Privacy Policy (GDPR Compliance) | Atena Solution
Contenuti dell'articolo
Privacy Policy & Personal Data Processing Notice
Information provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) for users who interact with the digital services of Atena Solution by Francesco Grillo accessible via atenasolution.com and shop.atenasolution.it.
1. Data Controller
The Data Controller is Francesco Grillo, sole proprietor of Atena Solution di Francesco Grillo:
Registered address: Via Bruno Buozzi 84, 06030 Bastardo di Giano dell’Umbria (PG), Italy
VAT Number: IT03657910547 — Certified Email (PEC): atenasolution@pec.it
Contact email: info@atenasolution.it • commerciale@atenasolution.it
2. Types of Personal Data Collected
Depending on user interaction with the websites, we collect:
- Navigation Data: IP addresses, browser specifications, operating systems, and page request timestamps collected automatically for network security and protocol compliance.
- Contact Information: Full name, company name, email address, and telephone number provided voluntarily through contact forms or quotation requests.
- Transactional & Billing Data: Fiscal code, VAT number, billing address, and transaction identifiers collected when purchasing hosting or software on shop.atenasolution.it. Payment credentials (credit cards) are processed directly by certified payment gateways (Stripe / PayPal) and are never stored on our servers.
3. Purpose and Legal Basis of Processing
Personal data is processed under the following lawful bases (Art. 6 GDPR):
- Performance of a Contract (Art. 6.1.b): To process orders, deliver cloud hosting, issue software licenses, and provide technical assistance.
- Legal Obligations (Art. 6.1.c): Compliance with tax, accounting, and consumer protection laws.
- Legitimate Interests (Art. 6.1.f): System security, fraud prevention, server optimization, and defense of legal claims.
- Explicit Consent (Art. 6.1.a): Non-essential tracking, web analytics, and marketing cookies.
4. Data Retention Period
Technical logs are retained for up to 90 days for cybersecurity purposes. Contractual, billing, and accounting data is retained for 10 years in compliance with statutory fiscal requirements.
5. Recipients & Data Processors
Data may be processed by trusted technical partners strictly acting as Data Processors under Article 28 GDPR (e.g., Hetzner Online GmbH for server hosting, Stripe Inc. for payments, and registered accounting consultants).
6. Rights of Data Subjects
Under Articles 15–22 GDPR, you have the right to request access to, rectification, erasure, restriction, and portability of your personal data, as well as the right to object to processing. Requests can be sent to info@atenasolution.it. You also have the right to lodge a complaint with your competent supervisory authority (in Italy: Garante per la Protezione dei Dati Personali).

