{"id":23,"date":"2026-08-12T11:16:34","date_gmt":"2026-08-12T09:16:34","guid":{"rendered":"https:\/\/clickcertificati.com\/en\/?page_id=23"},"modified":"2026-08-14T12:05:37","modified_gmt":"2026-08-14T10:05:37","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/clickcertificati.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

Privacy Policy<\/h1>\n\n\n\n

Welcome to the privacy and data processing page of ClickCertificati. <\/strong>When you use our services, you entrust us with your information. This page describes our privacy practices so you can understand how we collect, use and share your data. Privacy legislation is very important to us, and we hope you will read this notice carefully.<\/p>\n\n\n\n

1. Data Controller<\/h2>\n\n\n\n

The Data Controller for personal data collected through the platform clickcertificati.com is Claudio Arena (Italian VAT no. 03876350830), who can be contacted at:<\/p>\n\n\n\n

Email:<\/strong> info@clickcertificati.com
Certified email (PEC):<\/strong> ufficiocertificati@legalmail.it
Registered office:<\/strong> Via Lombardia 12 – 98124 Messina, Italy<\/p>\n\n\n\n

2. Personal data collected<\/h2>\n\n\n\n

The Data Controller collects the following categories of personal data:<\/p>\n\n\n\n

2.1 Data provided directly by the user<\/h3>\n\n\n\n

When registering, requesting a Service or contacting the Data Controller, the user voluntarily provides data including: first and last name, tax identification number, residential address, email address and telephone number. For Services involving third parties (for example, a family member), the Client also provides the identifying details of the person to whom the requested document refers \u2014 first name, last name, date and place of birth.<\/p>\n\n\n\n

Data may be collected through: the registration form, the Service request form, the contact form, the support chat, messaging services (such as WhatsApp), telephone or email.<\/p>\n\n\n\n

2.2 Data collected automatically while browsing<\/h3>\n\n\n\n

While browsing the website, technical data is collected automatically, including: IP address, browser and device type, operating system, pages visited, duration of the visit and approximate geographic location. This data is collected through cookies, web beacons and similar tracking technologies, in accordance with the website’s Cookie Policy.<\/p>\n\n\n\n

2.3 Data collected through social networks<\/h3>\n\n\n\n

If the user interacts with the Data Controller’s social media profiles (Facebook, Instagram, LinkedIn, YouTube) or uses the sharing buttons on the website, data may be collected in accordance with the respective privacy policies of those social platforms.<\/p>\n\n\n\n

2.4 Special categories of data<\/h3>\n\n\n\n

The Data Controller does not intentionally collect or process special categories of personal data under Article 9 of the GDPR (health data, ethnic origin, political opinions, etc.). Should such data incidentally appear in the context of a requested document, it is processed exclusively for the purposes strictly necessary to perform the Service and on the basis of the conditions set out in Article 9(2) of the GDPR.<\/p>\n\n\n\n

3. Purposes of processing and legal bases<\/h2>\n\n\n\n

Personal data collected is processed for the following purposes:<\/p>\n\n\n\n

3.1 Provision of the Services \u2014 legal basis: performance of a contract (Art. 6.1.b GDPR)<\/h3>\n\n\n\n

Data is processed in order to manage Orders, perform the requested Services (obtaining certificates, apostille, sworn translations), communicate with the Client regarding the progress of their case, deliver the documents obtained and handle any refunds or complaints.<\/p>\n\n\n\n

3.2 Tax and legal obligations \u2014 legal basis: legal obligation (Art. 6.1.c GDPR)<\/h3>\n\n\n\n

Billing data and accounting information are retained in order to comply with the tax and accounting obligations set out under Italian law (Presidential Decree 600\/1973, Presidential Decree 633\/1972 and subsequent amendments). Data is retained for the period required by law, including after the contractual relationship has ended.<\/p>\n\n\n\n

3.3 Security and fraud prevention \u2014 legal basis: legitimate interest (Art. 6.1.f GDPR)<\/h3>\n\n\n\n

Browsing data and certain Order information are processed in order to prevent, detect and counter fraud, unlawful use of the Platform and security breaches. The Data Controller’s legitimate interest is to safeguard the integrity of the Platform and the security of all users.<\/p>\n\n\n\n

