{"id":23,"date":"2026-08-12T11:16:34","date_gmt":"2026-08-12T09:16:34","guid":{"rendered":"https:\/\/clickcertificati.com\/en\/?page_id=23"},"modified":"2026-08-14T12:05:37","modified_gmt":"2026-08-14T10:05:37","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/clickcertificati.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n
Welcome to the privacy and data processing page of ClickCertificati. <\/strong>When you use our services, you entrust us with your information. This page describes our privacy practices so you can understand how we collect, use and share your data. Privacy legislation is very important to us, and we hope you will read this notice carefully.<\/p>\n\n\n\n The Data Controller for personal data collected through the platform clickcertificati.com is Claudio Arena (Italian VAT no. 03876350830), who can be contacted at:<\/p>\n\n\n\n Email:<\/strong> info@clickcertificati.com The Data Controller collects the following categories of personal data:<\/p>\n\n\n\n When registering, requesting a Service or contacting the Data Controller, the user voluntarily provides data including: first and last name, tax identification number, residential address, email address and telephone number. For Services involving third parties (for example, a family member), the Client also provides the identifying details of the person to whom the requested document refers \u2014 first name, last name, date and place of birth.<\/p>\n\n\n\n Data may be collected through: the registration form, the Service request form, the contact form, the support chat, messaging services (such as WhatsApp), telephone or email.<\/p>\n\n\n\n While browsing the website, technical data is collected automatically, including: IP address, browser and device type, operating system, pages visited, duration of the visit and approximate geographic location. This data is collected through cookies, web beacons and similar tracking technologies, in accordance with the website’s Cookie Policy.<\/p>\n\n\n\n If the user interacts with the Data Controller’s social media profiles (Facebook, Instagram, LinkedIn, YouTube) or uses the sharing buttons on the website, data may be collected in accordance with the respective privacy policies of those social platforms.<\/p>\n\n\n\n The Data Controller does not intentionally collect or process special categories of personal data under Article 9 of the GDPR (health data, ethnic origin, political opinions, etc.). Should such data incidentally appear in the context of a requested document, it is processed exclusively for the purposes strictly necessary to perform the Service and on the basis of the conditions set out in Article 9(2) of the GDPR.<\/p>\n\n\n\n Personal data collected is processed for the following purposes:<\/p>\n\n\n\n Data is processed in order to manage Orders, perform the requested Services (obtaining certificates, apostille, sworn translations), communicate with the Client regarding the progress of their case, deliver the documents obtained and handle any refunds or complaints.<\/p>\n\n\n\n Billing data and accounting information are retained in order to comply with the tax and accounting obligations set out under Italian law (Presidential Decree 600\/1973, Presidential Decree 633\/1972 and subsequent amendments). Data is retained for the period required by law, including after the contractual relationship has ended.<\/p>\n\n\n\n Browsing data and certain Order information are processed in order to prevent, detect and counter fraud, unlawful use of the Platform and security breaches. The Data Controller’s legitimate interest is to safeguard the integrity of the Platform and the security of all users.<\/p>\n\n\n\n Browsing data collected through analytics tools (Google Analytics 4, configured with IP anonymisation, and Google Tag Manager) is used to analyse user behaviour on the Platform and improve the user experience.<\/p>\n\n\n\n Subject to the user’s explicit consent, contact details are used to send newsletters, updates on new Services, articles and guides. Consent is entirely optional and may be withdrawn at any time by clicking the unsubscribe link included in every communication, or by contacting the Data Controller at info@clickcertificati.com.<\/p>\n\n\n\n If the user posts a comment on the blog or a review of a Service, the data provided (name, email) is processed in order to publish and manage that contribution.