This notice explains how NEW FLY SERVICE S.R.L. processes personal data collected through this website and its connected contact channels under Regulation (EU) 2016/679 (“GDPR”).
1. Data controller
NEW FLY SERVICE S.R.L., VAT and Tax ID 03162840122, registered office at Piazza Giuseppe Garibaldi 8, 21013 Gallarate (VA), Italy. Contact: [email protected].
2. Data we process
Through the contact form we may collect your name, company, email, phone number, approximate service date and any information included in your message. Our technical systems may also process your IP address, user agent, request date and time, and security-related information.
When you contact us by phone, email or WhatsApp, we process the information and message content needed to respond and arrange the requested service. Please do not send unnecessary or particularly sensitive information.
3. Purposes and legal bases
- responding to quotations and organising requested services: pre-contractual and contractual measures;
- handling payments, invoicing and administration: contract and legal obligation;
- preventing spam, misuse and attacks: legitimate interest in website security;
- establishing or defending legal claims: legitimate interest and legal obligations.
4. Retention
Enquiries that do not lead to a contractual relationship are normally retained only as long as necessary to respond and no longer than 24 months. Service, payment and invoice data are retained for the periods required by tax and civil law. Information may be kept longer where necessary for a dispute.
5. Providers and international transfers
Microsoft 365
Website enquiries are delivered through Microsoft 365 / Office 365 email services. Microsoft may process technical data and message content as a service provider under its applicable agreements and safeguards. Read the Microsoft Privacy Statement.
SumUp
When you choose to pay by card, SumUp processes the data required for the transaction according to its role and privacy notice. Card details are entered in the provider’s environment or devices: we do not ask you to send them through the website form, email or WhatsApp. Read the SumUp Privacy Notice.
Cloudflare Turnstile
We use Cloudflare Turnstile to distinguish genuine visitors from automated submissions and protect the form. Turnstile may process technical information such as IP address, browser characteristics, device signals and interactions needed for verification. This processing is based on our legitimate interest in website security. Cloudflare may carry out international transfers using appropriate safeguards. Read the Cloudflare Turnstile Privacy Addendum.
If you contact us through WhatsApp, the communication is handled by WhatsApp Ireland Limited and Meta group companies under their own terms and privacy notices. This channel is optional; you may always contact us by phone or email. Read the WhatsApp Privacy Policy.
Data may also be processed by hosting, technical, accounting or legal providers where strictly necessary and under appropriate authorisation. We do not sell personal data.
6. Cookies and local technologies
We do not use advertising, analytics or profiling cookies. We use the technical cookie nfs_lang, session storage to avoid repeating the informational notice, and Cloudflare Turnstile’s strictly necessary technologies when the form is verified. Names, purposes, duration and management options are described in our Cookie Policy.
7. Your rights
Where provided by the GDPR, you may request access, correction, deletion, restriction, portability or object to processing by writing to [email protected]. You may also lodge a complaint with the competent data protection authority.
8. Changes
We may update this notice to reflect regulatory or service changes. The date shown above identifies the latest version.