3.4 Improving the Platform \u2014 legal basis: legitimate interest (Art. 6.1.f GDPR)<\/h3>\n\n\n\n

Browsing data collected through analytics tools (Google Analytics 4, configured with IP anonymisation, and Google Tag Manager) is used to analyse user behaviour on the Platform and improve the user experience.<\/p>\n\n\n\n

3.5 Newsletter and marketing communications \u2014 legal basis: consent (Art. 6.1.a GDPR)<\/h3>\n\n\n\n

Subject to the user’s explicit consent, contact details are used to send newsletters, updates on new Services, articles and guides. Consent is entirely optional and may be withdrawn at any time by clicking the unsubscribe link included in every communication, or by contacting the Data Controller at info@clickcertificati.com.<\/p>\n\n\n\n

3.6 Management of comments and reviews \u2014 legal basis: consent (Art. 6.1.a GDPR)<\/h3>\n\n\n\n

If the user posts a comment on the blog or a review of a Service, the data provided (name, email) is processed in order to publish and manage that contribution.<\/p>\n\n\n\n

4. Data retention periods<\/h2>\n\n\n\n

Personal data is retained for as long as strictly necessary to achieve the purposes for which it was collected, in accordance with the principles of data minimisation and storage limitation set out in the GDPR:<\/p>\n\n\n\n

    \n
  • Contract and Order data: for the entire duration of the contractual relationship and for 10 years thereafter, in accordance with tax and civil law obligations.<\/li>\n\n\n\n
  • Billing data: 10 years from the date the tax document was issued, pursuant to Italian tax legislation (Presidential Decree 600\/1973, Art. 22 and Presidential Decree 633\/1972, Art. 39).<\/li>\n\n\n\n
  • Browsing data and technical logs: a maximum of 12 months, except where required for the investigation of criminal offences or unlawful conduct.<\/li>\n\n\n\n
  • Newsletter data: until the user withdraws consent.<\/li>\n\n\n\n
  • Account data: until the user deletes their account, with the exception of data whose retention is required by law.<\/li>\n<\/ul>\n\n\n\n

    5. Sharing and disclosure of data<\/h2>\n\n\n\n

    Personal data is not sold to third parties. It may, however, be disclosed \u2014 strictly to the extent necessary \u2014 to the following categories of recipients:<\/p>\n\n\n\n

    5.1 Third-party professionals appointed to carry out the Services<\/h3>\n\n\n\n

    In order to carry out Additional Services (sworn translations), the Client’s data and the document to be translated are shared with the appointed sworn translator.<\/p>\n\n\n\n

    5.2 Public bodies and archives<\/h3>\n\n\n\n

    In order to carry out the Basic Service, the identifying details of the person to whom the document refers are disclosed to the relevant comune, State Archive or parish archive, to the extent necessary to process the request.<\/p>\n\n\n\n

    5.3 Technology service providers<\/h3>\n\n\n\n

    The Data Controller relies on third-party providers for the supply of technology services (hosting, email, payments, analytics). An up-to-date list of these providers is set out in Section 7.<\/p>\n\n\n\n

    5.4 Professional advisers<\/h3>\n\n\n\n

    Data may be shared with accountants, lawyers or other professionals providing advice to the Data Controller, strictly to the extent necessary and subject to a duty of confidentiality.<\/p>\n\n\n\n

    5.5 Judicial and supervisory authorities<\/h3>\n\n\n\n

    Data may be disclosed to the judicial authorities, law enforcement agencies, the Italian Data Protection Authority (Garante per la protezione dei dati personali) or other public authorities where required by law or by an order of the competent authority.<\/p>\n\n\n\n

    6. Transfer of data outside the European Union<\/h2>\n\n\n\n

    The data collected is processed predominantly within the European Union. Some of the third-party providers used by the Data Controller (listed in Section 7) are based in, or process data in, the United States or other non-EU countries. For further information on these transfers and on the safeguards adopted by each provider, please refer to the respective privacy policies listed in Section 7.<\/p>\n\n\n\n

    7. Third-party providers<\/h2>\n\n\n\n

    The main third-party providers used by the Data Controller are listed below, together with the service provided, their location and a link to their respective privacy policy.<\/p>\n\n\n\n

