Privacy policy:

Dear Website Visitor,

At HX Excellence, your privacy is a top priority. Any data you provide to us through the website will be processed with due care and attention. We use tools designed to ensure the security of your data, in full compliance with current laws to protect the confidentiality of data.

We wish to inform you that “Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter the “GDPR”) provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, we wish to inform you of the following:

Categories of Data

The subject matter of the processing comprises your personal data, including:

  1. Automated Collection of Data:
    The computer systems and software used for running this website collect, as part of normal operations, some personal data from users (whose transmission is implicit in the use of Internet communication protocols). The data collected includes:

    • IP addresses and/or domain names of the computers used by users connecting to the website.

    • URI (Uniform Resource Identifier) addresses of the requested resources.

    • The method used for submitting a given request to the server.

    • The size of the file received in response.

    • The numeric status code issued by the server in response to the request (successful, error, etc.).

    • Other parameters related to the user’s operating system, browser, and computer environment.

    • Name of the internet service provider (ISP).

    • The date and time of the visit.

    • The referral website and when you leave the site.

  2. Data Provided Voluntarily by the User:
    The voluntary and explicit sending of emails to the addresses indicated in the different entry points on this website does not entail a request for consent and permits the acquisition of the sender’s email address, required to respond to requests, as well as any other personal data included in the communication. These data are understood as being voluntarily provided by the user when requesting the service.
    By adding a comment or other information, the user expressly accepts the privacy policy and, in particular, gives consent to the unrestricted disclosure, even to third parties, of the contents submitted. Otherwise, specific summary privacy policies will be provided or will appear on the webpage for specific on-request services (form). Therefore, the user will explicitly agree to the use of the data contained in the forms to submit the request.

  3. Cookies:
    This website uses cookies. The data collected through cookies may be used to access sections of the website, for statistical purposes, or to make your browsing experience more enjoyable and efficient in the future, to try to understand the behaviour of users, and to adapt the content offered based on their behaviour. More information is available in our Cookie Policy.

  4. Plug-ins:
    This website does/does not use social media plug-ins and/or buttons to make it easier to share content on your favourite social network. These plug-ins are programmed so as not to set any cookies when accessing the page, to safeguard the privacy of users. Cookies may be set, as provided by social networks, only if you make voluntary use of the plug-in.
    Please note that if you browse while being logged into the social network, you have already consented to the use of cookies conveyed through this website at the time that you registered with the social network. The collection and use of information obtained by means of the plug-in are governed by the respective privacy policies of the social networks. Please see the respective policies for further details.

Data Controller

Source of Personal Data

The Data Controller collects personal data directly from the data subject.

Purpose of Data Processing and Legal Basis for Processing

The purpose of data processing and the legal basis for processing personal data are as follows:

  1. For Automatically Collected Data:

    • Legal Basis: Legitimate interest of the Data Controller.

    • Purpose: To ensure and enhance the web browsing experience.

  2. For Data Provided Voluntarily by the User:

    • Legal Basis: Consent.

    • Purpose: To respond to specific requests submitted by the user (e.g., emails). For forms, the purpose is stated in the specific privacy policy.

  3. For Cookies and Plug-ins:

    • Refer to the specific Cookie Policy.

Recipients of Personal Data

Relevant and limited to the purposes for which they are processed, your data may be communicated to:

  • Partners.

  • Consulting firms.

  • Private businesses.

  • Technical service providers.

  • Hosting providers.

  • IT companies.

  • Communication agencies.

Transfer of Data to Third Countries

This website may share some of the data collected with service providers located outside the European Union. In particular, this happens through social media plug-ins and the Google Analytics service. The transfer is authorised and strictly regulated by Article 45 [1] of Regulation (EU) 2016/679, for which no specific authorisations are required.

Retention Period

Based on the storage limitation principle (Article 5, GDPR), checks are performed regularly to determine whether the data stored for the purposes for which they were collected are outdated. In particular:

  1. Automatically Collected Data:
    Processed for the time strictly necessary to obtain statistical data regarding the use of the website and to check its proper operation, also in terms of security or in accordance with the time limits established by law.

  2. Data Voluntarily Provided by the User:
    Stored for a period not exceeding the time required to pursue the purposes for which they are processed or in accordance with the time limits established by law.

Rights of the Data Subject

The data subject always has the right to:

  • Request access to and rectification or erasure of personal data.

  • Request restriction of processing concerning the data subject.

  • Object to processing.

  • Exercise the right to data portability.

  • Withdraw consent to processing.

To exercise these rights and the other rights laid down in the GDPR, simply contact the Data Controller. The data subject may also file a complaint with any Supervisory Authority.

Mandatory or Optional Consent

The provision of your data is mandatory while browsing our website with respect to points D.1 and D.2 of the aforementioned purposes, to allow the correct provision of the service. With respect to point D.3, your consent to the processing of your data is optional and will in no way affect the provision of the service.

Data Processing Methods

The personal data you provide will be processed in full compliance with the aforementioned regulations and the duties of confidentiality underpinning the Data Controller’s activities. The data will be processed using IT tools, on paper, or on any other suitable media (e.g., cloud-based systems, electronic filing and storage systems, etc.), in compliance with the appropriate technical and organisational measures to ensure the security of personal data laid down in the GDPR.

Final Notes and Update Methods

This privacy policy only applies to this website and does not apply to any other websites that the user visits via links on this website. The privacy policy is subject to change due to the introduction of new regulations. Users are therefore invited to periodically check this page to keep track of the latest changes in legislation. The previous versions of this privacy policy are always available on request from the Data Controller.