Privacy Policy

What This Notice Covers

This notice concerns personal data collected through this website and when registering an account: contact forms, the newsletter, the virtual assistant, partner programme applications and company registration.

It does not cover the data that a client company enters into the RelAI CRM platform (for example the data of its own customers or contacts). In respect of that data the client company is the controller and Spazio Dev S.r.l. acts as processor, under the data processing agreement required by Article 28 GDPR, signed when the service is activated.

Data Controller

The controller of the personal data collected through this website is Spazio Dev S.r.l., registered office at Via Don Carlo Barison 34, 35019 Tombolo (PD), VAT and tax code 05569600280, REA PD 476671, certified email spaziodev@pec.it. For any request relating to the processing of data you can write to info@relaicrm.com or to the certified email address above.

No Data Protection Officer (DPO) has been appointed. For any request concerning the protection of personal data you may use the controller's contact details above.

Data Collected and Purposes

Contact form. We collect the data voluntarily provided in the contact form (first and last name, business, email, optional telephone number, sector, message), processed solely to respond to the request (legal basis: pre-contractual measures at the data subject's request, Article 6(1)(b) GDPR).

Newsletter. The email address provided when subscribing to the newsletter is processed to send informational and promotional communications about RelAI CRM (legal basis: consent of the data subject, which may be withdrawn at any time via the link in every communication or by writing to us).

Registration of a new company. To activate an account we collect the business details (company name, address, city, VAT number, tax code) and the details of the person registering as administrator (first name, last name, telephone, email address, password). This data is processed to create and manage the account and the contractual relationship with RelAI CRM (legal basis: performance of a contract to which the data subject is party, or pre-contractual measures taken at their request, Article 6(1)(b) GDPR).

Virtual assistant (chatbot). If the user chooses to leave their contact details through the website's virtual assistant, we collect the email address and, optionally, the telephone number provided, on the same terms and for the same purpose as the contact form: to be contacted by one of our staff (legal basis: pre-contractual measures at the data subject's request, Article 6(1)(b) GDPR).

Partner programme application. Anyone applying as a partner through the form on the “Become a partner” page provides first and last name, email address, telephone number, company name if any, the type of collaboration proposed, the size of their client base and an optional message. This data is processed to assess the application and to contact the applicant (legal basis: pre-contractual measures at the data subject's request, Article 6(1)(b) GDPR).

The same form contains an optional checkbox, not ticked by default, allowing you to consent to receiving informational and promotional communications about RelAI CRM. This consent is separate from the one needed for the application, does not affect its outcome in any way and may be withdrawn at any time via the link in every communication or by writing to info@relaicrm.com (legal basis: consent of the data subject, Article 6(1)(a) GDPR).

Whether Providing Data Is Required

Providing the data requested by the contact form, the chatbot, the partner application form and the registration form is optional but necessary: without it we cannot answer the request, assess the application or complete the account registration. Subscribing to the newsletter and the consent to promotional communications in the partner form are entirely optional and do not affect the use of any other feature of the website.

reCAPTCHA (Google)

On the new company registration page we use Google reCAPTCHA to protect the form from spam, abuse and automated submissions. To this end reCAPTCHA automatically analyses certain technical data and signals relating to the interaction with the website in order to carry out a risk assessment, without requiring any explicit action from the user.

Within this service Google processes the data on behalf of Spazio Dev S.r.l. as a processor, under the terms applicable to the service and the related data processing agreement.

The legal basis for the processing is the controller's legitimate interest in the security of the service and in preventing abuse and automated access (Article 6(1)(f) GDPR).

Data Retention

Data from contact requests, the chatbot and partner applications is kept for as long as needed to handle the request and, thereafter, for a maximum of 2 years, in order to document the exchanges that took place and to protect the controller's rights in the event of a dispute (legal basis: legitimate interest of the controller, Article 6(1)(f) GDPR).

Newsletter subscription data and the data linked to the promotional consent in the partner form are kept until the data subject withdraws consent or until the service ceases, subject to periodic review of whether the processing is still necessary.

The data needed to manage the account is kept for the entire duration of the contractual relationship. When the relationship ends, data that is no longer necessary is deleted or anonymised, except for data that must be retained to comply with legal obligations or to protect the controller's rights. Accounting and tax documentation subject to statutory retention obligations is kept for 10 years, save for any longer periods required by applicable law.

Disclosure and Transfer of Data to Third Parties

Data is neither sold nor transferred to third parties for commercial purposes. It may be processed by technical suppliers acting as processors under Article 28 GDPR (for example the hosting provider), within the limits of the purposes set out above. On the registration page, certain technical data is also shared with Google LLC through reCAPTCHA, as described in the previous section.

Security Measures

We adopt appropriate technical and organisational measures to protect data from unauthorised access, loss or destruction (including encrypted HTTPS connections, access control to systems and hashed passwords), proportionate to the specific risk of the processing described in this notice.

Rights of the Data Subject

Under Articles 15 to 22 GDPR, the data subject may at any time exercise the rights of access, rectification, erasure, restriction, portability and objection by writing to info@relaicrm.com. It is also possible to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Where processing is based on consent, that consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Updates to This Notice

This notice may be updated over time, for example following regulatory changes or the introduction of new website features. The date of the latest update is shown at the top of the page.