    7.1 Hosting and web platform<\/h3>\n\n\n\n

    Rocket.net (onRocket.com LLC)<\/strong>
    Service: Hosting and web infrastructure
    Location: United States
    Privacy Policy: https:\/\/rocket.net\/privacy-policy\/<\/p>\n\n\n\n

    WordPress (Automattic Inc.)<\/strong>
    Service: CMS used to manage the website
    Location: United States
    Privacy Policy: https:\/\/automattic.com\/privacy\/<\/p>\n\n\n\n

    Google Fonts (Google LLC)<\/strong>
    Service: Web font delivery service
    Location: United States
    Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n

    CookieYes Limited<\/strong>
    Service: Cookie consent management and Cookie Policy
    Location: Ireland \/ United Kingdom
    Privacy Policy: https:\/\/www.cookieyes.com\/privacy-policy\/<\/p>\n\n\n\n

    7.2 Payments<\/h3>\n\n\n\n

    Stripe Inc.<\/strong>
    Service: Card payment processing
    Location: United States
    Privacy Policy: https:\/\/stripe.com\/privacy<\/p>\n\n\n\n

    The Data Controller does not acquire or store<\/strong> payment card details. Such data is processed exclusively by Stripe Inc. in a secure, PCI-DSS certified environment.<\/p>\n\n\n\n

    7.3 Communications and messaging<\/h3>\n\n\n\n

    Gmail (Google LLC)<\/strong>
    Service: Email service
    Location: United States
    Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n

    Aruba S.p.A.<\/strong>
    Service: Email hosting and cloud services
    Location: Italy
    Privacy Policy: https:\/\/www.aruba.it\/documenti\/italiano\/pdf\/informativa-privacy-aruba.aspx<\/p>\n\n\n\n

    Microsoft Corporation<\/strong>
    Service: Document and database management (Microsoft 365)
    Location: United States
    Privacy Policy: https:\/\/privacy.microsoft.com\/en-us\/privacystatement<\/p>\n\n\n\n

    WhatsApp LLC (Meta Platforms)<\/strong>
    Service: Messaging for customer support
    Location: United States
    Privacy Policy: https:\/\/www.whatsapp.com\/legal\/privacy-policy-eea<\/p>\n\n\n\n

    7.4 Newsletter and communications<\/h3>\n\n\n\n

    Mailchimp (The Rocket Science Group LLC)<\/strong>
    Service: Sending newsletters and communications by email
    Location: United States
    Privacy Policy: https:\/\/mailchimp.com\/legal\/privacy\/<\/p>\n\n\n\n

    MailerLite (UAB MailerLite)<\/strong>
    Service: Sending newsletters and communications by email
    Location: Lithuania \/ EU
    Privacy Policy: https:\/\/www.mailerlite.com\/legal\/privacy-policy<\/p>\n\n\n\n

    Newsletter subscription is optional. To unsubscribe, simply click the ‘Unsubscribe’ link at the bottom of any email received, or contact the Data Controller at info@clickcertificati.com.<\/p>\n\n\n\n

    7.5 Analytics and digital marketing<\/h3>\n\n\n\n

    Google Analytics 4 (Google LLC)<\/strong>
    Service: Analysis of website traffic and user behaviour (configured with IP anonymisation)
    Location: United States
    Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n

    Users may opt out of Google Analytics tracking by installing the browser add-on available at: https:\/\/tools.google.com\/dlpage\/gaoptout<\/p>\n\n\n\n

    Google Tag Manager (Google LLC)<\/strong>
    Service: Centralised management of tracking tags
    Location: United States
    Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n

    Google Ads \u2014 Conversions (Google LLC)<\/strong>
    Service: Measurement and optimisation of advertising campaigns
    Location: United States
    Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n

    Users may opt out of Google ad personalisation through their ad settings: https:\/\/adssettings.google.com\/<\/p>\n\n\n\n

    7.6 Social networks<\/h3>\n\n\n\n

    The website includes buttons linking to the Data Controller’s social media profiles as well as sharing buttons. The social networks concerned are: Facebook, Instagram, LinkedIn and YouTube<\/strong> (Meta Platforms \/ Google LLC).<\/p>\n\n\n\n\n