Privacy Notice
How Galizia.eu collects and processes personal data, in line with the GDPR and the Austrian DSG.
Last updated: 21 August 2026
This notice describes how Galizia.eu processes personal data collected through the galizia.eu website and in the provision of its services.
1. Data Controller
2. What Data We Collect
Data you provide directly:
• Full name, company, email, phone number (contact form and Diagnostic Call booking)
• Indicative number of users/employees and the message entered in the form
• Billing data (company name, address, VAT number) for subscription customers
Data collected automatically:
• Technical browsing data (IP address, browser type, pages visited) via technical cookies
• Anonymised/aggregated statistics via Google Analytics, only with consent (see Cookie Policy)
3. Purposes and Legal Basis of Processing
Responding to contact form or diagnostic-call booking requests
- Legal basis
- Pre-contractual measures (Art. 6.1.b GDPR)
Delivering the subscription service and issuing invoices
- Legal basis
- Performance of the contract (Art. 6.1.b GDPR)
Tax and accounting obligations
- Legal basis
- Legal obligation (Art. 6.1.c GDPR)
Website usage statistics (Google Analytics)
- Legal basis
- Consent (Art. 6.1.a GDPR)
Commercial communications (if activated in the future)
- Legal basis
- Consent (Art. 6.1.a GDPR)
| Purpose | Legal basis |
|---|---|
| Responding to contact form or diagnostic-call booking requests | Pre-contractual measures (Art. 6.1.b GDPR) |
| Delivering the subscription service and issuing invoices | Performance of the contract (Art. 6.1.b GDPR) |
| Tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) |
| Website usage statistics (Google Analytics) | Consent (Art. 6.1.a GDPR) |
| Commercial communications (if activated in the future) | Consent (Art. 6.1.a GDPR) |
4. Data Retention
• Contact/lead data not converted into customers: retained for 12 months from the last contact, then deleted.
• Contract and billing data: retained for the period required by Austrian/Italian tax law (typically 7–10 years).
• Browsing/Analytics data: retained according to the Google Analytics configuration, maximum 14 months.
5. Recipients and Sub-processors
Your data may be processed by third-party providers acting as sub-processors, including:
• Hetzner Self-hosting
• Apple iCloud
• Google Analytics (Google Ireland Ltd.), only with consent — see Cookie Policy
No data is sold or shared with third parties for their own marketing purposes.
6. Data Transfers Outside the EU
Some providers (e.g. Google) may also process data outside the European Economic Area. In that case the transfer is based on Standard Contractual Clauses approved by the European Commission or an adequate adequacy decision.
7. Your Rights
As a data subject you have the right to:
• Access to your personal data
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten"), within the limits of the law
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with the competent supervisory authority (in Austria: Datenschutzbehörde — www.dsb.gv.at; in Italy: Garante per la Protezione dei Dati Personali — www.gpdp.it)
8. How to Exercise Your Rights
To exercise your rights write to [email protected], stating the subject of the request. We will reply within the time limits set by applicable law.
9. Data Protection Officer (DPO)
Andrea Galizia
10. Changes to This Notice
This notice may be updated from time to time. The last-updated date is shown at the top of the page.