Privacy Policy

01. Data Controller

The data controller for personal data collected through the website iptv-italia.it è:

Titolare

Russu Bianchi

Sede

Roma, Italia

Email

contatto@iptv-italia.it

WhatsApp

+44 7916 697381

Hosting

Hostinger, con rete di distribuzione dei contenuti integrata

No data protection officer (DPO) has been appointed, as the conditions set out in Article 37 GDPR do not apply. For any matter relating to personal data, you may contact us directly using the details above.

02. Personal data we process

This website is an informational website: it has no contact forms, does not require account creation and does not process payments. Personal data therefore comes almost exclusively from you when you choose to contact us.

Data you provide to us

• Your telephone number and WhatsApp profile name when you contact us through that channel;
• Your email address and message content if you write to contatto@iptv-italia.it;
• Information you choose to include in your message: device, app and desired plan;
• Data required to fulfil an order and activate a subscription.

Data collected automatically by the server

Like every website, the server records technical access logs. They are generated by the hosting infrastructure and are used for the operation and security of the website.

• Source IP address;
• Date and time of the request, requested page and response code;
• Browser type and operating system reported by the device.

Questi log non vengono usati per identificare le persone, non sono incrociati con altre informazioni e non alimentano alcuna profilazione.

03. What this website does not do

We consider it more useful to state precisely what does not happen rather than list hypothetical cases. The following can be verified by inspecting the website with browser developer tools.

As no cookies of any kind are placed, this website does not display a consent banner: there are no preferences to collect. If we introduce analytics or third-party tools in the future, this policy will be updated and, where necessary, your prior consent will be requested.

04. Contact via WhatsApp

WhatsApp is the main channel for requesting information and activating a subscription. It is important that you understand how it works from a data perspective.

When you write to us on WhatsApp, the conversation passes through the infrastructure of WhatsApp Ireland Limited, a Meta group company that acts as an independent controller for the service data it collects. Message content is protected by end-to-end encryption, but so-called metadata — telephone number, message times and device information — is processed by WhatsApp under its own policy, over which we have no control.

We invite you to consult theinformativa privacy di WhatsApp per lo Spazio economico europeo. Se preferisci non utilizzare questo canale, puoi contattarci via e-mail: il servizio è accessibile allo stesso modo.

The number used for support is a United Kingdom number (+44). The United Kingdom is covered by a European Commission adequacy decision, which allows the transfer of personal data without additional safeguards.

05. Purposes and legal bases

Each processing activity has a specific purpose and a corresponding legal basis.

Respond to requests

Pre-contractual measures at the data subject’s request — Article 6(1)(b) GDPR.

Manage an order and activate a subscription

Performance of the contract — Article 6(1)(b) GDPR.

Provide support for the duration of the plan

Performance of the contract — Article 6(1)(b) GDPR.

Website security and technical logs

Legitimate interest of the controller in protecting the infrastructure — Article 6(1)(f) GDPR.

Accounting and tax obligations

Legal obligation — Article 6(1)(c) GDPR, where applicable to the business.

Providing data is optional, but without the minimum information — contact details and the desired configuration — we cannot reply or activate a subscription.

06. Retention periods

Data is retained for the time necessary for the purpose for which it was collected.

• Requests that do not lead to a subscription: up to 12 months from the last message, so that we can reconstruct an exchange if you contact us again. fino a 12 mesi dall’ultimo messaggio, per poter ricostruire uno scambio se ci ricontatti.
• Active customers: throughout the subscription and for 24 months after expiry, for support and the management of any disputes. per tutta la durata dell’abbonamento e per i 24 mesi successivi alla scadenza, a fini di assistenza e di gestione di eventuali contestazioni.
• Accounting documents: for the period required by applicable tax law, where the business is subject to those obligations. per il periodo previsto dalla normativa fiscale applicabile, ove l’attività sia soggetta a tali obblighi.
• Server logs: according to the rotation periods set by the hosting infrastructure, generally a few weeks. secondo i tempi di rotazione impostati dall’infrastruttura di hosting, generalmente di alcune settimane.

When the stated periods expire, data is deleted or irreversibly anonymised.

07. Recipients and processors

Personal data is not transferred or sold to third parties. It is accessible only to the parties that provide the technical services necessary for the operation of the business.

Hostinger

Website and email hosting, with a content delivery network. Processor under Article 28 GDPR.

WhatsApp Ireland Limited

Messaging channel. Independent controller for service data, as described in section 4.

Data may also be disclosed to public authorities where required by a legal obligation or an order of a judicial authority.

08. Transfers outside the European Union

The website and email are hosted on infrastructure located in the European Union. The only transfer to a third country concerns support via WhatsApp, which uses a United Kingdom number.

The United Kingdom benefits from an adequacy decision adopted by the European Commission, which recognises that country as providing a level of data protection essentially equivalent to the European level. The transfer is therefore permitted without additional safeguards.

09. Security

We adopt technical and organisational measures appropriate to the risk, as required by Article 32 GDPR.

• Entire website served over HTTPS, with automatic redirection of unencrypted requests;
• Regular updates of WordPress, the theme and installed extensions;
• Access to the administration area limited to persons who genuinely need it;
• No storage of bank details: payments do not pass through the website;
• Data minimisation, which remains the most effective protection.

No IT system can guarantee absolute security. In the event of a personal data breach that poses a high risk to your rights and freedoms, we will inform you and notify the Italian Authority within the terms set out in Articles 33 and 34 GDPR.

10. Minors

The service is intended for adults. The catalogue includes content intended for an adult audience and is not designed for minors.

We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please write to us and we will delete it.

11. Your rights

The GDPR grants you the following rights in relation to your data.

• Access — sapere quali dati trattiamo e ottenerne una copia (art. 15);
• Rectification — correggere dati inesatti o incompleti (art. 16);
• Erasure — ottenere l’eliminazione dei dati, nei casi previsti (art. 17);
• Restriction — chiedere la sospensione del trattamento (art. 18);
• Portability — ricevere i dati in un formato leggibile da dispositivo automatico (art. 20);
• Objection — opporti ai trattamenti fondati sul legittimo interesse (art. 21).

Exercising these rights is free of charge. Some may be subject to limitations: for example, we cannot delete documents that tax law requires us to retain.

12. How to exercise your rights

Write to us stating which right you wish to exercise and the contact details you used when communicating with us — WhatsApp number or email address. This helps us identify the data concerning you.

We respond within one month of receiving the request, as provided by Article 12(3) GDPR. If the request is particularly complex, the period may be extended by two months; in that case, we will notify you within the first month and explain why.

We may request verification only if there are reasonable doubts about your identity, and always limited to what is strictly necessary.

13. Complaint to the Authority

If you believe that the processing of your data breaches the law, you may lodge a complaint with the Italian supervisory authority:

Authority

Garante per la protezione dei dati personali

Website

www.garanteprivacy.it

Sede

Piazza Venezia 11, 00187 Roma

You also have the right to bring proceedings before the courts. However, we invite you to contact us first: in most cases, the matter can be resolved in a few exchanges.

14. Changes to this policy

This policy may be updated if the tools used by the website, the services offered or the applicable law change. The date at the top of the page always indicates the latest revision.

In the event of substantial changes — in particular the introduction of analytics tools or cookies — the change will be clearly communicated and, where required, your consent will be collected before activation.