Privacy, before we even begin.

Who is responsible

The controller is Antonino Gandolfo, who personally manages the project from Italy. For privacy information or to exercise your rights, contact support@turnode.it. No data protection officer (DPO) has been appointed.

When you visit

When you open a page, Firebase Hosting receives your IP address and the technical request information needed to deliver the content. Google states that it uses IP addresses to detect abuse and provide hosting usage analysis. This technical processing is separate from Google Analytics, which is not integrated into this website.

The legal basis is the controller's legitimate interest in making the coming-soon page available and protecting it, under Article 6(1)(f) GDPR. The technical data required for the connection cannot be excluded while continuing to receive the pages; you can stop browsing and exercise the right to object where applicable.

Data are processed mainly using electronic tools, with proportionate security measures. The information processed must be relevant and limited to the stated purposes. The website uses HTTPS; we do not add identified visitor records, profiling or advertising tools.

See the Firebase privacy documentation for information about hosting. The absence of cookies does not eliminate this technical processing.

When you email us

Contacting us is optional. The email link opens your email application; there is no form that submits data directly from this website. We process the sender's address, any name, the message and attachments you choose to send solely to understand and handle your enquiry.

The legal basis for ordinary unsolicited enquiries is our legitimate interest in responding to correspondence under Article 6(1)(f) GDPR. Without a usable contact address or information strictly necessary for your enquiry, we may be unable to respond. We do not use these contacts for newsletters or advertising.

Please do not send health information, identity documents, workplace information or other people's data unless necessary for your enquiry. The website is not designed to collect them. Requests to exercise privacy rights are also handled to comply with GDPR obligations under Article 6(1)(c).

Cookies and external tools

The public pages do not set cookies or integrate advertising or statistical tracking tools. The Cookie Policy separately describes language selection, reading options and external links.

We do not carry out profiling or automated decision-making that produces legal or similarly significant effects.

Who can access your data

The controller personally handles incoming requests. No other staff have access to the mailbox, and no forwarding, CRM platform or outsourced customer support service is active.

Google / Firebase Hosting provides the infrastructure delivering these pages. Aruba S.p.A. provides the email service for support@turnode.it. Data processed on the controller's behalf are subject to the respective processing agreements: the Firebase terms and the Aruba terms, Article 23, including the subprocessors provided for in those agreements.

Processing carried out by providers for their own purposes, such as managing their contractual relationship and their own legal obligations, remains governed by their privacy notices. We do not sell data or provide them to third parties for marketing. Disclosures to authorities or professional advisers are limited to legal obligations or concrete needs to protect legal rights.

LegalBlink is used to prepare documents, not as a component loaded in visitors' browsers: these pages do not embed its scripts, banners or external frames.

Where data may be processed

The website is also accessible outside the European Union. Accessibility alone is not the same as transferring data to a provider abroad. However, Firebase Hosting uses global infrastructure: some processing may take place outside the European Economic Area, including in the United States.

The Firebase terms, Section 10, govern transfers. Applicable safeguards include adequacy decisions and standard contractual clauses, depending on the circumstances. Under the EU-US Data Privacy Framework, adequacy covers certified organisations and processing within its scope; it is not a general authorisation for transfers to every US recipient.

Google publishes information about its certification in its privacy documentation and about providers in its Firebase subprocessor list. The email service's contractual safeguards apply to Aruba. You can ask the controller about the applicable safeguards and how to obtain a copy.

We do not claim that all processing takes place exclusively within the European Union. Applicable mandatory rules remain unaffected.

How long data is kept

Ordinary email. Correspondence and any attachments are deleted when the request is closed, without an additional routine retention period. The controller manages this deletion; the website does not automatically perform operations on the mailbox.

Hosting technical data. Firebase states that it retains IP addresses for a few months. This period depends on the service and does not coincide with closing an email request or a page. We do not attribute an exact number of days to the provider when it has not specified one.

Limited exceptions. Where a legal obligation or a concrete dispute requires retention, only the necessary information is kept for the period justified by that purpose. Access remains restricted.

Deletion from the active mailbox does not necessarily mean immediate removal from the provider's technical copies. Any backups and residual deletion times follow the service terms; the controller does not use them as an additional routine archive.

Your rights

You may request access, rectification, erasure and restriction of processing where the GDPR provides these rights. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies only where the conditions of Article 20 are met; it does not automatically apply to processing based on legitimate interests.

Contact support@turnode.it. We normally respond within one month, subject to the extensions and conditions provided by the GDPR. You do not need to attach an identity document in advance: additional information is requested only where necessary to verify the person exercising a right.

You may lodge a complaint with the Italian Garante per la protezione dei dati personali or another competent supervisory authority. This notice will be updated before new purposes, collection tools or website functionality are introduced.