Privacy notice

Eccellenze Italiane is a network run by several companies. For data protection this is not a formality: what counts is who decides the purposes and the means of the processing, because that is the party you turn to in order to exercise your rights.

The controller of the data collected through this site is:

• Qui Made in Italy S.r.l.s., registered office at Via delle Querce 45, 06083 Bastia Umbra (PG), VAT no. 03688050545. Decides the purposes and the means of the processing of data collected through this site.

The other companies in the network, listed at the foot of this page, process the data on behalf of the controller and on the basis of a contract, each for the part of the service it provides.

For any matter concerning personal data, write to info@eccellenzeitaliane.com or to the certified address quimadeinitaly@pec.it, or call +39 366 694 5068. The operating office is at Via delle Querce 45, 06083 Bastia Umbra (PG).

Anyone who merely visits the site leaves only the technical data that every connection involves: IP address, type of browser and device, page requested, time of the request. It stays in the server logs and serves to deliver the pages and to defend them from abuse.

Anyone who uses the search engine leaves the text of the question they wrote, together with a random session identifier that is deleted when the tab is closed. We ask you not to write personal data inside searches: that field is there to look for businesses, not for people.

Anyone who signs in to the private area for certified owners leaves their account details and those of the business they represent. Anyone who writes to us through the contact or application forms leaves the data they chose to enter.

The data of the businesses published on the site comes from the register of the network and, for the descriptive part, from public sources verified one by one. Every certified business may ask at any time for what concerns it to be corrected or removed.

• To make the site work and keep it safe: this is our legitimate interest in providing the service requested and in defending it from abuse.
• To run the private area and the certification relationship: this is the performance of the contract with the certified business.
• To reply to those who write to us: this is the performance of steps requested by the data subject before any contract.
• To understand whether the search engine answers well, with aggregate measurements and without profiling: this is our legitimate interest in improving the service.
• To comply with legal, accounting and tax obligations, where they exist.

The technical server logs are kept for as long as security and diagnostics require, and in any case no longer than twelve months. Measurement events, which identify no one, are kept in aggregate form. The data of certified owners remains for the duration of the relationship and for the limitation periods that follow. Messages received through the forms remain for as long as it takes to act on them.

The data is neither sold nor passed to third parties for commercial purposes. It is processed, on our behalf and on our instructions, by the providers that make the service possible:

• Vercel Inc., provider of the infrastructure that serves the site. Processes the technical connection data needed to deliver the pages, including the IP address, in the server logs. Processing: European Union, with standard contractual clauses for the United States.
• Supabase Inc., provider of the database and of the image store. Holds the data of the network, the sign-ins to the private area and the published images. Processing: European Union, with standard contractual clauses for the United States.
• Anthropic PBC, provider of the model that translates our content and assists our internal work. Translates into the five foreign languages the editorial content intended for publication — listings, portraits, articles — which are texts already public or about to be. It also receives, when one of our operators queries the management system in natural language, the data of the business being worked on. It does not receive the data of site visitors. Processing: United States, with standard contractual clauses.
• ElevenLabs Inc., provider of the transcription and synthetic voice used by our operators. Transcribes the speech of the operator dictating a question to the management system and reads out the answer. It does not come into play for site visitors, and the recording is not retained. Processing: United States, with standard contractual clauses.
• Meta Platforms Ireland Ltd., social platform, when a business chooses to connect its own page. Receives the connection request and returns permission to publish on the named page. It plays no part for site visitors. Processing: Ireland, with transfers to the United States covered by the safeguards provided for in the Regulation.
• n8n.lumenapp.it, our automation server. Receives applications sent from the site and passes them to the network register. Processing: European Union.
• risponditore-one.vercel.app, service that composes the plaque preview. Receives the business name and its identifier in order to draw the plaque image. No visitor data. Processing: European Union, with standard contractual clauses for the United States.

It may also come to the knowledge of the professionals who assist us and of the authorities, in the cases provided for by law.

When you open a page we read two things your browser sends to every site of its own accord: the language it is set to and, from your IP address, the country you are connecting from. They serve one purpose and nothing else: working out whether it makes sense to offer you the same page in another language, with a notice at the top. We do not move you, we keep neither the browser preference nor the country, and the language a page is written in depends solely on the address you opened.

You may ask at any time to know which data we process, to obtain a copy of it, to have it corrected or erased, to restrict or object to the processing, and to receive it in a machine-readable format. Where the processing rests on consent, you may withdraw it without this affecting what was done before.

It is enough to write to info@eccellenzeitaliane.com. If you believe your data is being handled badly, you may turn to the Garante per la protezione dei dati personali, the Italian data protection authority.

For transparency, these are all the companies that take part in running Eccellenze Italiane and its services.

• Qui Made in Italy S.r.l.s. — VAT no. 03688050545 — Via delle Querce 45, 06083 Bastia Umbra (PG). Decides the purposes and the means of the processing of data collected through this site.
• Next Excellence S.r.l.s. — VAT no. 03649680547. Processes, on the controller's behalf, the data needed to produce and personalise the materials and services included in the certification.
• Eccellenzapp S.r.l.s. — VAT no. 03686950548. Publisher of the Eccellenze Italiane app on the App Store and Google Play.
• Prometeus S.r.l. — COE SM30598. Processes, on the controller's behalf, the data needed to produce and personalise the materials and services included in the certification.
• Icarus S.r.l.. Processes, on the controller's behalf, the data needed to produce and personalise the materials and services included in the certification.
• Service Prime S.r.l.. Sends certified holders the service communications concerning their certification.
• Esperienze S.r.l.. Processes, on the controller's behalf, the data needed to produce and personalise the materials and services included in the certification.

What the site writes on your device is listed in full, item by item, on the page devoted to cookies. In short: no profiling, no third-party tracking.