Privacy Policy

1. Who We Are

We are a professional engineering practice providing engineering design, consulting, and technical solutions.

• Data Controller: Andrea Samorè
• Email: info@andreasamore.com
• Address: Via Enrico Fermi 18 - 47043 Gatteo (FC) - Italy

2. What Personal Data We Collect

We only collect personal data that you choose to provide to us when you contact us, typically:

• Your name
• Your email address
• Any other information you include in your message

We do not collect personal data automatically through this website, use cookies, or employ tracking technologies.

Children’s Data: Our services are intended for adults in a professional context. We do not knowingly collect or process data of children under 16.

3. How We Use Your Personal Data and Legal Bases

We process your personal data for the following purposes, each with its corresponding legal basis under GDPR:

Initial Inquiries and Communication

• Purpose: Responding to your inquiries and managing business communications (emails are stored securely and treated as confidential business correspondence)
• Legal Basis: Legitimate Interests (our legitimate interest in conducting business and responding to potential clients)

Contract Performance

• Purpose: Providing our professional engineering services and managing client relationships
• Legal Basis: Contract (to take steps at your request before entering into a contract, or to perform a contract with you)

Record Keeping

• Purpose: Maintaining necessary records for legal, professional, and contractual obligations, including accounting and tax law compliance
• Legal Basis: Legal Obligation (compliance with accounting, tax, professional engineering body requirements, and regulatory obligations)

We do not use your data for marketing purposes without your explicit consent.

4. How We Share Your Data

We treat all communications as confidential and operate under professional engineering confidentiality obligations. We do not sell or rent your data. We may share personal data only where necessary with:

• Email and IT service providers (such as Google Workspace, Microsoft 365, or similar platforms for secure hosting and communication)
• Cloud storage providers (for secure document storage, if applicable)
• Professional advisers (legal, accounting, technical consultants)
• Professional engineering bodies (if required for regulatory compliance)
• Authorities (if legally required)

All third parties are contractually bound to protect your data and process it only on our instructions.

5. International Data Transfers

If your email is processed by providers outside the European Economic Area (EEA) (e.g., if you use Gmail, Outlook, or we use international cloud services), we ensure adequate safeguards are in place such as:

• Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

6. Data Retention

We keep personal data only as long as necessary for the purposes outlined above:

• Email correspondence: Up to 3 years after resolution of inquiries or end of client relationship
• Contract and project records: Up to 7 years after project completion to comply with legal, professional, and insurance obligations
• Professional liability records: Up to 10 years where required by professional engineering standards

You may request earlier deletion of your data, unless retention is required by law or professional obligations.

7. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccuracies
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Request data portability (receive your data in a structured format)
• Withdraw consent (where consent is the legal basis for processing)

How to Exercise Your Rights:

• Contact us at info@andreasamore.com
• We will respond to your request within one month
• We may require verification of your identity for security purposes
• Most requests are handled free of charge, though fees may apply for excessive or repetitive requests

8. Security

We take reasonable technical and organizational measures to protect your personal data, including:

• Secure email services with encryption
• Access controls and password protection
• Regular security updates and backups
• Confidentiality practices in line with professional engineering standards
• Staff training on data protection

9. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Report it to the relevant Data Protection Authority within 72 hours
• Notify you directly if the breach poses a high risk to your personal data

10. Automated Decision Making

We do not use automated decision-making systems or profiling that would significantly affect you.

11. Complaints

If you have concerns about how we process your data, please contact us first at info@andreasamore.com. You also have the right to lodge a complaint with your local Data Protection Authority (DPA). In the EU, you can find your local DPA contact details at the European Data Protection Board website.

View EU DPA contacts

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted here with a revised "Last updated" date. For material changes, we may notify you directly via email.