Personal data processing policy

1. Data controller

The controller of personal data collected through this website is EGG LAB S.R.L., with registered office in Rome (Italy), registered with the Rome Business Register, tax code and VAT ID 18642451001, REA RM – 1798024.

Email

info@egglab.it

Certified email (PEC)

egglab@pec.it

EGG Lab S.r.l. is not currently required to appoint a Data Protection Officer (DPO) pursuant to Art. 37 GDPR. For any communication regarding this policy please write to the addresses above.

2. Types of data processed

The website collects and processes the following categories of personal data:

2.1 Browsing data

During normal operation, the IT systems and software procedures underlying the website acquire some data whose transmission is implicit in the use of internet communication protocols. Server log files record: IP addresses, browser and operating system type (User-Agent), URL of the requested resource, request timestamp, referrer, HTTP status code. These data are used only to derive anonymous statistical information on the use of the website and to monitor its correct operation and security.

2.2 Data provided voluntarily by the user

Sending emails to the addresses shown on the website leads to the acquisition of the sender's address and any other personal data included in the message, insofar as necessary to reply.

3. Legal basis and purposes of processing

Data are processed for the following purposes and on the following legal bases, pursuant to Art. 6 GDPR:

• Delivery and security of the website service — legal basis: legitimate interest of the controller (Art. 6.1.f GDPR) in keeping the website operational, tracking anomalous accesses and preventing abuse.
• Reply to email communications — legal basis: performance of pre-contractual measures at the data subject's request, or legitimate interest in replying (Art. 6.1.b and 6.1.f GDPR).
• Compliance with legal obligations — when applicable, particularly for tax, accounting and administrative obligations (Art. 6.1.c GDPR).

The website does not carry out automated profiling and does not take decisions based solely on automated processing which produce legal or similarly significant effects on the data subject (Art. 22 GDPR).

4. Processing methods

Data are processed by automated means, in ways organizationally linked to the purposes stated. Appropriate technical and organizational measures are adopted to ensure the security, integrity and confidentiality of the data, in line with Art. 32 GDPR.

5. Recipients of data and disclosure to third parties

Personal data may be disclosed to the following parties:

• The hosting provider of the website, appointed as data processor pursuant to Art. 28 GDPR. The provider's name will be indicated here once selected and the contractual relationship is formalized.
• The email service provider (for the info@egglab.it mailbox) and the PEC provider, each for the purposes tied to their service.
• Advisors (accountants, lawyers) and public authorities, within the limits of legal obligations.

Data are not disseminated, sold or transferred to third parties for commercial purposes.

6. Transfers outside the EU

Should any of the processors listed above be based outside the European Economic Area, the transfer is carried out on the basis of the safeguards set out in Arts. 44 et seq. GDPR, in particular adequacy decisions of the European Commission or standard contractual clauses (SCCs).

7. Retention period

• Server logs — retained for the time strictly necessary to guarantee operational security, indicatively no longer than 30 days, unless retention is required by law or by judicial authority requests.
• Emails sent to the controller — retained for the time necessary to fulfil the request and, if a contractual or pre-contractual relationship is established, for its duration and for any further time required by law.

8. Data subject rights

The data subject may exercise at any time the rights granted by Arts. 15–22 GDPR:

• right of access to one's own data (Art. 15);
• right to rectification (Art. 16);
• right to erasure, "right to be forgotten" (Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object (Art. 21).

Requests may be sent to info@egglab.it or to the PEC egglab@pec.it. The controller will reply within the timeframes required by Art. 12 GDPR (indicatively one month, extendable).

9. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, data subjects who believe that the processing of their personal data is in breach of applicable rules have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the supervisory authority of the EU State where they reside or work.

10. Changes to this policy

This policy may be updated to reflect regulatory changes, the introduction of new services, or a change of provider. The last update date is stated at the top of the document. Users are encouraged to consult this page periodically.