Privacy Policy – rankmore.it
Data controller
The data controller for personal data collected through the rankmore.it website is:
This notice describes how the personal data of users who browse the website and use the contact form are processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and the applicable personal data protection legislation.
Types of data processed
Data voluntarily provided by the user
When the user completes the contact form, the Controller may collect the data entered in the form fields, such as, by way of example: first and last name; email address; telephone number, if requested; company or organization to which the user belongs, if requested; information contained in the message sent. Only data relevant to handling the request will be requested.
Browsing data
The IT systems and software procedures used to operate the website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. These may include IP addresses, technical device identifiers, information about the browser and operating system, request times and other technical data relating to browsing. Where necessary, such data are processed to enable the website to operate, ensure the security of the systems and prevent possible abuse.
Purposes and legal bases of processing
A. Handling contact requests
The data entered in the form are used to receive, review and handle requests for information relating to the Rankmore project and to contact the user in relation to the request submitted. The legal basis is the performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6(1)(b) GDPR, where applicable.
B. Website security and operation
Technical data may be processed to ensure the availability and security of the website, prevent unauthorized access and investigate any unlawful use. The legal basis is the Controller’s legitimate interest in the security and proper management of its systems, pursuant to Article 6(1)(f) GDPR, to the extent that such interest is applicable and prevails over the rights and freedoms of the data subject.
Data collected through the form will not be used for direct marketing purposes on the basis of this notice. Any further processing will be covered by a specific notice and, where necessary, by the collection of separate consent.
Nature of the provision of data
Providing the data marked as mandatory in the form is necessary to allow the Controller to handle the request and provide a response. Failure to provide such data may prevent the request from being submitted or properly handled. The provision of any additional information that is not necessary is optional.
Processing methods
Processing is carried out using IT and telematic tools, in accordance with the principles of lawfulness, fairness, transparency, data minimization and confidentiality. Appropriate technical and organizational measures are adopted to protect personal data against unauthorized access, loss, destruction, disclosure or unlawful use. The data are accessible only to authorized personnel and to parties who, for operational requirements, are entitled to process them.
Recipients of personal data
Personal data may be processed, within the scope of their respective responsibilities, by: authorized personnel of the Controller; providers of IT, hosting, maintenance and technical website-management services; providers of email or request-management services, where used; other parties to whom disclosure is required by legal obligations or by measures of the competent authorities.
Depending on the circumstances, these parties act as processors pursuant to Article 28 GDPR, independent controllers or persons authorized to process personal data.
Data collected through the form are managed by Black Digital S.r.l. for the purposes described above and are not automatically disclosed to the other partner companies involved in the project. Any further disclosure will take place only where an appropriate legal basis exists and the information required by applicable law has been provided.
An up-to-date list of any processors may be requested from the Controller using the contact details provided in this notice.
Transfer of data outside the European Economic Area
The Controller does not intend to transfer personal data to countries outside the European Economic Area, unless this becomes necessary in connection with specific services used. Should such transfers occur, they will be carried out in compliance with the conditions laid down by the GDPR, on the basis of an adequacy decision by the European Commission or other appropriate safeguards provided for by Articles 44 et seq. GDPR. Information on any transfers actually carried out may be requested from the Controller.
Personal data retention period
Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected and in compliance with any applicable legal obligations.
Contact requests and personal data provided through the form will be retained for a maximum period of 365 days from receipt of the request, unless further retention is necessary to comply with legal obligations, manage a contractual relationship initiated at the request of the data subject, or establish, exercise or defend a legal claim.
Technical data and browsing logs will be retained for the period necessary to ensure the operation and security of the website, in accordance with the retention policies adopted.
At the end of the retention periods, the data will be deleted or anonymized, where possible, unless further retention is necessary to comply with legal obligations or protect a right in judicial proceedings.
Data subject rights
In the cases and within the limits provided for by the GDPR, the data subject may exercise the following rights: obtain confirmation as to whether personal data concerning them are being processed and access such data; request the rectification of inaccurate data or completion of incomplete data; request erasure of data where the relevant conditions are met; request restriction of processing; object to processing based on legitimate interests, on grounds relating to their particular situation; receive the data in a structured format and, where applicable, request their transmission to another controller; withdraw any consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise their rights, the data subject may contact the Controller at info@blackdigital.it.
The data subject also has the right to lodge a complaint with the Garante per la protezione dei dati personali if they believe that the processing of their personal data infringes applicable law.
Changes to this Privacy Policy
The Controller reserves the right to update this Privacy Policy in the event of regulatory, technical or organizational changes affecting the processing of personal data. The updated version will be published on this page, together with the date of the latest update.
Last updated: 12 October 2026.