Privacy Policy.
Your data, explained.

1. Data controller and scope

The data controller for this website and its enquiries is Ing. Salvatore Colangelo, VAT IT02082660768, tax address Via Modena 14, 85016 Pietragalla (PZ), Italy. The practice address is Via della Tecnica, 24A, 85100 Potenza (PZ), Italy. Email salvatorecolangelo92@gmail.com or certified email salvatore.colangelo@ingpec.eu. Further contacts appear under Identity and contacts.

This notice concerns the website and its tools. Professional appointments and confirmed rental agreements will be accompanied by any further information needed to handle the work and its documents. Online payments cover DXF designs, services with a defined price, and service or hire quotations approved by the practice.

2. Browsing and data kept in your browser

To deliver pages and keep the service secure, the hosting infrastructure may process technical information such as IP address, request date and time, page requested, browser characteristics and error details. The website does not integrate advertising pixels or remarketing functions. Optional Google Analytics 4 statistics are described below and are activated only with your consent.

Your language choice and selected DXF and service references are saved on your device to preserve these preferences between visits. Estimates, sketches and images loaded into the workspace are processed in the browser; simply selecting a file does not send it to the practice. A downloaded summary stays on your device until you choose to share it.

See the Cookie Policy for details and deletion options.

2a. Optional website statistics

If you accept statistics, the website loads Google Analytics 4 to understand which pages, products and services are viewed, the sources and campaigns bringing visitors, and how the cart, enquiry and purchase process are used. Measurements may include page views, service and contact clicks, product views and cart additions, checkout starts, enquiries confirmed as sent by the server and verified purchases. Purchase events use pseudonymous transaction references and limited product, quantity and amount information, without billing details. Connecting to the service also transmits technical connection and device information; geographic location is approximate.

The statistics code does not send form contents, chat messages, images, names, email addresses, tax codes, VAT numbers, postal addresses, card data, personal quotation codes or access tokens. Page addresses are reduced to allowed public paths, with queries and fragments excluded; only the domain is retained for external referrers. Allowed campaign labels are restricted to simple values without contact details or other personal information. Private management and authentication pages are not measured.

The purpose is to assess interest in the practice’s services and the effectiveness of shared links. The legal basis is optional consent under GDPR Article 6(1)(a) and Article 122 of the Italian Privacy Code. Before acceptance, the website does not load the Google Analytics tag or send statistical requests to Google. Refusing or withdrawing consent does not prevent browsing, sending enquiries or purchasing. You can change your choice using Cookie preferences, also available in the footer. Withdrawal stops new measurements by the website and removes accessible Analytics cookies; it does not automatically erase data already sent to the provider.

Analytics identifiers are pseudonymous; they do not provide a list of named visitors. The configuration does not use Google Signals, advertising personalisation or remarketing, and customers’ identity or contact details are not sent to the statistics service. User-level and event-level data retention is set to two months, with deletion following Google’s processing cycles; this setting does not apply to standard aggregate reports. Statistics begin when enabled, depend on consent and browser blocking, and may omit purchases. Verified order and payment records, rather than Analytics reports, are the reference for receipts and invoicing.

The controller determines the statistical purpose and uses the service under the applicable terms, including the Google terms for processing data on the customer’s behalf. Google may also process data outside the European Economic Area under the transfer safeguards described by the provider; exclusively EU-based processing is not promised. Further information appears in Google’s Privacy Policy and the Cookie Policy.

3. Enquiries to the practice

The estimate and drone calendar forms collect your name, email, optional company and phone number, additional information and request summary. Filling in the form keeps the details in the page’s memory; it does not save them in the browser’s local preferences or send them by itself. You can download the summary to your own device.

The send button is available only when the email connection is active, as indicated in the form. Pressing “Send request to the practice” then transmits the details to the website, stores them in a private Cloudflare D1 database and notifies salvatorecolangelo92@gmail.com. The prepared connection uses Google Apps Script and Gmail, authorised by the practice owner. Your email address will be used for the practice’s reply. The system will not automatically email a second copy to you: a reference and downloadable copy will be displayed on the page.

The private record will contain the request text, recalculated summary, reference, date and notification status, to handle pre-contractual enquiries and avoid duplicate messages. Acceptance by the email service does not guarantee final delivery. Details will be retained as needed to handle the enquiry, any resulting relationship or dispute; they are not automatically deleted after a fixed number of days. Operational retention periods, provider arrangements and deletion procedures will be completed by the controller before activation.

Separate abuse-prevention counters do not retain raw IP addresses; they expire within forty-eight hours and are cleared during subsequent requests. Provide only relevant details. Acknowledging this notice is not consent to advertising or newsletters.

“Prepare email” instead opens the email application on your device: review and send the message yourself. The website does not automatically send that email. No one is subscribed to promotional campaigns.

3-bis. Drone condition reports and photographs

The hire document page lets you prepare a handover or return report with contact details, serial numbers, inventory, condition notes and photographs. Inputs and selected photographs are processed in the memory of the open page: they are not uploaded to the site, emailed or stored in browser preferences. Closing or reloading the page discards the working data. Printing or saving a PDF creates a copy on the device, which you choose whether to share.

