This Privacy Policy describes how the personal data of users who browse this website and use the contact form are processed, in accordance with Regulation (EU) 2016/679 (the “GDPR”).
1. Data Controller
The Data Controller is:
Helyra
Registered Office: Via Nicola Nisco 20, 00179 - Rome, Italy
Email:
2. Types of data processed
This website processes the following categories of data:
- Browsing data: during normal operation, the computer systems and software procedures used to run the website acquire certain data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, browser type, operating system, pages visited). Such data may be used in aggregated and anonymous form for statistical purposes by means of traffic analysis tools (analytics).
- Data provided voluntarily by the user: the personal data (for example name, email address and the content of the message) that the user provides by filling in the contact/report form available on the website.
3. Purpose of processing
The personal data provided through the contact form are processed solely for the following purpose:
- To respond to requests, reports and questions sent by the user.
The data provided through the form are not used for newsletter subscriptions, for sending marketing communications or for inclusion in mailing lists. The data are used exclusively to provide a reply to the request received.
4. Legal basis for processing
The legal basis for processing the data provided through the contact form is the need to respond to a specific request made by the user (performance of pre-contractual measures or legitimate interest in replying). For browsing data collected through analytics tools, the legal basis is the legitimate interest of the Controller or, where required, the user's consent.
5. Method of processing
The data are processed using IT and electronic tools, adopting security measures appropriate to ensure confidentiality and to prevent unauthorised access, loss or unlawful use of the data.
6. Data retention period
The personal data provided through the contact form are kept for the time strictly necessary to handle the request and to manage any subsequent communications, after which they are deleted, unless otherwise required by law.
7. Disclosure of data
The data are not disseminated. They may be processed by persons authorised by the Controller or by technical service providers (for example the hosting provider or the providers of analytics tools), appointed where necessary as data processors.
8. Rights of the data subject
The user has the right, at any time, to exercise the rights provided for in Articles 15 to 22 of the GDPR, including:
- to access their personal data;
- to request their rectification or erasure;
- to request restriction of processing;
- to object to processing;
- to request data portability;
- to lodge a complaint with the Data Protection Authority.
To exercise these rights, you may write to:
9. Changes to this Privacy Policy
The Controller reserves the right to amend or update this Privacy Policy, including as a result of regulatory changes. Any changes will be published on this page.
Last updated: 23 June 2026
