Privacy Policy

Data controller

The controller is Panda Digital Agency, P.IVA 02106540384, Ferrara. For information and to exercise your rights, contact info@pandadigitalagency.it.

When you contact us

The form collects your name, email and message. Company, phone and service of interest are optional. We use these details to handle your enquiry and reply. The legal basis is taking precontractual steps at your request (GDPR Article 6(1)(b)). Required fields are necessary to handle the enquiry; the others may be left empty.

Messages are transmitted through Obelica Forms and the email provider Bird to Panda's inbox. Confirmation means the email service accepted the submission; it does not mean Panda has already read it. The form works when marketing cookies are refused and does not subscribe you to a newsletter. Please avoid unnecessary sensitive information or data about other people.

Website operation and security

The server receives technical details such as your IP address, browser information and HTTP requests to operate and protect the website and prevent abuse. The legal basis is the legitimate interest in a secure, available service (GDPR Article 6(1)(f)). The technical panda_consent cookie stores your preference for 180 days. Fonts are served by this website, without browser requests to Google Fonts.

Meta campaign measurement

With your marketing consent only, Meta Pixel and Conversions API measure visits, service pages viewed, contact clicks, the start of form completion and confirmed form submissions. The legal basis is consent (GDPR Article 6(1)(a)). Events can include page, language, service, button location, time, event ID, IP address, browser information and _fbp or _fbc advertising identifiers. A shared event ID prevents duplicate counting.

Names, email addresses, phone numbers, company names and message contents entered on this website are not sent to Meta. Refusing consent does not prevent browsing or sending an enquiry. Change your choice through Cookie preferences in the footer. Withdrawal stops future events and does not undo processing previously based on consent.

Providers and external services

Panda and the providers needed to run the service may access data within their respective tasks: Obelica for the website and form, DigitalOcean for infrastructure, Bird for email transmission and Meta for consented advertising events. Data may be disclosed to authorities when required by law.

International providers may process data outside the European Economic Area. DigitalOcean's agreement provides for the Data Privacy Framework for transfers covered by its certification, with standard contractual clauses as an alternative safeguard. Bird's agreement provides for standard contractual clauses where required. Meta describes its transfers and safeguards in its privacy policy. Consult the linked documents or ask the controller for information and a copy of the safeguards applicable to your enquiry. Opening WhatsApp, email, Maps, social profiles or another website takes you to an external service with its own terms and privacy policy. The website cannot confirm a message sent in WhatsApp or an email app.

• DigitalOcean: data processing agreement
• Bird: data processing agreement
• Bird: approved subprocessors
• Meta: privacy policy

Retention

Enquiries and correspondence are retained for the time needed to handle the contact and any resulting relationship, considering legal obligations and the protection of rights. Technical data is limited to operational and security needs. Contact the controller for the period applicable to your enquiry. Cookie preferences last 180 days; _fbp and _fbc last up to 90 days and may be renewed during consented use. Providers apply their own retention rules to data already received.

Your rights

You may request access, correction, erasure, restriction and, where applicable, portability; you may object to processing based on legitimate interest and withdraw consent. Contact info@pandadigitalagency.it. You may complain to the Italian Data Protection Authority at www.garanteprivacy.it. The website does not make automated decisions producing legal or similarly significant effects. This policy may change when the services or processing change; its update date appears above.