Information on the processing of personal data

1. Subject matter of this notice

This notice describes how IPS Engineering Srl processes the personal data of individuals who:

• visit the website www.ips-engineering.it;
• contact IPS Engineering Srl by email or through any forms available on the website;
• request information or a technical discussion through the forms associated with IPS Engineering Srl’s advertisements on LinkedIn.

This notice is provided pursuant to Articles 13 and, where applicable, 14 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter, the “GDPR”).

This notice does not cover third-party websites or services reachable through links on the IPS website. Users are invited to consult the respective privacy notices of those services.

2. Data controller

The data controller is:

IPS Engineering Srl
Via Tiziano 32
20145 Milan, Italy
Email: info@ips-engineering.it

For information on the processing of personal data and to exercise your rights, you may contact the controller at the email address above.

3. Types of data processed

3.1 Browsing data

During the normal operation of the website, IT systems and software procedures may collect certain data whose transmission is inherent in the use of Internet communication protocols.

Depending on the configuration of the systems, such data may include:

• IP address of the device used;
• date and time of the request;
• page or resource requested;
• technical information about the browser and device;
• outcome of the request and other data contained in technical logs.

This data may be used to enable the operation of the website, detect anomalies, and contribute to the security of the systems.

3.2 Data provided voluntarily

When the user sends an email or uses a contact form, IPS may receive data such as first name, last name, email address, professional contact details, company, and the content of the request.

Users are asked to provide only the data necessary to handle the request and not to send special categories of data or confidential information unless requested and unless through appropriate channels.

3.3 Data collected through LinkedIn forms

Through the contact forms associated with IPS Engineering Srl’s advertisements on LinkedIn, the following may be collected: first name, last name, professional email address, job title, company name, and any other information the data subject may provide in the form.

LinkedIn may pre-fill some fields using information from the user’s profile. Users can check the data before submitting the form.

For information on the processing carried out by LinkedIn within its own platform, please refer to LinkedIn’s privacy policy.

4. Purposes and legal bases of processing

4.1 Website operation and security

Browsing data may be processed to enable the operation of the website, to check for anomalies, and to contribute to the protection of IT systems.

The legal basis for the processing is the controller’s legitimate interest in the operation and security of its systems, pursuant to Article 6(1)(f) of the GDPR.

4.2 Handling of information and contact requests

Data provided by email, any website forms, or LinkedIn forms is used to:

• receive and handle the request;
• contact the data subject again;
• provide the requested information on IPS services;
• assess, when requested, the possibility of a technical discussion or a subsequent collaboration.

The legal basis is the legitimate interest of IPS Engineering Srl in handling and responding to the requests received, pursuant to Article 6(1)(f) of the GDPR.

Where the request involves taking pre-contractual steps at the request of the data subject, Article 6(1)(b) of the GDPR may apply, in cases where its conditions are met.

4.3 Legal obligations

Where necessary, data may be processed to comply with obligations under the law or to respond to requests from competent authorities.

The legal basis is compliance with a legal obligation to which the controller is subject, pursuant to Article 6(1)(c) of the GDPR.

4.4 Further promotional communications

Promotional communications that are further to, and distinct from, the data subject’s request will be sent only where there is a suitable legal basis and, where required, specific consent.

Where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Provision of data

Browsing the website does not normally require the voluntary entry of identifying data, without prejudice to the collection of technical browsing data.

The provision of data marked as mandatory in contact forms is necessary to enable IPS to receive and handle the request. Failure to provide such data may prevent the form from being submitted or IPS from responding.

The provision of any data marked as optional is left to the user’s choice.

6. Processing methods and recipients

Personal data is processed using electronic and, where necessary, paper-based tools, adopting technical and organizational measures appropriate to the nature of the data and the purposes of the processing.

Data may be processed by personnel and collaborators authorized by IPS Engineering Srl, within the limits of the activities assigned to them.

Data may also be disclosed, when necessary, to suppliers providing services to IPS, for example for:

• website hosting and maintenance;
• email and IT support;
• professional consulting and assistance in business management;
• management of campaigns and contact forms.

Suppliers that process personal data on behalf of IPS are appointed as data processors when required by applicable law.

For email management, IPS uses Outlook on local computers and an email service provided by Aruba.

Data is not disseminated indiscriminately.

7. Retention period

Personal data is retained for the time necessary for the purposes for which it was collected, in compliance with any legal obligations.

In particular:

• Contact and technical discussion requests, including those received through LinkedIn: for 12 months from the closure of the request, if no subsequent relationship is established and if there are no further retention needs.
• Commercial and contractual relationships and legal compliance: for the period necessary to manage the relationship and for the applicable obligations.
• Website data and technical logs: [indicate the period actually configured with the website or hosting provider], except where retention is necessary to investigate or handle any security incidents.

At the end of the applicable period, data is deleted or anonymized, subject to further obligations or legitimate retention needs to be assessed on a case-by-case basis.

8. Transfer of data outside the European Economic Area

IPS Engineering Srl does not directly plan to transfer the data collected outside the European Economic Area.

[To be completed after verifying the services actually used, including LinkedIn, Aruba, hosting, and any other suppliers: indicate any transfers to third countries, the applicable safeguards, and how to obtain information about them.]

9. Cookies and other tracking tools

Cookies are small files that a website may store on the user’s device during browsing.

During a review of the website’s home page and services page, including the playback of a video, a session cookie associated with the IPS domain was detected.

[To be completed after verifying the website configuration: indicate the name, provider, function, duration, and nature of the cookie detected, as well as any other cookies or tools actually used.]

Any tools other than technical ones are managed in accordance with applicable law. Where required, their use is subject to the user’s consent.

Users can also manage or delete cookies through their browser settings. Disabling the cookies necessary for the operation of the website may affect some functionalities.

10. Rights of the data subject

In the cases and within the limits provided by applicable law, the data subject may request:

• access to their personal data;
• rectification of inaccurate data or completion of incomplete data;
• erasure of data;
• restriction of processing;
• data portability, where applicable;
• objection to processing, in particular where it is based on legitimate interest;
• withdrawal of consent, where processing is based on consent.

Requests may be sent to:

IPS Engineering Srl
Email: info@ips-engineering.it

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). Information and contact details are available at www.garanteprivacy.it.

11. Updates to this notice

This notice may be updated following changes to services, processing methods, or applicable legislation.

The updated version is published on this page.

Date of last update: 12/11/2026