One moment, before you go in.
We use technical cookies, which the site needs to work. With your consent we also use measurement cookies, to understand which pages actually help. Read the cookie policy
Click by Click
Privacy policy
How we handle the personal data of anyone visiting this site or writing to us, under arts. 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003. In plain language, without cross-references.
Last updated:
Who processes your data
The data controller is Click by Click di Morbiducci Marco, based at Via Cosimo Morelli 53, 62100 Macerata (MC), Italy, VAT number 02126850433.
For any request about your data, write to info@clickbyclick.it. We reply within one month, as required by art. 12 GDPR.
What we collect and why
We collect only what is needed to run the site and to reply to you, and we sell it to no one.
Along with a message sent through the form we keep the date it was sent and the version of this notice you accepted: the proof art. 7.1 GDPR requires us to be able to provide.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email, company and message sent through the contact form | Replying to your enquiry and, if work follows, managing the relationship | Pre-contractual steps at your request (art. 6.1.b GDPR) | 24 months from last contact, then deletion |
| Name, email, chosen time and any notes, sent through the booking calendar | Arranging the video call you asked for: creating the appointment in the calendar, generating the video link and sending you the confirmation | Pre-contractual steps at your request (art. 6.1.b GDPR) | 24 months from the appointment, then deletion |
| IP address and browser characteristics, at the moment you submit the form | Telling a person from an automated program, so the form is not left at the mercy of automated submissions | Legitimate interest in service security (art. 6.1.f GDPR) | The check happens at that moment and is not stored by us |
| IP address, date and time, requested page, browser (server logs) | Running the site, diagnosing faults and preventing abuse | Legitimate interest in service security (art. 6.1.f GDPR) | Up to 12 months |
| Pages viewed, referrer, device type, page interactions (measurement) | Understanding which content is useful and improving the site. If you write through the form, our servers also report to the same service that a contact took place, without the content of your message | Consent, withdrawable at any time (art. 6.1.a GDPR) | As set by the services listed in the cookie policy |
| Interactions with advertising | Measuring campaign results | Consent, withdrawable at any time (art. 6.1.a GDPR) | As set by the services listed in the cookie policy |
| SHA-256 fingerprint of your email address and first name, together with your IP address, browser and Meta cookie identifiers, sent from our servers when your message is delivered | Attributing the enquiry to the campaign that produced it. The fingerprint is not readable in clear text, but it is not anonymous data: it is pseudonymisation (art. 4.5 GDPR), which Meta can match against the fingerprints of its own users to recognise the corresponding account. It therefore remains personal data, and is sent only with your consent | Consent, withdrawable at any time (art. 6.1.a GDPR) | As set by the services listed in the cookie policy |
Do you have to provide your data?
No. Browsing the site requires no data at all. If you want to write to us through the form, name, email and message are required: without them we could not reply. The same goes for the video call: without a name, an email address and a time there is no appointment to arrange.
Who we share data with
Only the providers that let us deliver the service, appointed as processors under art. 28 GDPR:
- Hostinger International Ltd: site hosting and technical logs, servers in the European Union.
- Hostinger International Ltd: the company mailbox that receives contact form messages.
- Cloudflare: anti-bot check on the contact and booking forms (Turnstile), which does not profile visitors and is not used for advertising purposes.
- Google Ireland Ltd: Google Calendar and Google Meet, for appointments booked through the site. The appointment lives in the controller’s calendar, and Google receives name, email and time in order to create the event and the video link.
- Google Ireland Ltd: Google Analytics, only with measurement consent.
- Microsoft Ireland Operations Ltd: Microsoft Clarity, only with measurement consent.
- Meta Platforms Ireland Ltd: campaign measurement, only with marketing consent.
Transfers outside the European Union
Some providers may process data on servers outside the European Economic Area. Where that happens, the transfer relies on the Standard Contractual Clauses approved by the European Commission or on an adequacy decision, such as the EU-US Data Privacy Framework.
Your rights
At any time you can ask us to:
- tell you what data we hold about you and give you a copy (art. 15);
- correct it, if it is wrong or incomplete (art. 16);
- erase it (art. 17);
- restrict its processing (art. 18);
- provide it in a machine-readable format (art. 20);
- stop processing based on legitimate interest (art. 21);
- withdraw consent already given, without affecting what was lawful before (art. 7.3).
If something is wrong
Write to info@clickbyclick.it first: most things are settled straight away. You always keep the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.
Automated decisions
We take no decisions based solely on automated processing that produce legal effects on you (art. 22 GDPR).
- If you consent to marketing cookies, Meta may use the data it collects to personalise the ads you see on its platforms: that processing, for which Meta is an independent controller, is described in the cookie policy and in Meta’s own privacy notice.
Changes to this notice
When the substance of a processing activity changes, say a new purpose, a new recipient or different retention, we update this page and ask for consent again where needed. The date at the top marks the latest published version.