Skip to content
Advace

Cookies

We use technical cookies. Only with your consent do we measure visits in aggregate form and load videos from YouTube, which uses its own cookies.

You can choose category by category under “Customise”, consent to videos by pressing Play, and change your mind at any time from “Cookie preferences” at the bottom of the page. Cookie policy

Documents

Privacy policy

Updated on 19 October 2026

This notice explains which personal data the advace.it website collects, why it collects it and which rights you have, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018.

Data controller

Advace di Loris Iovene, Via San Donato 24, Bologna, Italy. VAT 04107861207. For any privacy request you can write to info@advace.it.

Which data we process

  • Browsing data. The servers that host the website automatically record some technical data with every request, such as IP address, browser type, page requested, date and time. They are needed to run the website and protect it from abuse.

  • Data you send us. If you fill in the contact form we collect your name, email, company (optional), project type, indicative budget, the text of your message and the date it was sent. The same applies if you email us. To block repeated submissions we keep, for 24 hours, a counter linked to your IP address, stored only in pseudonymised form (hash with a secret key).

  • Statistics. Only if you consent (the "Statistics" category) do we use Vercel Web Analytics and Vercel Speed Insights, which measure visits, page views and the website's speed in aggregate form. They use no cookies; to tell visits apart Vercel computes a temporary identifier that it discards within 24 hours.

  • YouTube videos. Videos are hosted on YouTube and load only when you press Play or if you have accepted Multimedia content. At that moment your browser connects to Google's servers, which receive your IP address and may use cookies and similar technologies.

  • Private area. For the people who manage the website's content we process account data (name, email, encrypted password) and, for session security, the IP address and browser used to log in.

Why we process it and on what basis

  • Replying to your requests and preparing a quote: pre-contractual measures at your request (Art. 6.1.b GDPR).

  • Protecting the website from spam, abuse and unauthorised access: our legitimate interest in the security of the website and data (Art. 6.1.f GDPR).

  • Aggregate statistics on website use: your consent (Art. 6.1.a GDPR and Art. 122 Privacy Code), which you can withdraw at any time from "Cookie preferences".

  • Showing YouTube videos: your consent (Art. 6.1.a GDPR and Art. 122 Privacy Code), given by pressing Play or through the cookie banner, which you can withdraw at any time.

  • Running the private area: the relationship with the people who work in it and our legitimate interest in the website's security (Art. 6.1.b and 6.1.f GDPR).

  • Legal obligations, for example tax obligations, if the request leads to a working relationship (Art. 6.1.c GDPR).

Do you have to provide the data?

No. Without the data requested by the form, however, we cannot reply to you. Statistics and videos are switched on only if you choose so.

How long we keep it

  • Contact form messages: 24 months from receipt, after which we delete them automatically from the website; the same rule applies to the notification emails in our mailbox. If the request leads to a contractual relationship we keep documents for the period required by law (up to 10 years for accounting records).

  • Counter against repeated submissions: 24 hours.

  • Browsing data: for as long as strictly necessary for security, normally no longer than 30 days.

  • Statistics: we keep only aggregate data; the temporary visit identifier is discarded within 24 hours.

  • Private area sessions: up to 14 days from the last login.

Who can see the data

  • People authorised by Advace: the controller and the collaborators who access the private area, bound by confidentiality.

  • Advisers, such as our accountant, only if the request leads to a working relationship and for legal obligations.

  • Google: for the sole collection and transmission of data to Google when you start a video we are joint controllers with Google Ireland Limited; any further processing is carried out by Google as an independent controller, under its privacy policy.

The providers that help us run the website are appointed as data processors (Art. 28 GDPR):

  • Vercel Inc. (USA): website hosting, image and video storage, statistics;

  • Neon (USA): database, with the data stored on servers in Frankfurt (Germany);

  • Resend (USA): sending contact form emails;

  • the provider of the advace.it email service, which receives the form notifications.

We do not sell your data or share it with third parties for marketing purposes.

Transfers outside the European Union

Vercel, Neon, Resend and Google are based in the United States or may process data there. Transfers rely on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) for the providers that take part in it, or on the standard contractual clauses approved by the Commission (Decision 2021/914) in their data processing agreements. You can ask us for a copy of these safeguards by writing to info@advace.it.

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing or receive it in a machine-readable format (Arts. 15-20 GDPR). You can withdraw any consent you gave at any time from "Cookie preferences" at the bottom of every page, without affecting processing already carried out. Write to info@advace.it: we reply within one month.

Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21 GDPR).

If you believe the processing breaks the law you can lodge a complaint with the Italian Data Protection Authority.

Automated decisions

We do not take decisions based solely on automated processing, including profiling (Art. 22 GDPR).

Minors

The website is not aimed at children under 14 and we do not knowingly collect their data.

Changes

We may update this notice: the date at the top of the page shows the latest change. For cookies see the cookie policy.