This notice explains how personal data are processed when you visit this website or contact ObliTech, under Articles 12 and 13 of Regulation (EU) 2016/679 (GDPR).
1. Data controller and contacts
Data controller: ObliTech S.r.l.
Registered office: Via Giacinto Gallina 5, 34122 Trieste (TS), Italia
P. IVA 01456820321
Companies Register / REA: REA TS-218533 · Registro Imprese Venezia Giulia
Share capital €10,000.00 subscribed, of which €5,000.00 paid in
Privacy contact: info@oblitech.com
PEC: oblitech@pec.it
The company is represented by sole administrator Bruno Abbondanza. Privacy enquiries are handled on behalf of the company through the contact above.
Website covered by this notice: https://www.oblitech.com/
2. Data we process
Browsing data: IP address, date and time, requested resources, response status and technical browser/device information transmitted to the infrastructure that serves the website. Contact data: name, email address, organisation, enquiry category and the content you enter in your message.
The general contact form is designed to collect only the information needed to respond to an enquiry and does not accept attachments.
When Cloudflare Turnstile protection is active, the browser communicates with Cloudflare to distinguish legitimate submissions from abuse. Technical data needed for verification may be processed, including IP address, user agent, TLS fingerprint, public site key, origin, site URL and challenge data; the resulting token is validated server-side. The theme loads verification when you interact with the form, not when merely browsing or scrolling the page. Cloudflare’s notice describes a processor role for website protection and an independent controller role for improving bot detection, based on legitimate interests. The theme does not send the form’s name, email address or message to Cloudflare.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Respond to an enquiry and assess a requested collaboration or service. | Article 6(1)(b) GDPR where the request concerns a contract with you or steps at your request before a contract. Article 6(1)(f) for general enquiries and professional contacts acting for organisations: legitimate interest in managing business relationships and responding to messages. |
| Operate and protect the website; prevent spam and misuse. | Article 6(1)(f): legitimate interest in service availability, information security and preventing misuse, balanced against your rights. |
| Meet applicable legal obligations and establish or defend legal claims. | Article 6(1)(c) for legal obligations; Article 6(1)(f) for the establishment or defence of rights. |
The contact form is not a newsletter subscription and does not request marketing consent. Acknowledging this notice confirms that it has been read; it is not consent to promotional processing.
4. Required and optional information
Submitting an enquiry is voluntary. Name, a valid email address, enquiry category and message are needed to manage it; without them the form cannot be submitted. Organisation is optional, including for professional enquiries. No account is required to browse public pages.
5. Retention
Contact correspondence: normally up to 24 months after the enquiry is closed. If a contract or dispute follows, relevant records are retained for the periods required by the applicable obligations or defence needs, with access restricted.
The stated correspondence period is a company retention policy. The form does not delete messages from mailboxes: implementing this policy depends on correspondence management and must be coordinated with any backup copies.
Technical access and security logs are processed for website operations, abuse prevention and incident management. Actual retention depends on the Aruba service and its contractual terms. Records needed for a specific incident or a legal obligation may be retained only as long as needed for that purpose.
Any backup copies are intended for recovery. Coverage, frequency, rotation and retention depend on the services actually enabled and their configuration and contractual terms. This notice does not establish coverage of webspace, databases or mailboxes, or an actual deletion period for copies.
The form sends messages by email and does not create a message archive in the WordPress database. A keyed pseudonymous identifier derived from the IP address limits repeated submissions for 45 seconds. Expiry makes the anti-abuse state unavailable to the check; it does not guarantee physical deletion at the same instant. Removal depends on access to the expired entry and the cache and maintenance mechanisms of WordPress or the active cache service. The identifier is not used for behavioural tracking.
6. Recipients and service providers
Data may be accessed by authorised personnel and by technical providers involved in hosting, maintenance, security and email delivery, appointed as processors where required by Article 28 GDPR. Authorities and professional advisers may receive data where a legal obligation or a specific protection need applies. Data are not published or sold.
Hosting/CDN: Aruba S.p.A. — standard WordPress hosting (unmanaged) for www.oblitech.com, with Aruba CDN and HiSpeed Cache. Aruba reports Italian data centres for hosting; the location of any additional components and subprocessors remains subject to contractual verification.
Email/SMTP: Aruba S.p.A. — email service for the oblitech.com domain (info@oblitech.com). Aruba reports Italian data centres for its email services.
Anti-abuse verification: Cloudflare Turnstile.
7. International transfers
Aruba S.p.A. states that its hosting infrastructure uses data centres in Italy. Where enabled for the contact form, Cloudflare Turnstile processes technical data through Cloudflare and may involve processing or transfers outside the European Economic Area. Where applicable, Cloudflare documents safeguards including its Data Processing Addendum and Standard Contractual Clauses. The applicable service terms and sub-processors require account-specific verification; no blanket absence of international transfers is claimed.
8. Your rights
Where the legal conditions apply, you may request access, rectification, erasure and restriction, and portability of data you provided for automated processing based on consent or contract. You may object to processing based on legitimate interests. If a separate service relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You may also complain to the competent supervisory authority and seek a judicial remedy.
Send requests to: info@oblitech.com. We respond normally within one month; any extension permitted by law will be explained within that period. You may also lodge a complaint with the competent supervisory authority and seek a judicial remedy.
Right to object. You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests by contacting the privacy address above. Processing will stop unless compelling legitimate grounds overriding your interests and rights, or grounds for legal claims, apply.
9. Cookies, external links and automated decisions
The public pages use no marketing or profiling tools in the configuration described by this notice. No automated decisions with legal or similarly significant effects are made through this website. Images are served locally, and system fonts are used; professional-profile links open external websites only when selected. Those websites apply their own policies.