Privacy Policy

The data controller is:

Metis Web Agency di Elisabetta Monaco
Operational address: Via Mongitore, 40, Menfi (AG), 92013, Sicily, Italy
Registered address: Via Garibaldi, 56, Menfi (AG), 92013, Sicily, Italy
VAT number: IT 02876000841
Email: info@metiswebagency.it
Phone: +39 349 445 9317

For any request regarding the processing of your personal data, please write to the email address above.

1. Website navigation and technical logs

When you browse the website, the site systems may process technical data required to serve pages and keep the service secure. The repository does not store raw IP addresses in the application databases; the contact form uses only a daily IP hash to limit abuse and flooding.

• IP address in server logs managed by the hosting provider, to be verified in the provider panel
• Browser type, device and operating system, if present in technical logs
• Requested URL, referring page, date and time of the request

Purpose: IT security, abuse prevention and technical maintenance.
Legal basis: Art. 6(1)(f) GDPR, legitimate interest of the controller.
Retention: operational target of up to 14 days for technical logs; actual server log retention must be verified with the hosting/cPanel/provider configuration.

2. Contact forms

When you fill in a contact form on the website, we collect the data you enter:

• Full name
• Email address
• Phone number, if requested by the form or provided
• Message / objective / context
• Company or business and website, if present in the form
• Privacy consent flag: timestamp, version of the text shown, language and source page URL
• Newsletter flag: if selected, timestamp, source, language and consent version
• Daily non-reversible IP hash, used only to limit abuse

Purpose: to reply to your enquiry and provide an initial assessment.
Legal basis: Art. 6(1)(b) GDPR, pre-contractual measures requested by the data subject.
For newsletter: Art. 6(1)(a) GDPR, separate and revocable consent.
Retention: up to 24 months from receipt, unless legal requirements or claims require otherwise.

3. Quizzes and interactive tools

If you use a quiz or estimate tool on a landing page, the system may store:

• Quiz answers and calculated estimate range
• Name, email, phone and company, if requested in the contact step
• Privacy consent accepted, timestamp and consent version
• Newsletter consent, only if selected, with a dedicated timestamp
• Locale, page path, optional referrer and UTM parameters

The quiz does not store leads without privacy acceptance. The code does not store raw IP addresses or full user agent strings in the quiz lead database.

Purpose: to process the enquiry, estimate the project and contact you back.
Retention: up to 24 months through configurable application cleanup.

4. Newsletter

The newsletter is not sent automatically by the website and the repository does not include an integrated email marketing platform. If you select the newsletter checkbox, the website stores only the technical proof of consent: flag, timestamp, source (contact form or quiz), language and consent version. Any subscription confirmation, list management and unsubscribe process will depend on the selected email marketing platform and will be described before activation.

5. Quotes and Brief Builder

The Brief Builder is an internal area reserved for the Metis team. Quotes may contain data entered internally to manage a request or proposal: company, project, sector, contact person, email, phone, client notes, internal notes, selected services, amounts and quote status.

When a quote is created in the internal area, no online customer consent is collected at that moment: the database does not create a false technical consent. The classification as pre-contractual/contractual processing must be validated with a privacy consultant.

Retention: the code provides anonymisation of personal fields in quotes older than the configured retention period, preserving non-personal data useful for administrative management.

6. Direct contact (WhatsApp, phone, email)

If you contact us directly via WhatsApp, phone or email, the data you provide are processed to reply to the enquiry and manage the communication.

Retention: for the time needed to handle the communication, indicatively up to 24 months unless legal requirements apply.

7. Cookie consent preferences

We store cookie consent preferences in the browser localStorage (key: metis_cookie_consent). This is necessary to avoid showing the banner on every visit and to respect your choice.

Retention: 6 months from your choice, or until manual revocation.

8. Analytics and marketing tools (only after consent)

If you consent to the Analytics category, the website may load Google Tag Manager and analytics tags configured in the relevant container to measure visits, interactions and page performance.

If you consent to the Marketing / Profiling category, the website may load advertising or conversion tags configured in Google Tag Manager.

Legal basis: Art. 6(1)(a) GDPR, explicit consent.
Retention: according to the settings and policies of the relevant providers, to be verified in Google/GTM panels.
Note: none of these tools is loaded before you make a choice. If you reject or make no choice, these tools are not activated.

9. Application retention

The code includes a configurable cleanup mechanism for contact forms, quiz leads and quotes. Periodic execution depends on cron/server configuration. Default settings are 24 months for contact forms, 24 months for quiz leads and 24 months for quotes; for quotes, cleanup anonymises personal fields instead of deleting the whole record.

Internal recipients

Data are processed directly by the controller Elisabetta Monaco and, where necessary, by collaborators acting under her direction.

Technical providers

To provide the website and communications, technical providers may process data on behalf of the controller, including hosting/server, database if separate from hosting, and SMTP/transactional email service. Provider names and DPA status cannot be verified from the repository alone and must be checked and maintained by the controller with a privacy consultant.

Third parties after analytics/marketing consent

Only if you accept analytics and/or marketing, the website may load Google Tag Manager and tags configured in the container. This may involve data transfers to Google LLC according to the actual GTM/GA4 and any connected Google product settings.

Google privacy: policies.google.com/privacy

Transfers outside the EU

Any non-EU transfers linked to Google or other providers must be verified in the relevant contracts, DPAs and account settings. You can avoid loading non-essential Google tags by rejecting analytics and marketing.

Under Arts. 15–22 GDPR, you have the right to:

• Access (Art. 15): know whether we process your data, obtain a copy and information on the processing
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): obtain deletion of data when no longer necessary or when you withdraw consent
• Restriction (Art. 18): request restriction of processing in certain cases
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdrawal of consent (Art. 7(3)): withdraw consent at any time (analytics, marketing, newsletter), without prejudice to the lawfulness of prior processing

How to exercise your rights

Write to: info@metiswebagency.it
We will respond within 30 days of receipt (Art. 12 GDPR). In complex cases, we may extend by a further 60 days, informing you of the reasons.

Revoking cookie consent

You can modify or revoke your cookie preferences at any time by clicking «Cookie preferences» in the site footer. Revocation is free of charge and penalty-free.

Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with your national supervisory authority. In Italy:
Garante per la Protezione dei Dati Personali: www.garanteprivacy.it
Piazza Venezia, 11, 00187 Rome, Italy
Email: garante@gpdp.it | PEC: protocollo@pec.gpdp.it

Policy updates

This policy may be updated in the event of regulatory changes, introduction of new services, or changes in the processing activities. In the event of material changes (new services, new purposes, new non-EU processors), the consent banner will be shown again.

Last modified: 29 April 2026