Privacy notice
Information under Articles 12 and 13 of Regulation (EU) 2016/679 (GDPR). This notice covers the LVIV website, METRICO at app.lvivengineeringtech.it and the portal at clienti.lvivengineeringtech.it.
Controller and contact
Ing. Ivan Caperchi Assennato Protsenko
LVIV ENGINEERING & TECHNOLOGY · VAT 07738781009
Via Farense 18, 02032 Fara in Sabina (RI), Italy.
Privacy enquiries and rights: ing.protsenko@lvivengineeringtech.it; alternatively ing.protsenko@icloud.com. Telephone: +39 339 339 4043.
Data we process
Technical and security data such as IP address, browser information and session identifiers; information you send by email, telephone or WhatsApp. The portals process names, contact details, company and property information, work location, descriptions, budgets, estimates, drafts, requests, uploaded photos and documents. The customer portal also processes profiles, tickets, work reports and the signature image added to a report. Where you use ChatGPT sign-in, authorised identity data such as name, email and account identifier are available.
Provide only information necessary for the request that you may lawfully share. Avoid health data, identity documents, access codes and unnecessary images of people.
Purposes and lawful bases
- Responding to requests, estimates and delivering services: Article 6(1)(b) for the individual’s own request or contract. For company representatives and other contacts: Article 6(1)(f), our legitimate interest in managing professional relationships.
- Requested archives, tickets and work reports: service delivery or legitimate interest in managing and documenting these relationships.
- Applicable tax, accounting and other legal obligations: Article 6(1)(c).
- Security, prevention of abuse and protecting legal rights: Article 6(1)(f), limited to necessary information and balanced against individuals’ rights.
We do not use requests for newsletters, advertising or profiling. Any new purpose requiring consent will be presented separately. Reading this notice or requesting submission is not marketing consent.
How requests work
The website contact form prepares a message in your browser and opens WhatsApp only when you choose; LVIV receives it after you send it in that service. Email and telephone remain available. METRICO saves drafts and attachments and forwards a request to the LVIV portal when you ask it to. The customer portal stores requests, tickets and reports. Calculated estimates are indicative and reviewed by LVIV; we do not make solely automated decisions with legal or similarly significant effects.
Recipients and international transfers
Necessary access is provided to the controller, authorised collaborators, hosting, security and email providers, professional advisers and authorities where required. Data are not published in public website archives or sold.
OpenAI Sites hosts these tools and processes hosted data on our behalf under the applicable DPA. The public DPA identifies OpenAI Ireland Ltd for EEA users; Cloudflare supplies infrastructure and protection. Data may be processed outside the EEA. The DPA provides for adequacy decisions or standard contractual clauses for relevant transfers. Exclusive storage in Italy or the EU is not guaranteed. Contact the controller for details or copies of safeguards.
When you choose WhatsApp, its privacy notice also applies, including its roles and transfers. WhatsApp acts as an independent controller for its own processing. External links do not automatically activate embedded third-party content on our pages.
Retention
Requests and communications are retained while needed to respond and manage the discussion; after closure, we assess ongoing contact or legal needs. Drafts, profiles and attachments are retained while necessary for the requested service, with at least annual review to remove unnecessary data. Engagement records follow applicable obligations: accounting records and invoices are generally retained for ten years; disputes may require limited further retention.
Logs and abuse-prevention data are limited to the period needed for security, diagnosis and event handling under the services used, not for marketing. Browser storage periods are listed in the cookie notice. Cookie expiry does not itself delete requests or attachments previously sent. Contact the controller about deletion or further detail.
Required and optional information
Browsing does not require contact details. Mandatory fields are needed to handle a request or service; without them we may be unable to respond, prepare an estimate or create a ticket. Additional information and attachments are optional unless needed for the specific service.
Your rights
Where applicable, you may request access, rectification, erasure, restriction, portability or object, especially to legitimate-interest processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact the controller; the usual response period is one month, subject to justified extensions permitted by law. Proportionate identity verification may be required to protect confidentiality.
You may complain to the Italian data protection authority or another competent authority. Requests are assessed alongside retention duties and other people’s rights.
