Draft: to be reviewed by a lawyer before publication.
Data controller
We Rise Group S.r.l., registered office at [TO BE COMPLETED], VAT and tax code [TO BE COMPLETED], is the controller of the personal data collected through this site.
For any request concerning personal data, write to privacy@werise-group.com.
Data protection officer, where appointed: [TO BE COMPLETED].
What we collect
What you give us. When you fill in the contact form or email us, we collect your name, email address, company where given, and the content of your message. Please do not include special category data (health, beliefs, orientation) or other people’s data without telling them.
Navigation data, always. The site measures visits in aggregate, anonymous form through Vercel Web Analytics, which uses no cookies and builds no profiles or persistent identifiers. Data such as the page viewed, the referrer, the country, the device type and the browser are processed.
Navigation data, only with your consent. If you allow the “Analytics” category, Google Analytics 4 collects page views, navigation path, source, language, device and a pseudonymous identifier held in its cookies. If you allow “Marketing”, Meta Pixel records the visit and the events we define, linking them to your Meta account where you have one. If you allow “Video”, the Vimeo player collects the technical data playback needs. Without your consent none of these tools is loaded: the detail is in the cookie policy.
Server logs. For security and diagnostics, the hosting provider records technical information such as the IP address and the time of the request.
Why we process it, and on what basis
Answering enquiries received through the form or by email: pre-contractual steps taken at your request and our legitimate interest in following up on messages (Art. 6(1)(b) and 6(1)(f) GDPR).
Measuring site traffic in aggregate and without cookies, to understand which content is useful: legitimate interest in maintaining and improving the site (Art. 6(1)(f) GDPR).
Detailed analytics, marketing and embedded video: your consent, given through the banner (Art. 6(1)(a) GDPR). You can withdraw it at any time, as easily as you gave it, from the “Cookie preferences” link at the foot of every page. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Security and abuse prevention, including protecting the form from spam: legitimate interest (Art. 6(1)(f) GDPR).
Legal obligations, where they apply (Art. 6(1)(c) GDPR).
Who we share it with
Data is never sold, nor passed on for third-party marketing. It may be processed on our behalf, as processors, by the suppliers that let us run the site and reply to you:
- Vercel Inc. — site hosting and aggregate traffic measurement.
- [TO BE COMPLETED] — the mail provider through which we receive and handle messages.
- [TO BE COMPLETED] — form delivery and anti-spam service, where used.
- Google Ireland Limited — Google Analytics 4 and Google Fonts, for the part subject to your consent.
- Vimeo Inc. — video playback, only if you allow the “Video” category.
Meta is not our processor. For the collection of data through the pixel and its transmission to Meta Platforms Ireland Limited we act as joint controllers with Meta, under the controller addendum the platform provides: we decide together the purposes and means of that stage. Meta is responsible for the processing that follows, under its own notice. You can exercise your rights against us and directly against Meta.
Data may also be disclosed to advisers and authorities where the law requires it.
Transfers outside the European Union
Google, Meta, Vimeo and Vercel belong to groups based in the United States and data may be transferred there. The transfer relies on the adequacy decision for the Data Privacy Framework, where the supplier participates in it, or on the standard contractual clauses approved by the European Commission, with the supplementary safeguards required.
To be plain about it: data protection in the United States is not equivalent to the European standard, and US authorities can, in certain circumstances, access data. It is one of the reasons analytics and marketing stay switched off until you allow them.
We provide a copy of the safeguards on request.
How long we keep it
Messages received through the form or by email: for as long as it takes to handle the enquiry and, if a relationship follows, for the duration of that relationship and the applicable limitation periods. Where nothing follows, normally no longer than 24 months.
Aggregate traffic data: in the anonymous, aggregated form the measurement tool makes available.
Google Analytics 4: event- and user-level data is kept for the period set on the property, which we have set to [TO BE COMPLETED] months (14 is the maximum allowed). GA4 cookies last up to 24 months from the last visit.
Meta Pixel: retention is determined by Meta under its own notice. The _fbp cookie lasts about 3 months.
Your cookie choice stays in your browser until you change it or clear the site data.
Technical server logs: according to the hosting provider’s retention periods ([TO BE COMPLETED]).
Your rights
You can ask us at any time to access your data, to correct it, to erase it, to restrict processing and to port it, and you can object to processing based on legitimate interest. Write to privacy@werise-group.com: we reply within one month.
Where processing is based on consent, you can withdraw it at any time from the “Cookie preferences” link at the foot of every page, without writing to us.
If you believe the processing breaches the rules, you can lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the authority in the country where you live.
Changes
If we change how we handle data we update this page and the date at the top. Material changes are flagged on the site.