Privacy notice

1. Scope and data controller
This notice covers browsing the CertivaLab website, requests sent to its published contacts and access to the App distribution area. The website operator and contact details are shown above. The same contact may be used for personal data enquiries. Data Protection Officer (DPO), if appointed: [TO BE CONFIRMED: applicability and contact details].

2. Data and purposes
During browsing, the server receives the IP address, date and time, requested URL, technical browser information and request outcome. These data support website delivery, fault detection and service security. Voluntary emails contain the sender's chosen contact details, message and attachments and are used to handle the enquiry.
The restricted area processes account identifiers, credentials protected by Identity, roles, sign-ins and download requests. Roles determine which Apps are available. The CMS records who changed editorial content and when.

3. Legal grounds and provision of data
Quotation or support requests and account administration may relate to pre-contractual steps or service performance; technical protection may serve a legitimate interest in security. [CONTROLLER TO CONFIRM: legal basis for each purpose, legitimate interest assessment and any applicable legal obligations].
No account is required to browse public pages. Restricted features require sign-in details. Sending an email is optional; without the necessary contact details a reply cannot be provided.

4. Recipients and suppliers
Access is limited to authorised personnel acting within their duties and suppliers appointed for the services actually used, such as infrastructure, support and email. [TO BE CONFIRMED: suppliers, privacy roles, processing agreements, countries of processing and any safeguards for transfers outside the European Economic Area].
The pages do not require advertising profiling services. External links open only at the visitor's initiative; the destination website has its own notice. This notice does not replace those of individual downloaded Apps.

5. Retention
[TO BE CONFIRMED: retention of technical logs, email enquiries, deactivated accounts, CMS history and backups, including deletion criteria]. Publishing this review version does not enable automatic deletion.

6. Rights and contact
You may request access and correction and, where applicable, erasure, restriction, portability and objection using the controller's contact details above. Any consent may be withdrawn without affecting previous lawful processing. You may lodge a complaint with the Italian data protection authority or the competent supervisory authority. Requests may require proportionate identity verification.

7. Cookies and updates
Technical cookies are described on the Cookies page. The verified configuration contains no visitor profiling features or automated decisions with legal effects. This notice must be updated when purposes, suppliers or service configuration change.