Privacy notice

1. Controller

The controller is DueDiLens S.r.l., registered office Via Giuseppe Parini 101, 22030 Longone al Segrino (CO), Italy, VAT number IT04294180130. Privacy contact: info@fidatoitaly.com.

Tentori TLS S.r.l., which delivers the services, processes the data of your case as an independent controller for the professional service and its own legal obligations (for example invoicing and professional record-keeping), under its own privacy notice.

2. What we collect

• Account data: name, email address and, if you give it, phone number.
• Case data: the description of your request, the documents you upload, messages, proofs of work and the history of your case.
• Payment data: amounts, status and references of your payments. Card details are entered directly with Stripe and are never stored by Fidato.
• Technical data: logs needed to run and secure the website (IP address, browser, date and time of requests).
• For professionals who join our list: name or firm, profession, register or VAT number, city, languages and email.

Please do not upload health data or data about criminal convictions unless it is strictly necessary for your case and we have asked for it.

3. Why we use it, and on what legal basis

• To create your account, run your case, handle payments, releases, refunds and reported problems: performance of the contract (art. 6(1)(b) GDPR).
• To keep accounting and tax records and meet other legal obligations: legal obligation (art. 6(1)(c)).
• To secure the platform, prevent fraud and defend legal claims: our legitimate interest (art. 6(1)(f)).
• To reply to professionals who join our list: steps taken at your request (art. 6(1)(b)).

We do not sell your data and we do not use it for profiling or automated decisions with legal effects.

4. Who receives your data

• Tentori TLS S.r.l. and, where needed, the partner professionals it engages for your case, receive the data needed to deliver the service. Your case details are shared with them once you have sent a request; your full contact details are shared after your payment is confirmed.
• Supabase (database, authentication and file storage), as processor; data hosted in the EU (Frankfurt, Germany).
• Stripe (payments), which acts as an independent controller for payment processing and anti-fraud checks, and as processor for some services.
• Vercel (website hosting and delivery), as processor.
• Email delivery providers, as processors, to send you sign-in links and case updates [to be completed].
• Public authorities, when required by law or when needed to carry out the service you requested (for example a filing).

5. Transfers outside the EU

Some providers (such as Stripe and Vercel) belong to groups based in the United States. Where data is transferred outside the European Economic Area, the transfer is based on an adequacy decision (including the EU-US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Case data and documents: for the duration of the case and then up to 10 years, to meet tax and civil-law record-keeping obligations and defend claims.
• Account data: until you close your account, unless needed for an open case or the purposes above.
• Technical logs: up to 12 months, unless needed to investigate a security incident.
• Professional list: up to 24 months from your last contact, or until you ask us to delete it.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format (articles 15–21 GDPR). Write to info@fidatoitaly.com. We reply within one month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live or work.

8. Cookies

Fidato uses only technical cookies that are necessary to keep you signed in and to run the website securely. We do not use advertising or analytics cookies. If this changes, we will ask for your consent first.

9. Security

Documents are stored in private storage and opened only through short-lived links for authorised people. Access to data is limited to those who need it for your case.