Privacy and cookie policy
This is an English translation of our privacy and cookie notice, provided for convenience. The Italian version is the legally binding text and prevails in case of any discrepancy.
This notice explains which personal data SEO S.R.L. processes when you visit seo.srl, ask us for an audit, write to us or become a client: why it processes them, how long it keeps them, who it shares them with and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018) and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools of 10 June 2021.
Data controller
The data controller is SEO S.R.L., Via Roma 163, 73021 Calimera (LE), Italy, VAT number and tax code 05151910758.
- Email: info@seo.srl
- Certified email (PEC): seo_srl@pec.it
- Phone: +39 320 486 4478
What data we process, why and for how long
We only process the data needed for the purposes listed in the table. The website has no restricted areas, creates no accounts and does not store form data in a database: requests reach us by email. The only exception is newsletter contacts, which we keep in the account of our provider Resend only after you confirm.
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Browsing and technical logs | IP address, date and time of the request, requested page, referring page, browser and operating system type, outcome of the request | Running the website, protecting it from abuse and attacks, limiting repeated form submissions, finding errors | Legitimate interest in the security and operation of the website (Art. 6(1)(f) GDPR) | For the period set by the hosting providers for the security and operation of their platform; the logs we access, no longer than 12 months, unless there is a dispute |
| Aggregated statistics of the hosting platform | Page visited, referring page or website, device type, country derived from the browser's time zone, visit duration | Overall traffic counts, without profiling or recognizing the same person across different visits | Legitimate interest in knowing the website's overall traffic (Art. 6(1)(f) GDPR) | According to the provider's retention periods (Lovable), which also uses these data for its own platform |
| Free SEO audit request | Name, email, website address, page from which you send the request | Preparing and sending you the audit and replying to you | Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) | 24 months from the last contact, if you do not become a client |
| Contact form and direct contacts (email, PEC, phone, WhatsApp, LinkedIn) | Name, email, website address (optional), message text, referring page; phone number and content of the conversation if you call or write to us | Answering your questions and, if you ask, preparing a quote | Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) | 24 months from the last contact, if you do not become a client |
| Automatic SEO analysis | The website address you enter; IP address used only to limit repeated analyses | Analysing the page you indicate and showing you the result | Performance of your request (Art. 6(1)(b) GDPR) | The result is not saved; the IP address stays only in the server's temporary memory, without being saved, in addition to the technical logs above |
| Newsletter | Email address; date and time of the request and of the confirmation, the page of the website you signed up from and the version of the consent text you accepted (as proof of consent) | Sending you the monthly newsletter with news about Google and AI search and, at times, information about our services. Before you confirm, we send you a single email to verify the address | Consent (Art. 6(1)(a) GDPR), given by ticking the box and confirming through the link received by email | Until you withdraw your consent: you can unsubscribe with one click from the link in every email. If you do not confirm within 48 hours we do not keep the address; after you unsubscribe we keep the address marked as unsubscribed for 5 years, together with the record of consent, so that we do not write to you again and can prove consent in case of a dispute; then we delete it. Our newsletter emails contain no open-tracking pixels |
| Clients | Identification and tax data, contact details of contact persons, communications, invoicing and payment data | Performing the contract, invoicing, complying with accounting and tax obligations, protecting our rights | Contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR) | For the term of the contract; accounting and tax documents for 10 years (Art. 2220 of the Italian Civil Code) |
| Visit statistics (Google Analytics 4), when active | Identifiers of the statistics cookies, pages visited, actions on the site (form submissions, clicks on phone, email and WhatsApp, page scrolling), technical data about the device and browser, approximate geographic area | Understanding which pages are useful and improving the website, with aggregated data | Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time | 14 months for event data in Google Analytics; for cookies, see the cookie table |
| Cookie preference | Your choice (accept or reject statistics cookies) and its date | Respecting and remembering your choice | Strictly necessary technical tool (Art. 122(1) of the Italian Privacy Code): no consent required | In your browser, until you delete it or change your choice |
If we receive your data from others, for example from the company you work for when it names you as the contact person for a project, we only process your contact details and role, for the purposes and periods indicated for clients.
When we work on our clients' websites and accounts (for example analytics or campaigns), we process any personal data on behalf of the client, as a processor under Art. 28 GDPR and according to our agreements with the client. For those data the client is the controller and the client's privacy notice applies.
Who we share data with
We do not sell or disclose data to the public. Only for the purposes indicated, data may be processed by these recipients:
- Lovable Labs Incorporated (United States), for website hosting and infrastructure, with Cloudflare, Inc. (United States) for the content delivery network and bot protection;
- Plus Five Five, Inc. (Resend, United States), which sends form requests to us by email and sends the newsletter emails, and stores the subscribed contacts, as data processor (Art. 28 GDPR);
- the provider of the info@seo.srl mailbox, where requests and messages arrive;
- Google Ireland Limited, for Google Analytics 4 statistics, only if you have given your consent;
- our accountant, for client data needed for accounting and tax obligations;
- public and judicial authorities, when required by law.
Providers process data as processors (Art. 28 GDPR), under a contract that obliges them to use the data only according to our instructions. Lovable and Cloudflare also process logs and technical data as independent controllers, for the security and operation of their own services, according to their privacy notices. The accountant and the authorities process data as independent controllers. The up-to-date list of processors is available on request.
