Privacy Policy

Last updated: 15 October 2026

This notice explains how we process the personal data of people who visit obdlab.it and people who write to us, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data controller

OBD — VAT no. IT02946590995
Via Rimassa 37/13, 16129 Genoa (GE), Italy
Email: obdsrls@gmail.com · Phone: +39 331 503 5322

2. What data we process

  • Browsing data. Like any website, the systems that run this site log some technical data (IP address, browser type, date and time of the request, page visited). It is used only to keep the site working and secure, not to identify you.
  • Data you send us. When you use the forms on the Contact page, or write to us by email or phone, we process the data you choose to give us: name, email, optionally phone, company or organisation, and the content of your request (project, event, dates, location, indicative budget).
  • Cookies. The site only uses technical cookies needed to make it work. Full details are in the Cookie Policy.

3. Why we process it and on what legal basis

  • To reply to your requests and, if a collaboration comes out of it, to handle the steps before it is agreed. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
  • To keep the site secure and working, including preventing abuse and spam. Legal basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
  • To meet legal obligations, for example tax rules or requests from the authorities. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not use your data for profiling and we do not send you promotional messages without your specific consent.

4. Providing your data

Filling in the forms is optional, but without your name, email and message we cannot reply.

5. How we process data

Messages sent through the site’s forms are delivered by email to the controller’s inbox and are not stored in a site database. Data is processed electronically, by authorised people, with appropriate security measures.

6. Who may receive it

  • The site’s hosting provider, acting as data processor.
  • The email service provider (Google Gmail). This may involve a transfer of data to the United States: Google LLC participates in the EU-U.S. Data Privacy Framework, which the European Commission recognises as adequate.
  • Advisers and authorities, only where the law requires it.

Your data is never sold or published.

7. How long we keep it

  • Contact requests: as long as needed to handle them, and no longer than 24 months after the last exchange, unless a collaboration follows.
  • Data linked to a contract: for the length of the relationship and the periods required by law (usually 10 years for tax documents).
  • Browsing data: for the limited period set by the hosting provider for security purposes.

8. Links to third-party sites

The site contains plain links to external services (Instagram, SoundCloud, Google Maps, Google Calendar, mabonfestival.it). None of their content is loaded on our pages: when you open a link, your data is governed by the privacy notice of the service you visit.

9. Your rights

You can ask us at any time to access, correct or delete your data, restrict its processing, receive it in a portable format, or object to processing based on legitimate interest (Arts. 15–22 GDPR). Write to obdsrls@gmail.com: we reply within 30 days.

If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

10. Changes

We may update this notice. The date at the top shows the latest revision.