Data controller
FGM Labs S.r.l., registered office at Corso Milano 23, 20900 Monza (MB), Italy — VAT/Tax ID 14798860962. For any request regarding data processing: [email protected].
We have not appointed a Data Protection Officer (DPO): our activity does not fall under the cases where appointment is mandatory under Art. 37 GDPR.
Data processed and purpose
When you browse this site, your IP address, browser type (user agent) and the page requested are automatically processed by the providers that host and serve the site — OVH (hosting) and Cloudflare (proxy/CDN) — for security purposes: detecting and preventing attacks, abuse and anomalous traffic, and diagnosing technical errors. We do not cross-reference this data with other information to identify you individually.
The site does not currently have a contact form that sends data to a system of ours: the Contact page only offers a direct phone call or email to our address. If you reach us this way, we process only the data you choose to share with us (e.g. name, email, message content) to reply to your request, with the same confidentiality you'd expect from ordinary professional correspondence. When we bring back an integrated contact form on the site, we will update this notice to describe how it works before switching it on.
If you consent to analytics cookies, we also process aggregated statistical data on browsing through Google Analytics 4 — details in the Cookie Policy.
Providing your contact details (phone/email) is always optional, but necessary for us to reply to you: without them we won't be able to get back to you. Consent to analytics cookies is likewise optional and can be declined with no impact on your ability to use the site.
Legal basis
Processing of technical security logs is based on our legitimate interest in keeping the site secure and working correctly (Art. 6.1.f GDPR). Processing of data you send us by phone or email is based on the performance of pre-contractual measures requested by you and/or our legitimate interest in responding to your request (Art. 6.1.b and 6.1.f GDPR). Analytics cookies are processed on the basis of your consent (Art. 6.1.a GDPR), which you may withdraw at any time without affecting the lawfulness of processing carried out before the withdrawal (Art. 7.3 GDPR).
Retention period
Hosting and CDN technical logs are kept only for as long as strictly necessary for the security purposes above, following the technical retention policies applied by OVH and Cloudflare. Data exchanged by email or phone is kept for as long as needed to handle your request; if a professional relationship follows, administrative/accounting records are kept for the period required by Italian civil and tax law (up to 10 years). Google Analytics 4 cookies are kept for the period shown in the Cookie Policy table (24 months).
Recipients and international transfers
- OVH — hosting, infrastructure within the European Union, data processor under Art. 28 GDPR.
- Cloudflare, Inc. — content delivery network (CDN), proxy and cookieless Web Analytics; processes the IP address and metadata of every HTTP request. Any transfer of data to the United States relies on the Standard Contractual Clauses approved by the European Commission.
- Google Ireland Limited — Google Analytics 4, activated only with your prior consent; any transfer of data to the United States relies on the Standard Contractual Clauses approved by the European Commission.
We do not share your data with anyone else, nor do we use it for third-party marketing purposes.
No automated decisions, no data from minors
We do not carry out any form of automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR). This site is not directed at children under 16 and we do not knowingly collect their data; if you are a parent or guardian and believe your child has provided us with personal data, please write to us so we can remove it.
Your rights
You may exercise the rights set out in Articles 15-22 GDPR at any time: access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent already given (without affecting the lawfulness of processing carried out before the withdrawal), by writing to [email protected]. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Changes to this notice
This notice may be updated over time — for example if we introduce new processing activities or following regulatory changes. The version in force is always the one published on this page.
Last updated: 1 August 2026.