Transfers outside the European Union
Google Ireland Limited may transfer data to Google LLC in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, which the European Commission recognized as adequate by its decision of 10 July 2023. Lovable Labs Incorporated, which hosts the website, is based in the United States: data are transferred under the standard contractual clauses approved by the European Commission (Decision 2021/914, Art. 46 GDPR). Plus Five Five, Inc. (Resend), which sends form and newsletter emails, and Cloudflare, Inc., which delivers and protects the website, participate in the Data Privacy Framework (Art. 45 GDPR) and also use the standard contractual clauses. You can ask for information about the safeguards in place, or a copy of them, by writing to info@seo.srl.
Cookies and other tracking tools
The website uses these tools:
- the technical cookies of the hosting platform (__cf_bm and __dpl), needed to run and protect the website: no consent required;
- a technical tool, stored in the browser's local storage (it is not a cookie), that remembers your choice about statistics cookies: it exists only when Google Analytics 4 statistics are active;
- Google Analytics 4 statistics cookies, only when statistics are active and only if you accept them in the banner;
- the aggregated statistics of the hosting platform, described in the processing table.
We classify them using the criteria of the Italian Data Protection Authority's Guidelines (section 8). Technical tools are those needed to run and protect the website or to remember your choice. Statistics tools measure how the website is used: they require consent, unless the data are aggregated under the conditions set by the Authority.
We do not use advertising, profiling or social network cookies. Advertising signals remain disabled in Google Analytics. Fonts are served from our own website, not from third-party servers, and our pages contain no videos or content embedded from other websites.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Technical, set by Cloudflare on behalf of the hosting platform | Telling people apart from bots and protecting the website | 30 minutes |
| __dpl | Technical, first-party, set by the hosting platform | Serving the whole browser the same published version of the website | 24 hours |
| seo-srl-consenso-cookie-v1 | Technical, first-party (browser local storage) | Remembering whether and when you accepted or rejected statistics cookies | 6 months, then we ask again (earlier if you change it or delete it from your browser) |
| seo-srl-newsletter-v1 | Technical, first-party (browser local storage) | Remembering whether you closed the newsletter box or asked to subscribe, so we do not show it again; it holds only dates, no personal data | Until you delete it from your browser; after you close the box it comes back after 30 days at the earliest |
| seo-srl-newsletter-mostrata | Technical, first-party (browser session storage) | Showing the newsletter box at most once per visit | Until you close the tab or the browser |
| _ga | Statistics, first-party, set by Google Analytics when statistics are active, only with consent | Distinguishing visitors in pseudonymized form | 2 years (some browsers apply shorter limits) |
| _ga_<ID> | Statistics, first-party, set by Google Analytics when statistics are active, only with consent | Keeping the state of the visit session | 2 years (some browsers apply shorter limits) |
<ID> is the identifier of the website's Google Analytics property. How Google processes data is explained in Google's privacy policy and on the page How Google uses information from sites or apps that use our services.
How to give, change or withdraw consent
When statistics are active, a banner with two equally prominent buttons, “Accetta” (Accept) and “Rifiuta” (Reject), and an X in the top right corner appears on your first visit. Closing the banner with the X is the same as rejecting: the website continues with technical tools only. If you reject, the website works in exactly the same way. You can change your mind at any time with the “Preferenze cookie” (Cookie preferences) link at the bottom of every page, which reopens the banner. You can also delete cookies and site data from your browser settings, or install Google's browser add-on to opt out of Google Analytics.
Links to WhatsApp and LinkedIn, phone numbers and email addresses do not set anything until you use them. When you open those services, their own privacy notices apply.
Your rights
At any time you can request:
- access to your data and a copy of them (Art. 15 GDPR);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- portability of the data you provided to us, for processing based on consent or contract (Art. 20);
- to object to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21);
- to object at any time, without giving reasons, to promotional communications, including the newsletter (Art. 21(2)-(3)).
We notify any rectification, erasure or restriction to the recipients of the data (Art. 19). You also have the right not to be subject to decisions based solely on automated processing (Art. 22). You can withdraw your consent at any time: withdrawal does not affect the lawfulness of processing carried out before it.
To exercise your rights, write to info@seo.srl or to our certified email seo_srl@pec.it. We reply free of charge within one month of your request; in complex cases this period may be extended by two further months, in which case we will tell you within the first month (Art. 12 GDPR). If we have doubts about your identity, we may ask you for the information needed to confirm it.
If you believe that the processing infringes data protection law, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the country where you live or work, or bring the matter before a court.
Provision of data
Providing your data is optional. However, we need the mandatory fields of the forms to reply to you or prepare the audit: without those data we cannot handle your request. For clients, the data required by law for invoicing are necessary to enter into the contract. Consent to statistics cookies is free and refusing it has no effect on your use of the website. Signing up to the newsletter is also voluntary: you can withdraw your consent at any time from the unsubscribe link in every email, at no cost, without affecting the lawfulness of what was done before.
Automated decisions and profiling
We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. The automatic SEO analysis evaluates web pages, not people.
Minors
Our services are aimed at businesses and professionals. We do not knowingly collect data of children under 14: if we become aware that we have received such data, we delete them.
Security
We protect data with technical and organizational measures appropriate to the risk: the website uses only encrypted connections (HTTPS), access to data is limited to the people who need it for their work, and providers are bound by security and confidentiality obligations.
Changes to this notice
We may update this notice when our processing or the law changes. We always publish the updated version on this page, with the date of the last change; if the changes affect cookie consent, we will ask for your consent again.
Last updated: 12 October 2026.