Data transparency
How Contattami.biz uses personal data and how you can exercise your rights. Last updated 19 September 2026.
Accounts, contact forms and AI assistants are reserved for people aged 14 or older. Before use, we ask for a declaration without collecting a date of birth or identity document. It is retained in this tab’s session storage and sent with requests to the service. It is not identity verification, marketing consent or permission to enter into a purchase contract. Under-18s should review important AI answers with a trusted adult: an AI can make mistakes, and you should not share sensitive data. Public information and privacy-rights requests remain available without this declaration.
If the activity enables this feature and you provide an email address, Contattami may send one confirmation of your request through Resend. This is a service message, not a newsletter subscription. Replies go to the activity’s public email address. The delivery provider receives the recipient address and message content. Delivery status, the request identifier and a fingerprint of the address are recorded to handle errors and prevent duplicate or abusive sends. You can exercise your privacy rights using the contacts in this notice.
For Contattami.biz, accounts and orders, the data controller is FIERE E DINTORNI S.R.L., VAT IT02131170686, registered at Via Tavo 290, 65128 Pescara (PE), Italia. Formal privacy requests can be sent to PEC [email protected]; the Contact page provides further support. When a visitor leaves information on a customer’s profile, that professional or company normally controls the purpose and method of follow-up; Contattami provides the technical infrastructure.
We process account and contact information, profile and card content, order and transaction references, messages sent voluntarily in forms or assistant conversations, and technical data needed for security and operation. Full payment-card data are handled by the payment provider, not by Contattami.
We use data to provide previews, accounts and the service; fulfil orders and legal obligations; forward consent-based contact requests; protect the platform; provide limited profile measurement; and answer the AI request. The applicable legal bases are contract, consent, legal obligation and legitimate interest as appropriate under the GDPR.
Authorised staff and necessary hosting, security, payment, email and AI providers may process data. A profile contact is shared with that profile’s owner. Voice conversations use Cartesia or ElevenLabs, depending on the profile: audio, transcripts and information needed to answer are processed by the voice service and its AI models. The transcript is available to the profile owner. Where providers process data outside the EEA, the transfer must rely on an adequacy decision or GDPR safeguards such as standard contractual clauses. We do not sell personal data.
Account and profile data are retained while the service is active and as needed for closure, disputes and security. Order and invoice data follow applicable administrative and tax obligations. Contact requests and conversations are retained while useful for the relationship or until a valid request requires otherwise. Technical logs are retained for a proportionate security and diagnostic period.
The service may use technical cookies or equivalent tools for session, authentication, security and preferences. Public-profile events do not store a persistent browser identifier and are not used to follow people across sites. There are currently no advertising cookies; see /en/cookie for the tools and their duration; any non-essential analytics or marketing tool requires the relevant notice and choice where required.
You can request access, correction, deletion, restriction, portability or object where the GDPR provides these rights. You may withdraw consent at any time without affecting prior processing. Write to PEC [email protected] or use the Contact page. You may also lodge a complaint with the competent data-protection authority.
This notice may change when functions, providers or legal requirements change. The published version carries its latest update date, and material changes are communicated in the service when needed.
You can request deletion of your account and associated personal data without signing in. Legal notices are processed to handle your request and fulfil applicable obligations, not for marketing. Your acknowledgement confirms receipt, not completed deletion. We will explain identity checks and any required retention when handling your request.
Connecting Google Calendar is optional and requires your authorisation with Google. You do not give Contattami your Google password. Google asks for access to your verified email address, your calendar list and events in calendars accessible to your account. Contattami uses your email to identify the account and lists writable calendars so you can choose which calendar to use.
In the calendar you select, we retrieve appointments to show their title, dates, times, location and all-day status in your private workspace. When you submit a new appointment, we send its title, times and notes to Google. This integration does not publish appointments on your mini-site, send them to the AI assistant, or provide event deletion or attendee invitations. These operations provide the Calendar feature you request.
We store encrypted authorisation tokens and connection settings, including the selected account and calendar. Events are retrieved from Google for display; this integration does not keep a permanent copy in Contattami’s internal event database. Data pass through Google and the technical infrastructure needed to provide the service. We do not sell these data or use them for advertising or training general AI models.
You can disconnect Google Calendar in Settings: we remove the connection and tokens from Contattami’s active configuration. Events already created remain in Google. To revoke the Google authorisation as well, remove Contattami from your Google Account connections. The retention and privacy-rights sections of this notice also apply; contact the data controller for deletion requests, including questions about technical backups.
Contattami’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
