Privacy & Cookie Policy

The data controller is BLUE NAVY SRL, with registered office at Via Toscana 30, 59100 Prato (PO), Italy — P.IVA: 02490780976 — PEC: bluenavysrl@legalmail.it . For any privacy-related inquiries, you may contact us at the above addresses.

We may collect personal information that you voluntarily provide when you: fill out our contact form (name, email, company name, message), subscribe to our newsletter (email address), or browse our website (IP address, browser type, pages visited via cookies and analytics).

We use your personal data to: respond to your inquiries and business requests, send newsletter communications (only with your explicit consent), improve our website and services, and comply with legal obligations.

With your consent, we also use the Meta Pixel to measure and optimise our advertising campaigns on Meta platforms (Facebook, Instagram) and to show relevant ads to people who have visited our website.

We process your personal data based on: your explicit consent (newsletter subscriptions, contact form submissions — Art. 6(1)(a) GDPR), legitimate interest (improving our services — Art. 6(1)(f) GDPR), and legal obligations (tax and accounting requirements — Art. 6(1)(c) GDPR).

Analytics and marketing cookies (Google Analytics, Meta Pixel) are used only on the basis of your consent (Art. 6(1)(a) GDPR and Art. 122 of Legislative Decree 196/2003, the Italian Privacy Code), which you can withdraw at any time via 'Cookie Settings' in the footer of our website.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for up to 24 months. Newsletter subscriber data is retained until you unsubscribe. Accounting and fiscal data is retained for 10 years as required by Italian law.

Under Articles 15-22 of the GDPR, you have the right to: access your personal data (Art. 15), rectify inaccurate data (Art. 16), request erasure of your data (Art. 17), restrict processing (Art. 18), object to processing (Art. 21), data portability (Art. 20), and withdraw consent at any time (Art. 7). To exercise these rights, contact us. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

We may share your data with the following third-party service providers: Google LLC (Google Analytics for website analytics, Google Maps for displaying our location — Privacy Policy: https://policies.google.com/privacy), Resend Inc. (for sending transactional and newsletter emails — Privacy Policy: https://resend.com/legal/privacy-policy), Cloudflare Inc. (Turnstile for bot protection — Privacy Policy: https://www.cloudflare.com/privacypolicy/). These parties act as data processors and are contractually obligated to process your data only for the specified purposes and to maintain its confidentiality.

Meta Platforms Ireland Ltd. (Meta Pixel, used only with your consent to measure and optimise our advertising on Facebook and Instagram — Privacy Policy: https://www.facebook.com/privacy/policy/). Unlike the providers listed above, Meta acts as joint controller with us for the collection and transmission of data through the Meta Pixel (Art. 26 GDPR — Controller Addendum: https://www.facebook.com/legal/controller_addendum) and as an independent controller for any further processing.

Some of our third-party service providers (Google LLC, Resend Inc., Cloudflare Inc.) are based in the United States. Data transfers to these providers are safeguarded by the EU-US Data Privacy Framework adequacy decision (where applicable) and/or Standard Contractual Clauses (SCCs) adopted by the European Commission, in accordance with Art. 46(2)(c) GDPR.

If you consent to analytics and marketing cookies, data collected through the Meta Pixel may also be transferred to Meta Platforms, Inc. in the United States, on the basis of the EU-US Data Privacy Framework adequacy decision and/or Standard Contractual Clauses.

We do not use automated decision-making or profiling processes that produce legal effects or similarly significant effects on you.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Art. 32 GDPR.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.