Privacy Policy

1. Data controller

Fabrizio Prizzi – Lava Web Solutions
Email: info@lavawebsolutions.com

2. The site in short

• There are no contact forms or login areas.
• We use no cookies, profiling or advertising tools.
• You can reach us by email or WhatsApp: you share your data only if you choose to contact us.

3. What data we process and why

a) Browsing data

When you visit the site, the hosting service automatically records some technical data: IP address, browser and device type, page requested, date and time.

• Purpose: running the site, protecting it from abuse and attacks, fixing technical issues.
• Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Retention: [[as set by the hosting provider's configuration – to be checked in the Cloudflare dashboard]].

b) Visit statistics

We use Cloudflare Web Analytics to count visits in aggregate form (for example, how many people view a page). It uses no cookies and does not build profiles of individual people.

• Purpose: understanding how the site is used and improving it.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

c) Messages you send us

If you write to us by email or WhatsApp, we process the data you give us: name, contact details, message content and any information about your business.

• Purpose: answering your questions and, if you ask, preparing a proposal or quote.
• Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in replying (Art. 6(1)(f) GDPR).
• Retention: up to 12 months after the last contact, if no working relationship follows. If you become a client, the necessary data is kept for the duration of the relationship and for as long as the law requires, for example for tax purposes.

Sharing your data is optional, but without contact details we cannot reply.

4. Who processes data on our behalf

We rely on providers that process data on our behalf under agreements meeting Art. 28 GDPR:

• Cloudflare, Inc. – website hosting, security, visit statistics, email forwarding.
• Google (Gmail) – receiving and managing email.
• Brevo (Sendinblue SAS, France) – sending email.

When you message us on WhatsApp, WhatsApp/Meta processes data as an independent controller under its own policy.

We do not sell your data or share it with third parties for marketing.

5. Transfers outside the European Union

Some providers, such as Cloudflare and Google, may process data in the United States. These transfers rely on the EU–US Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.

6. Links to other websites

The site links to Instagram, LinkedIn, WhatsApp and our demo projects. Those sites have their own policies. Our site sends them no data unless you click.

7. Your rights

You can ask us at any time to access, correct or delete your data. You can also ask us to restrict processing, object to processing based on legitimate interest, and receive your data in a portable format, as provided by Articles 15–22 GDPR.

Write to info@lavawebsolutions.com: we will reply within one month.

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it (opens in a new tab)) or with the authority in your EU country of residence.

8. Automated decisions

We do not make decisions based solely on automated processing, including profiling.

9. Changes

If we change how we process data, we will update this page and the date at the top.