for how long and what rights you have. Oltre Digital collects as little data as possible and uses it only to answer you.
Who is responsible for your data?
Oltre Digital is being set up as a company in Belgium. Until then, the controller is its founder, Paolo Margari, Brussels, Belgium. For any question about your data, write to info@oltredigital.com.
Which data does Oltre Digital collect, and why?
| What | Data | Why | Legal basis | How long |
|---|---|---|---|---|
| Contact and scanner forms | Name, email address, website or company, your message, the page you sent it from | To answer your request, run the AI Visibility Scan you asked for and assess a possible collaboration | Steps taken at your request before a contract; legitimate interest in answering (GDPR art. 6(1)(b) and (f)) | 24 months from the last contact in the CRM; 90 days for the copy kept by the form plugin |
| Emails to info@oltredigital.com | Your address and what you write | To reply | As above | 24 months from the last contact |
| Anti-spam check on forms | Technical data about your browser and device, IP address | To protect the forms from bots and abuse (Cloudflare Turnstile) | Legitimate interest in security (art. 6(1)(f)) | Not stored by Oltre Digital; processed by Cloudflare under its own policy |
| Server logs | IP address, date and time, page requested, browser | Security and troubleshooting | Legitimate interest in security (art. 6(1)(f)) | 3 months |
| Language cookie | The language you chose | To show the site in that language | Strictly necessary for the service you request | 1 day (see the cookie policy) |
How are contact requests processed?
Requests sent through the forms are processed on Oltre Digital’s own server in the European Union (Germany). An AI model that runs on that server, without sending data to third-party AI services, sorts each request: it filters spam, recognises the services you ask about and gives the request a priority. Requests recognised as spam are discarded; all other requests are stored in the CRM, where a person can review them. No decision with legal or similarly significant effects on you is taken automatically. Emails are sent and received through Google Workspace.
Who receives the data?
Only the service providers that Oltre Digital needs to run the site and answer you, acting on its instructions:
- Contabo GmbH (Germany): hosting of the server that runs the website, the forms, the CRM and the AI model.
- Google (Google Workspace): sending and receiving emails.
- Cloudflare: domain name system (DNS) and the Turnstile anti-spam check on forms.
When data is transferred outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
What are your rights?
You can ask to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Write to info@oltredigital.com; Oltre Digital answers within one month. You also have the right to lodge a complaint with a data protection authority: in Belgium, the Data Protection Authority; in Italy, the Garante per la protezione dei dati personali; or the authority of the country where you live.
How is the data protected?
The site is served only over HTTPS, access to the server and the CRM is restricted, software is kept up to date and backups are kept for seven days.
Changes to this policy
When this policy changes, the date at the top of the page changes too. Significant changes are also announced on this page.