Privacy Policy

Introduction

This privacy policy describes how White Panda SRLS collects, uses, shares, and protects the personal information of users who visit our website. This policy is drafted in compliance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679). By using our website, the user accepts the terms of this privacy policy.

1. Types of Data Collected

We only collect personal data that the user voluntarily provides, for example through:

• Identifiable personal data: name, email address, phone number, and other information provided by the user through contact forms or during site registration.
• Non-identifiable data: aggregated information about site usage that does not allow direct identification of the user.

2. Methods of Data Collection

Personal data is collected exclusively through:

• Contact forms: data provided by the user when contacting us or requesting information through the forms available on our site.

We do not use cookies or other tracking technologies to automatically collect data, except for those used by third-party services such as Google Fonts.

3. Legal Basis for Processing

Under the GDPR, the processing of personal data is lawful only if based on a legal basis. We process users' personal data in the following cases:

• Consent: when the user voluntarily provides their data through the site, such as when contacting us via the contact form.
• Performance of a contract: to provide services requested by the user.
• Legitimate interest: to improve the quality of our services and respond to user requests.

4. Purpose of Data Processing

• Responding to information or assistance requests received through the site.
• Providing services requested by the user.
• Monitoring and improving the performance of the website.

5. Use of External Services: Google Fonts and Matomo

Our site uses certain external services to enhance the user experience and better understand browsing behavior, in compliance with the General Data Protection Regulation (GDPR).

Google Fonts

To improve the graphic rendering of texts, we use Google Fonts. Integration occurs via requests to Google's servers, which may involve the transmission of the user's IP address. Fonts are loaded efficiently without the use of tracking cookies on our part.

For more information, please refer to Google's privacy policy: https://policies.google.com/privacy.

Matomo

For statistical analysis of web traffic, we use Matomo, an open-source tool that allows us to collect anonymous and aggregated data on site usage. Processing is carried out in compliance with the GDPR and is based on the legitimate interest of the data controller (Art. 6, para. 1, lett. f).

The implementation features are as follows:

• No profiling cookies are installed on users;
• The IP address is anonymized before processing;
• Data is hosted on servers under our control, without transfers to third parties;
• Data is used exclusively for aggregated statistical purposes;
• The user is not identifiable and is not profiled for advertising purposes;
• It is possible to object to processing by disabling it in browser settings or by writing to us via email.

Therefore, processing carried out through Matomo does not require the user's prior consent, according to the Privacy Guarantor's Guidelines.

6. Data Sharing

We do not sell, trade, or rent users' personal data to third parties. However, we may share data with reliable third-party service providers necessary for the operation of the site or for the execution of offered services, who process data in compliance with current regulations and this policy.

7. Data Retention

Personal data will be retained only for the time necessary to fulfill the purposes for which it was collected, unless the law requires or allows a longer retention period.

8. Data Security

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, accidental loss, disclosure, or destruction. Nevertheless, no online data transmission system is completely secure, and we cannot guarantee the absolute security of transmitted information.

9. User Rights

In accordance with the GDPR, users have the right to:

• Access their personal data to know what information we are processing.
• Rectify any inaccurate or incomplete personal data.
• Erase their personal data (right to be forgotten), except in the presence of legal obligations requiring us to retain it.
• Restrict the processing of their data in certain circumstances.
• Object to the processing of their data for reasons related to their particular situation.
• Data portability: receive a copy of the data provided in a structured and machine-readable format, and transfer such data to another data controller.

To exercise these rights, the user can contact us at the email address indicated in the "Contacts" section.

10. Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Changes will be published on this page with the date of the last update.

11. Contacts

For any questions or requests related to this policy, the user can contact us via email at: privacy@whitepanda.it.

12. Compliance

This version complies with GDPR requirements and clearly specifies that profiling cookies are not used, except for those employed by third-party services such as Google Fonts. Additionally, the use of Matomo respects anonymization and statistical processing criteria, in compliance with principles of transparency, data minimization, and proportionality.