Privacy policy
How we handle your data
This is a plain-English summary of how rag-enterprise.com collects, processes and stores personal data. It complements — and does not replace — the formal record kept under Art. 30 GDPR by Securvita Srl.
Last updated 2026-06-16
Data controller
Securvita Srl, Via Enrico Cosenz, 54, 20158 Milano (MI), Italia. VAT IT 12324680961. Reach us at the address below for any data-protection request — we answer within one working day.
What we collect
Only what you give us yourself, and aggregated technical data needed to run the site. We do not buy or enrich data from third parties.
- Contact form: name, work email, company, sector, team size, message. Used solely to reply to your inquiry. Stored in our inbox.
- Technical telemetry: IP-anonymised page views via Matomo (analytics.i3k.dev) — only after opt-in. Aggregate, not individual.
- Hosting telemetry: request logs at Vercel (edge function timing, status codes). Retained 7 days. No request bodies stored.
- Cookies: see the dedicated cookie policy.
Legal basis
Contact form: legitimate interest in answering a commercial inquiry (Art. 6(1)(f) GDPR). Analytics: explicit consent (Art. 6(1)(a) GDPR + ePrivacy). Hosting logs: legitimate interest in operating the service securely (Art. 6(1)(f) GDPR).
Where data lives
Everything in the request path stays in the European Union. The site is hosted on Vercel's EU regions (Frankfurt). Email goes through our own SMTP relay on mail.rag-enterprise.com. Matomo runs on analytics.i3k.dev. No data is transferred to non-EU processors.
How long we keep it
Contact-form messages: 24 months from your last interaction, then deleted. Matomo data: 14 months from collection. Vercel access logs: 7 days. Newsletter or marketing: we do not run any.
Your rights
GDPR Art. 15–22 — access, rectification, erasure, restriction, portability, objection, and the right not to be subject to automated decision-making. Send us a request and we'll act within 30 days. If we disagree, you can file a complaint with the Garante per la protezione dei dati personali (Italy).
Sub-processors
We list every external service that may touch your data, why we use it, and where it is hosted.
- Vercel Inc. — site hosting. EU region (Frankfurt). DPA in place.
- Self-hosted Matomo (analytics.i3k.dev) — analytics. Operated by I3K Technologies. EU-only.
- Self-hosted SMTP relay (mail.rag-enterprise.com) — contact form delivery. Operated by I3K Technologies. EU-only.
Changes
When we update this policy in a way that affects your data we re-ask for cookie consent and update the date below. Previous versions are kept in our git history.