This Privacy Policy explains how AMC S.r.l. processes personal data of visitors to kooksetup.com, in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
Who we are
AMC S.r.l. Piazza Luigi Ughetto 7, 10098 Rivoli (TO), Italy – VAT number (P.IVA): IT10832190010
Email: maria.caminiti@kooksetup.com
For all privacy-related inquiries, please contact our Data Protection Officer, Maria Caminiti, at the email address above.
What data we collect
We collect personal data only through the contact form and, if you consent, through Google Analytics 4.
Contact form. When you send us an enquiry, we receive the data you enter:
- full name
- phone number (optional)
- company (optional)
- type of venue (optional)
- location (optional)
- the content of your message
Please do not include sensitive data (such as health information) in your message.
Usage data (Google Analytics 4). Only if you accept analytics cookies, we collect information about how you use the website: pages visited, time spent, device and browser type, approximate location (country/city level), referring website and an online identifier stored in a cookie. GA4 does not log or store full IP addresses of users in the EU.
Technical data. Our hosting provider automatically records server logs (IP address, date and time of access, requested page, browser) to keep the website secure and working.
Why we use your data and on what legal basis
| Purpose | Data | Legal basis |
| Replying to your enquiry and, if requested, preparing an offer | Contact form data | Steps taken at your request before entering into a contract (Art. 6(1)(b)); for general enquiries, our legitimate interest in answering messages sent to us (Art. 6(1)(f)) |
| Measuring website traffic and improving content | Usage data from GA4 | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Website security and operation | Server logs | Our legitimate interest in a secure, working website (Art. 6(1)(f)) |
| Defending legal claims and meeting legal obligations | Correspondence, if relevant | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
We do not use your data for marketing unless you separately agree to it, and we never sell it.
Cookies and Google Analytics 4
Analytics cookies are placed only after you click “Accept” in our cookie banner; if you reject them or close the banner, no analytics cookies are set.
| Cookie | Provider | Purpose | Duration |
| [cookie consent cookie name] | [Company name] | Remembers your cookie choice | [e.g. 6 months] |
| _ga | Distinguishes unique visitors | 2 years | |
| ga[ID] | Keeps the session state | 2 years |
We have configured GA4 to keep event data for 12 months, with Google Signals and advertising features turned off. Google acts as our data processor under the Google Ads Data Processing Terms.
You can change or withdraw your consent at any time via the [“Cookie settings”] link at the bottom of every page. You can also block cookies in your browser settings or install the Google Analytics opt-out add-on.
Who receives your data
Your data is accessed only by our authorised staff and by service providers acting as data processors under a written agreement (Art. 28 GDPR):
- Website hosting: Scala Hosting LLC, Dallas, Texas, 75201, United States
- Email service: Aruba S.p.A. – via San Clemente, 53 – 24036 Ponte San Pietro (BG) P.IVA 01573850516
- Web analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
We may also disclose data to public authorities when required by law. We do not share your data with anyone else.
Transfers outside the EU
Google may process analytics data in the United States through its parent company Google LLC. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection (Adequacy Decision of 10 July 2023). Google also applies the European Commission’s Standard Contractual Clauses as an additional safeguard.
Your personal data is stored and processed exclusively on servers within the European Union. Web hosting services are provided by ScalaHosting LLC (on servers located in the EU), while email services are provided by Aruba S.p.A. (on servers in Italy/the EU).
All other data is stored within the European Union.
How long we keep your data
We keep data only as long as needed for the purpose it was collected for.
| Data | Retention period |
| Enquiries that do not lead to a contract | 24 months from our last reply, then deleted |
| Enquiries that lead to a contract | For the duration of the contract and 10 years after, as required by Italian civil and tax law (Art. 2220 Civil Code) |
| GA4 analytics data | 12 months, then automatically deleted by Google |
| Cookie consent record | 6 months, after which we ask again |
| Server logs | 30 days, unless needed to investigate a security incident |
Your rights
You can exercise the following rights at any time, free of charge, by writing to maria.caminiti@kooksetup.com:
- Access your data and receive a copy (Art. 15)
- Rectification of inaccurate or incomplete data (Art. 16)
- Erasure of your data (Art. 17)
- Restriction of processing (Art. 18)
- Data portability in a structured, machine-readable format (Art. 20)
- Objection to processing based on our legitimate interest (Art. 21)
- Withdrawal of consent at any time, without affecting processing carried out before withdrawal (Art. 7(3))
We will reply within one month. We may ask you to confirm your identity before acting on a request.
If you believe we process your data unlawfully, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or with the supervisory authority of the EU country where you live or work.
Other information
Is providing data mandatory? Fields marked with an asterisk in the contact form are required to reply to you; without them we cannot answer your enquiry. Accepting analytics cookies is entirely optional and does not affect your use of the website.
Automated decisions. We do not make decisions based solely on automated processing, including profiling.
Minors. The website is not intended for children under 14, the age of digital consent in Italy. We do not knowingly collect their data.
Security. We protect your data with appropriate technical and organisational measures, including an encrypted (HTTPS) connection and restricted access to enquiries.
Changes to this policy. We may update this policy when our processing changes. The current version is always published on this page, with the date of the last update.
Data protection questions
maria.caminiti@kooksetup.com