The Data Controller is Twipping S.r.l.s., Via Campagnola 68, 31020 Villorba (TV), Italy.
VAT number: 04900150261
Email: info@twipping.com
Phone: +39 0422 92172
The site collects the following categories of personal data:
Browsing and security — The servers receive IP address, browser information, requested resource and time. Technical logs may contain personal data: they are not all anonymous. They serve to deliver the site, prevent abuse and diagnose problems. If you access a restricted area, operational events may be associated with your account.
Technical cookies — Cookies strictly necessary for the operation of the site and of the services requested, including remote assistance when activated. Names, purposes and durations are described in the Cookie Policy.
Requests and demos — We collect the data you enter in the form: name, email, phone if provided, message and, depending on the form, company, website, sector, service requested, company size, budget and indicative timing. We also keep the origin of the request, date, IP address, browser and the choices you expressed. Mandatory fields are indicated: without the necessary data we cannot handle the request. Please avoid irrelevant sensitive data.
Personal data is processed for the following purposes:
Provision of services — Replying to requests sent through the contact form (legal basis: performance of pre-contractual measures, Article 6(1)(b) GDPR).
General requests and collaboration — The form collects consent to process the data in order to reply to the request (Article 6(1)(a) GDPR). This consent is not equivalent to subscribing to commercial communications or to accepting a contract. For quotes and pre-contractual measures requested by the data subject, Article 6(1)(b) GDPR applies.
Commercial updates by email — Only with the optional and separate choice in the form (Article 6(1)(a) GDPR). We record the version and fingerprint of the text shown, the date and the origin of the consent. You can send the request without subscribing and withdraw your choice from the link in the messages or by writing to info@twipping.com. Withdrawal does not affect the processing carried out previously.
Legal obligations — Compliance with obligations laid down by the legislation in force (legal basis: legal obligation, Article 6(1)(c) GDPR).
Security and internal statistics — The legitimate interest is to ensure the availability and security of the site and to understand how it is used (Article 6(1)(f) GDPR). Automatic anti-spam checks may hold a request for verification without forwarding the emails; you can contact us directly if you receive no reply.
Remote assistance on request — When you activate inspection and share the code with support, the authorised operator can read the page content, the structure of the controls, errors and information on network requests; depending on the mode enabled, they can also guide permitted interactions. The system applies filters to obscure form values and recognisable personal data, which do not guarantee the absence of all personal data. Avoid showing unnecessary information. You can end access with the End command in the panel. For diagnosis and security, the operator, session, page and commands executed are logged. Closing access does not automatically delete these logs or the evidence already saved by support.
Optional dictation — If you activate the microphone, the browser uses its own speech recognition service, which may process the audio on its provider's servers. You can always use the keyboard. The transcribed text enters the form and is sent to Twipping with the request; activating the microphone requires your choice and the browser's permissions.
E-commerce and ADA — The B2B, B2C and Smart Mini Shop pages of this site present services and collect demo requests: they are not a checkout and do not collect card data. The ADA suggestions in the form are guidance texts; they do not by themselves send the content of the form to a generative model. Separate services or shops have their own notices.
Personal data may be disclosed to:
Authorised personnel and technical providers — Requests are recorded on the site and transferred to the Twipping management system on the OASI/Nolvio platform for commercial follow-up. Notification emails to staff and confirmation emails to the requester are provided for. Hosting, storage, content delivery and email providers process the data necessary for their respective services.
Amazon Web Services (AWS) — site hosting (eu-central-1 region, Frankfurt) and email sending service (AWS SES, eu-west-1 region, Ireland), as data processor.
Content and typefaces — The site uses resources from its own domain and images distributed through media.oasi.io. Typefaces are requested through the site's domain; the infrastructure may use content delivery services. These technical requests entail the transmission of the IP address to the service that receives them.
Competent authorities, where provided for by law.
Advertising and measurement — The current configuration has discontinued the sending of advertising data to Meta and Google and the measurement of browsing linked to the contact's name. An old cookie or the choice of commercial emails does not reactivate these purposes. Internal statistical measurements of delivery and page usage remain, as described in the Cookie Policy.
Personal data is processed mainly within the European Union and the European Economic Area (EEA). Any transfers to third countries take place exclusively where adequate safeguards are in place pursuant to Articles 45-46 GDPR (adequacy decisions or standard contractual clauses).
Personal data is kept for the time strictly necessary for the purposes for which it was collected:
Contact data — For the time necessary to handle the request and for a maximum of 24 months from the end of the relationship, unless required by law.
Browsing data — The retention limit provided for is 90 days from collection, except for retention necessary for specific security incidents or legal obligations. Web access logs follow a shorter ordinary rotation.
Tax/accounting data — Kept for 10 years as provided for by the legislation in force. Commercial communications — Until consent is withdrawn; we keep the information necessary to document the choice and respect the objection, without continuing promotional mailings.
Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:
Access — Obtain confirmation of whether processing exists and access their personal data.
Rectification — Obtain the correction of inaccurate data or the completion of incomplete data.
Erasure — Obtain the erasure of their personal data in the cases provided for by law.
Restriction and portability — Request the restriction of processing and, where applicable, receive the data in a structured format and transfer it to another controller.
Objection and withdrawal — In the cases provided for, you may object to processing based on legitimate interest; you may always withdraw consent and object to direct marketing.
Complaint — Lodge a complaint with the Garante per la Protezione dei Dati Personali, the Italian Data Protection Authority (www.garanteprivacy.it).
To exercise the rights listed above or for any information on the processing of personal data, you can contact the Controller at the email address: info@twipping.com
This notice may be subject to updates. You are advised to consult this page periodically to check for any changes.
Update of the processing described: 3 November 2026
Controller, legal bases, recipients and retention periods remain readable before the footer.
The policy does not merely describe: it explains how to exercise your rights and where to write to do so.
The document's freshness and the privacy contact close the page with a signal of reliability, not with dead text.