Privacy Policy
This notice explains how SPI Società Progettazioni Integrali S.r.l. processes the personal data of people who visit this website, contact us about a project or apply for a position. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Our website is designed to collect as little data as possible: it does not use analytics, advertising or profiling cookies, and it does not track your browsing.
1. Data controller
SPI Società Progettazioni Integrali S.r.l.
Via Maurizio Quadrio, 18 – 20154 Milan, Italy
E-mail: info@spi-it.com · Tel. +39 02 29 00 28 66
For any question about your personal data, or to exercise your rights, write to info@spi-it.com with “Privacy” in the subject line.
2. Summary
| Activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Browsing the website | Technical data (IP address, browser, pages requested, date and time) | Operating the website and keeping it secure — legitimate interest (Art. 6(1)(f) GDPR) | Server logs for the short period needed for security, then deleted |
| Project and business enquiries (contact form or e-mail) | Name, company, e-mail, phone, service of interest, message | Answering your request and managing any subsequent proposal — pre-contractual measures at your request (Art. 6(1)(b)) and our legitimate interest in managing business relationships (Art. 6(1)(f)) | 24 months from the last contact; longer only if a contract follows (see section 5) |
| Job applications (Careers form or e-mail) | Name, contact details, position applied for, LinkedIn or portfolio link, cover message and CV (PDF) | Assessing your application — pre-contractual measures (Art. 6(1)(b)); spontaneous applications under Art. 111-bis of Legislative Decree 196/2003 | 24 months, to consider you for future openings, unless you ask us to delete it earlier |
| Map search (“Search by address”, “Near me”) | The address you type; your position only if you allow it | Showing the projects closest to you — your request and our legitimate interest | Not stored by us (see section 4) |
3. The data we process and why
3.1 Browsing data
The systems that run the website automatically record some technical data as part of normal internet communication, such as IP address, browser type, operating system, the pages requested and the time of the request. We use this data only to operate the website, to diagnose technical problems and to protect it from abuse. It is not used to identify you, except where needed to investigate a security incident or at the request of the authorities.
3.2 Project and business enquiries
When you write to us through the contact form or by e-mail, we use the details you provide to reply, to understand the scope of your project (for example audit and consultancy, project and cost management, integrated design, or health and safety services) and, if you wish, to prepare a proposal. Fields marked with an asterisk are required to answer you; the others are optional. Please do not include in your message information that is not needed for your request.
A copy of each request sent through the website is kept in the website’s secure administration area, so that no request is lost if an e-mail is not delivered. These copies are deleted automatically after 24 months.
3.3 Job applications
We use the information in your application only to assess your profile for the role you applied for or, for spontaneous applications, for roles consistent with your experience. You send us your CV through the Careers form as a PDF file: it is attached to the e-mail we receive and is deleted from the website server as soon as the e-mail has been sent, so it is never published or kept on the website. A copy of the other details of your application (without the CV) is kept in the website’s secure administration area and deleted automatically after 24 months. After you apply you receive an automatic confirmation by e-mail. Please do not include in your CV special categories of data (for example health data, religious or political beliefs) unless required by law; if you do, they will be processed only where strictly necessary. Including a photo is optional.
3.4 Map search
On the project map you can search for an address or use “Near me” to see the projects closest to you:
- Search by address sends the text you type to the geocoding service of the OpenStreetMap Foundation (Nominatim), which returns matching places. We do not store your searches.
- Near me uses the location features of your browser, which always asks for your permission first. Your position is used only inside your browser to sort the projects by distance: it is not sent to us or stored.
3.5 The checkbox at the end of our forms
Before sending a form you are asked to confirm that you have read this notice. This is not a request for consent: your data is processed on the legal bases described above, only to handle your request or application. Fields marked with an asterisk are needed for that purpose; the others are optional.
4. Third-party services used by the website
To display the website, your browser connects to some external providers that deliver icons, scripts and map images. The fonts are hosted on our own website. These providers receive your IP address and technical browser data as part of the connection; they do not receive any information you type into our forms, and they set no cookies through our website.
- Icons: Iconify
- Code libraries: cdnjs (Cloudflare, Inc.) and unpkg
- Map images: Esri (ArcGIS basemaps), with data © OpenStreetMap contributors
- Address search: OpenStreetMap Foundation (Nominatim), only when you use it
Links to our LinkedIn page take you to LinkedIn’s own website, which applies its own privacy policy. The website does not embed LinkedIn content or tracking.
5. Retention
We keep personal data only for as long as needed for the purposes described above:
- enquiries: 24 months from the last contact;
- job applications: 24 months from receipt;
- if an enquiry leads to a contract, the related data and documents are kept for the period required by Italian civil and tax law (generally 10 years);
- browsing data: for the short period needed for security purposes.
After these periods the data is deleted or made anonymous.
6. Who can access your data
Your data is accessed only by SPI staff who need it to handle your request, and by service providers acting on our behalf as data processors under Article 28 GDPR, such as the company that develops and hosts the website and our e-mail service provider. We do not sell your data and we do not disclose it to third parties for marketing purposes. Data may be disclosed to public authorities where required by law.
7. Transfers outside the European Economic Area
Some of the providers listed in section 4 are based, or have servers, outside the EEA, in particular in the United States. Where this happens, transfers take place on the basis of an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for certified companies) or of the Standard Contractual Clauses approved by the Commission (Art. 45 and 46 GDPR).
8. Cookies and similar technologies
This website uses only technical storage strictly necessary for it to work, for example to remember whether you prefer the list or the grid view of projects, or to run the transition between pages. This information is stored in your browser, is not used to track you and is not shared with third parties.
We do not use analytics, advertising or profiling cookies. For this reason, in line with the guidelines of the Italian Data Protection Authority on cookies (10 June 2021), no consent banner is required. If we introduce cookies that require your consent in the future, we will ask for it before using them and update this notice.
9. Your rights
Under Articles 15 to 22 GDPR you can, at any time and free of charge:
- access your personal data and receive a copy;
- ask us to correct or complete it;
- ask us to delete it, or to restrict its processing;
- object to processing based on our legitimate interest;
- receive the data you provided in a structured, commonly used format (data portability);
- withdraw any consent you have given, without affecting the processing carried out before.
To exercise your rights, write to info@spi-it.com. We will reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the EU country where you live or work.
10. Security and automated decisions
We protect your data with appropriate technical and organisational measures, including an encrypted (HTTPS) connection, restricted access to the administration area and protection of the forms against automated spam. We do not take decisions based solely on automated processing, including profiling.
11. Changes to this notice
We may update this notice to reflect changes to the website or to the law. The current version is always available on this page, with the date of the last update shown at the top.