Privacy Policy

Yukitec ("we", "us", "our") is the data controller for personal data collected through the website www.yukitec.com. We are a company registered and operating in Italy.

Contact: privacy@yukitec.com

Data Protection Officer (DPO): As a small enterprise, Yukitec is not required to appoint a DPO under Article 37 GDPR. Privacy-related queries can be directed to the contact above.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with:

• Regulation (EU) 2016/679 (GDPR)
• Italian Legislative Decree no. 196/2003 (Privacy Code), as amended by D.Lgs. 101/2018
• Directive 2002/58/EC (ePrivacy Directive) as implemented in Italy
• Guidelines and decisions of the Italian Data Protection Authority (Garante)

We process personal data in accordance with the principles in Art. 5 GDPR: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

3.1 Contact Form

When you submit our contact form, we collect: full name, email address, content of your message.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — to respond to your enquiry. You may object to this processing at any time.

Retention: 24 months from your last interaction.

3.2 Analytics Data (Google Analytics 4)

Subject to your consent, GA4 collects: anonymised IP, pages visited, time on page, browser, device, OS, referring source, geographic region, session and engagement metrics.

Legal basis: Consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie banner.

Retention: 14 months in GA4; raw event data deleted after 2 months. IP anonymisation is enabled.

3.3 Technical / Server Logs

Our hosting provider collects server access logs (IP, timestamps, HTTP request data) for security and performance. Not used for profiling.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Retention: max 30 days.

3.4 Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling under Article 22 GDPR.

3.5 Children's Data

Our website is not directed at children. The minimum age for digital consent in Italy is 14 (D.Lgs. 196/2003, Art. 2-quinquies). We do not knowingly collect data from persons under 14.

We engage the following third-party data processors under written agreements (Art. 28 GDPR):

• Google LLC — Google Analytics 4 (USA). Safeguards: SCCs approved by Decision 2021/914. Privacy: policies.google.com/privacy
• Web Hosting Provider — hosting and infrastructure, DPA in place.

We do not sell, rent, or trade personal data for marketing purposes. We disclose data to authorities only when required by law.

GA4 transfers data to servers in the United States under:

• Standard Contractual Clauses (SCCs) under Implementing Decision 2021/914
• Google's compliance with the EU-US Data Privacy Framework (where applicable)

For more information: privacy@yukitec.com.

We implement appropriate technical and organisational measures (Art. 32 GDPR):

• HTTPS/TLS encryption
• Access controls for contact form submissions
• Regular review of third-party processor security
• Data minimisation

In the event of a personal data breach posing risk to your rights, we will notify the Garante within 72 hours (Art. 33 GDPR) and, where required, affected individuals (Art. 34 GDPR).

Under GDPR you have the rights to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), object (Art. 21), withdraw consent (Art. 7(3)), and not be subject to automated decisions (Art. 22).

To exercise any right: privacy@yukitec.com. We respond within 30 days (extendable by 60 for complex requests).

We use cookies and similar technologies. For details, please see our Cookie Policy.

Our website may contain links to external websites. We are not responsible for their privacy practices and encourage you to review their policies before submitting personal data.

We may update this Privacy Policy from time to time. Where changes are material, we will notify you via a prominent notice on the website. Previous versions available on request at privacy@yukitec.com.