Privacy Policy

Introduction

This Privacy Policy describes how ERMES SRLS (“we”, “us”) processes personal data in connection with the website ermes-srls.com and related communications. We process data in line with applicable law, including Regulation (EU) 2016/679 (“GDPR”) where it applies.

Data controller

The data controller is ERMES SRLS, with registered office at Via Filippo Turati, 72, 64021 Giulianova (TE), Italy. You can contact us at info@ermes-srls.com.

Categories of data we process

Depending on how you interact with us, we may process:

• Contact and enquiry data — such as name, email address, company, and the content of messages you send via email or forms.
• Technical and usage data — such as IP address, browser type, device type, general location (country/region), pages viewed, and timestamps, collected via server logs, analytics, and similar tools where enabled.
• Cookies and similar technologies — small files or identifiers stored on your device where you have consented or where strictly necessary for the service.

Purposes and legal bases

We use personal data to:

• Respond to enquiries and manage our relationship with you (GDPR Art. 6(1)(b) — steps prior to or performance of a contract, or Art. 6(1)(f) — legitimate interests in communicating with prospects and clients).
• Operate, secure, and improve the website, analyse aggregated traffic, and prevent abuse (Art. 6(1)(f) — legitimate interests in security and service improvement).
• Comply with legal obligations (Art. 6(1)(c)).
• Where required, send marketing communications only with your consent (Art. 6(1)(a)).

Cookies

We use cookies and similar technologies only as described in our cookie preferences (where available) and this policy. You can control non-essential cookies through your browser settings and any on-site banner or tool we provide. Essential cookies may be necessary for security or basic site function.

Retention

We keep personal data only for as long as needed for the purposes above, including legal, accounting, or dispute requirements. Technical logs are typically retained for a limited period unless a longer period is required for security or compliance.

Recipients and processors

We may share data with trusted providers that host the site, deliver email, or provide analytics, strictly under contracts that require appropriate safeguards. We do not sell your personal data.

International transfers

If data is transferred outside the European Economic Area, we rely on appropriate safeguards recognised under GDPR (such as Standard Contractual Clauses) where required.

Your rights

Where GDPR applies, you may have the right to access, rectify, erase, restrict processing, object, data portability, and to withdraw consent at any time where processing is consent-based. You may lodge a complaint with a supervisory authority. In Italy, this is the Garante per la protezione dei dati personali (garanteprivacy.it).

Security

We implement appropriate technical and organisational measures to protect personal data. No method of transmission over the Internet is completely secure, and we strive to follow good industry practice.

Children

This site is not directed at children under 16. We do not knowingly collect personal data from children.

Changes

We may update this Privacy Policy from time to time. The revised version will be published on this page.

Contact

For privacy-related requests, contact us at info@ermes-srls.com or write to the postal address above.