When a completed report is separately sent to the practice, the data controller uses it to manage the hire, document the condition of the equipment and address any claims. Include only relevant photographs; avoid identity documents, faces, third-party details or location data that are not needed. A printed report is not an electronic signature service.

4. AI assistant

The chat is identified as an artificial intelligence assistant. When the AI service is available and you press “Send”, the website sends OpenAI your current question and a limited part of the recent conversation needed for context: at most the last six messages. Do not enter passwords, payment details, health information or confidential client documents.

The conversation remains in the page’s memory and is cleared from the browser when you clear it, reload or close the page. The website does not save it in a conversation archive. Requests are sent with the provider’s response-storage option disabled; this does not exclude the provider’s technical or security records.

OpenAI generally states that abuse-monitoring logs may be retained for up to thirty days, with longer retention possible for legal or security reasons. See OpenAI’s API data documentation. Zero retention is not promised.

The website also keeps pseudonymous technical counters to limit abuse and excessive requests. These do not contain chat text. They expire after at most forty-eight hours and are removed in subsequent cleanup performed as new requests arrive.

If you choose to email the practice, the email link may include your most recent question, which you can edit before sending. The chat does not automatically forward the conversation or open a support ticket without your action. When AI is unavailable, local guidance responses are labelled as automated guidance.

5. Render generation

Uploading an image, selecting a PDF page or drawing in the workspace does not start AI generation. When the service is available and you explicitly request generation, OpenAI receives the reference image and your instructions, such as room, materials and style. For a PDF, the selected page’s image is used, rather than necessarily the entire document.

The website returns the result to your browser without creating a permanent application archive of your sketches or renders. The provider’s technical and security processing described above still applies. Where ChatGPT sign-in is required, the platform handles authentication and the website uses the user identifier to authorise generation. Render requests also use pseudonymous technical counters that expire within forty-eight hours and are cleared during subsequent requests; the counters do not contain images or instructions.

Only upload content you are entitled to use, and remove client names, signatures and other unnecessary data. Generated images are visual proposals: they do not make automated decisions with legal effects or replace professional assessment.

6. Orders and payments

For DXF and service purchases, information needed for the order, contractual declarations, accepted scope, amounts and payment outcomes are used to provide files or services, assist customers and meet tax and accounting duties. Hire orders also involve dates, handover arrangements and equipment availability. Approved quotations and service orders are held in the website’s private database; the management area is restricted to the authorised practice. Stripe processes payments; the website does not retain full card details.

The seller and data controller is Ing. Salvatore Colangelo, identified above. The purchase process includes the connection to Stripe and order confirmation; sales-data retention follows the information in this notice. Simply adding a design or service to your selection does not create an order. A personal link to an approved quotation allows its contents to be viewed and its payment to be started: keep it private and share it only with the intended recipient.

6a. Online withdrawal statements

Online withdrawal submission is not yet active. Once enabled, the website will collect your full name, contract reference, contact email, language and withdrawal statement, recording a communication reference, submission date and time, and receipt status. These records will document the statement, support contract administration and the exercise or protection of statutory rights.

The receipt will contain the same information and will be sent to your browser as a digital copy to retain; it will not be automatically emailed. The website will store the statement and an immutable copy of the receipt, with technical information for integrity checks and prevention of duplicate submissions. It will not publish the receipt or customer details at a public link.

Communication records will be kept as needed to handle the statement, any refunds or disputes and legal duties, taking account of applicable periods for protecting rights. They are not automatically deleted after a fixed number of days; operational retention criteria will be completed by the controller before activation. Separate abuse-prevention counters do not store raw IP addresses and use the expiry and cleanup windows described above.

7. Purposes, legal bases and retention

• Answering enquiries and preparing requested services: taking contractual or pre-contractual steps requested by the individual under GDPR Article 6(1)(b).
• Website operation and security: the legitimate interest in providing the service, preventing abuse and resolving technical problems under Article 6(1)(f).
• Optional statistics: consent under Article 6(1)(a), with the choices and retention described in section 2a.
• Applicable legal duties: compliance under Article 6(1)(c), including duties relating to any professional appointment or purchase.

Enquiry data is retained as needed to answer and manage the relationship, taking account of legal duties or the protection of rights. Contractual and tax documents are subject to applicable retention periods. The specific rules on local preferences, chat, counters and AI providers are explained on this page. General consent to data processing is not required simply to send an email; any promotional use would require a separate assessment and notice.

8. Providers and transfers

Data may be processed by authorised people handling your enquiry and by providers necessary for the service: ChatGPT Sites and Cloudflare infrastructure for hosting and security, OpenAI for AI functions you request, Google Apps Script and Gmail for form notifications and the mailbox once activated, and Stripe for payments. Only after consent, Google Analytics is also used for the statistics described in section 2a. Their activities depend on the service actually used.

Some providers may operate outside the European Economic Area. Contractual roles, applicable transfer safeguards and how to obtain a copy must be established within the controller’s arrangements before full commercial activation. We do not state that all data remains exclusively in Italy or the European Union.

9. Your rights

Where provided by the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw any consent without affecting earlier lawful processing. To exercise your rights, email salvatorecolangelo92@gmail.com with enough information to identify your request.

You may complain to the Italian Data Protection Authority or the competent supervisory authority. The AI assistant does not make binding decisions about appointments, bespoke fees, refunds or data rights.