Working draft — notice under GDPR articles 13-14, written by the technical team from the processing actually present on the site. To be validated by a privacy consultant before final publication (then remove draft: true in the file).
Data controller
Ambiens VR — Via Trieste 39, 67051 Avezzano (AQ), Italy — VAT IT13944411001 — info@ambiensvr.com
What data we process and why
Browsing the site
The servers hosting the site record IP address, date and time, requested page and browser in technical logs. Legal basis: legitimate interest in the security and operation of the service (art. 6.1.f). Retention: as long as technically necessary.
Statistics (with your consent only)
With the "Statistics" consent we use Google Analytics 4 to understand which pages are visited and where visitors come from. Data is aggregated and the IP is anonymised; we do no advertising or profiling. Legal basis: consent (art. 6.1.a), revocable at any time from "Cookie preferences". Details in the Cookie policy.
Third-party content (with your consent only)
Embedded Sketchfab 3D models and videos load only after the "External content" consent; providers may process data under their own policies.
Contact form
When you write to us through the form we collect name, email and message to reply to you. Data transits through Formspree (Formspree Inc., USA — data processor, under standard contractual clauses) and reaches info@ambiensvr.com. Legal basis: pre-contractual measures taken at your request (art. 6.1.b). Retention: as long as needed to handle the request and, if we work together, for the duration of the relationship and legal obligations.
Email and WhatsApp
If you contact us directly by email or WhatsApp, the data you provide is processed to answer your request, with the same legal bases and retention as the form.
Recipients
Technical providers processing data on our behalf: site hosting (Railway Corp., USA), Formspree (form), Google (statistics, with consent only). No data is sold or shared with third parties for marketing.
Transfers outside the EU
Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can request access, rectification, erasure, restriction, objection and portability of your data (GDPR articles 15-22) and withdraw consent at any time by writing to info@ambiensvr.com. You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Changes
This notice may be updated; the date of the latest change is shown at the top.