Privacy Policy

Data controller

The data controller is Corporate Hangar S.r.l., Corso di Porta Romana 6, 20122 Milan, Italy, VAT and tax code 13697850967. EVywhere is an initiative of Corporate Hangar S.r.l.

For any matter concerning personal data, write to info@evy-where.com.

What data we process

Data sent through the contact form

When you write to us through the contact form, we process the data you enter:

• first and last name;
• email address;
• phone number with country code, if given;
• company name, if given;
• the content of your message and any personal data you choose to include in it.

Please do not include other people’s personal data in your message unless you are entitled to share it with us.

Browsing data

Like any web server, the infrastructure hosting this site records some technical connection data in its system logs: IP address, date and time of the request, page requested, outcome of the request, browser type and operating system. That data is used solely to keep the site secure and working properly, and is not used to identify or profile individuals.

Cookies and tracking tools

This site installs no cookies, stores no information in your browser and uses no analytics, profiling or advertising tools. Details are in the Cookie Policy.

Why we process it, and on what legal basis

• Answering requests sent through the form and carrying out any pre-contractual steps that follow, such as preparing a quote. Legal basis: the consent you give when submitting the form, and pre-contractual measures taken at your request (Art. 6(1)(a) and (b) GDPR).
• Keeping the site secure and operational through system logs. Legal basis: the controller’s legitimate interest in protecting its service (Art. 6(1)(f) GDPR).
• Defending our rights in case of disputes or misuse, and complying with requests from authorities. Legal basis: the controller’s legitimate interest and legal obligations (Art. 6(1)(c) and (f) GDPR).

We do not use your data to send newsletters or unsolicited commercial messages, and we do not subject it to automated decision-making.

Providing your data

Providing data through the form is optional, but without your name, email address and message we cannot answer your request. Company name and phone number are always optional. Browsing data is collected automatically by the site’s infrastructure.

How we process it

Data is processed electronically, by authorised staff of the controller and only for the purposes stated above. We apply appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. The site is served exclusively over an encrypted connection (HTTPS).

Who it may be shared with

Data is never published and never sold. It may be processed on the controller’s behalf, strictly within the tasks assigned to them, by suppliers acting as data processors:

• Microsoft, which provides the website hosting (Microsoft Azure): privacy statement;
• Formspree, which receives the messages sent through the form and forwards them to our mailbox: privacy policy;
• the controller’s email service provider, through which we receive and handle messages.

Data may also be disclosed to public authorities where required by law. The up-to-date list of data processors is available from the controller on request.

Transfers outside the European Union

The suppliers listed above may also process data outside the European Economic Area. Any such transfer relies on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework in which Microsoft participates, or on the standard contractual clauses approved by the Commission. Further information is available from the controller.

How long we keep it

• Messages received through the form are kept for as long as it takes to handle the request. Where a commercial relationship follows, they are kept for the duration of that relationship and, after it ends, for the periods required by law (in particular tax and civil law).
• Formspree keeps a copy of each message for 30 days, then deletes it.
• System logs are kept for a limited period set by the hosting provider, unless they are needed to establish an offence.

Once these periods expire, the data is deleted or anonymised.

Your rights

At any time you may ask the controller to:

• access your data and receive a copy of it;
• rectify it if it is inaccurate or incomplete;
• erase it, where the conditions set out in the GDPR apply;
• restrict its processing, in the cases set out in the GDPR;
• receive it in a structured, commonly used and machine-readable format, and transmit it to another controller (portability);
• object to processing based on legitimate interest, on grounds relating to your particular situation;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Requests go to info@evy-where.com. They are free of charge and are answered without undue delay, and in any case within one month.

If you believe the processing of your data infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante) or with the supervisory authority of the country where you live or work.

Links to external sites

This site contains plain links to third-party sites, such as the LinkedIn pages of EVywhere and its team. These links send no data to LinkedIn until they are clicked. Once you are on the external page, your data is governed by that site’s policy; for LinkedIn, its privacy policy.

Changes to this notice

This notice may be updated, for example if the site introduces new services. The version in force is always the one published on this page, with the date of the last update shown at the bottom. If a change affects processing based on consent, we will ask for it again where required.