<\/p>\n\n\n\n Personal data is retained for as long as strictly necessary to achieve the purposes for which it was collected, in accordance with the principles of data minimisation and storage limitation set out in the GDPR:<\/p>\n\n\n\n Personal data is not sold to third parties. It may, however, be disclosed \u2014 strictly to the extent necessary \u2014 to the following categories of recipients:<\/p>\n\n\n\n In order to carry out Additional Services (sworn translations), the Client’s data and the document to be translated are shared with the appointed sworn translator.<\/p>\n\n\n\n In order to carry out the Basic Service, the identifying details of the person to whom the document refers are disclosed to the relevant comune, State Archive or parish archive, to the extent necessary to process the request.<\/p>\n\n\n\n The Data Controller relies on third-party providers for the supply of technology services (hosting, email, payments, analytics). An up-to-date list of these providers is set out in Section 7.<\/p>\n\n\n\n Data may be shared with accountants, lawyers or other professionals providing advice to the Data Controller, strictly to the extent necessary and subject to a duty of confidentiality.<\/p>\n\n\n\n Data may be disclosed to the judicial authorities, law enforcement agencies, the Italian Data Protection Authority (Garante per la protezione dei dati personali) or other public authorities where required by law or by an order of the competent authority.<\/p>\n\n\n\n The data collected is processed predominantly within the European Union. Some of the third-party providers used by the Data Controller (listed in Section 7) are based in, or process data in, the United States or other non-EU countries. For further information on these transfers and on the safeguards adopted by each provider, please refer to the respective privacy policies listed in Section 7.<\/p>\n\n\n\n The main third-party providers used by the Data Controller are listed below, together with the service provided, their location and a link to their respective privacy policy.<\/p>\n\n\n\n Rocket.net (onRocket.com LLC)<\/strong> WordPress (Automattic Inc.)<\/strong> Google Fonts (Google LLC)<\/strong> CookieYes Limited<\/strong> Stripe Inc.<\/strong> The Data Controller does not acquire or store<\/strong> payment card details. Such data is processed exclusively by Stripe Inc. in a secure, PCI-DSS certified environment.<\/p>\n\n\n\n Gmail (Google LLC)<\/strong> Aruba S.p.A.<\/strong> Microsoft Corporation<\/strong> WhatsApp LLC (Meta Platforms)<\/strong> Mailchimp (The Rocket Science Group LLC)<\/strong> MailerLite (UAB MailerLite)<\/strong> Newsletter subscription is optional. To unsubscribe, simply click the ‘Unsubscribe’ link at the bottom of any email received, or contact the Data Controller at info@clickcertificati.com.<\/p>\n\n\n\n Google Analytics 4 (Google LLC)<\/strong> Users may opt out of Google Analytics tracking by installing the browser add-on available at: https:\/\/tools.google.com\/dlpage\/gaoptout<\/p>\n\n\n\n Google Tag Manager (Google LLC)<\/strong> Google Ads \u2014 Conversions (Google LLC)<\/strong> Users may opt out of Google ad personalisation through their ad settings: https:\/\/adssettings.google.com\/<\/p>\n\n\n\n The website includes buttons linking to the Data Controller’s social media profiles as well as sharing buttons. The social networks concerned are: Facebook, Instagram, LinkedIn and YouTube<\/strong> (Meta Platforms \/ Google LLC).<\/p>\n\n\n\n\n1. Data Controller<\/h2>\n\n\n\n
Certified email (PEC):<\/strong> ufficiocertificati@legalmail.it
Registered office:<\/strong> Via Lombardia 12 – 98124 Messina, Italy<\/p>\n\n\n\n2. Personal data collected<\/h2>\n\n\n\n
2.1 Data provided directly by the user<\/h3>\n\n\n\n
2.2 Data collected automatically while browsing<\/h3>\n\n\n\n
2.3 Data collected through social networks<\/h3>\n\n\n\n
2.4 Special categories of data<\/h3>\n\n\n\n
3. Purposes of processing and legal bases<\/h2>\n\n\n\n
3.1 Provision of the Services \u2014 legal basis: performance of a contract (Art. 6.1.b GDPR)<\/h3>\n\n\n\n
3.2 Tax and legal obligations \u2014 legal basis: legal obligation (Art. 6.1.c GDPR)<\/h3>\n\n\n\n
3.3 Security and fraud prevention \u2014 legal basis: legitimate interest (Art. 6.1.f GDPR)<\/h3>\n\n\n\n
3.4 Improving the Platform \u2014 legal basis: legitimate interest (Art. 6.1.f GDPR)<\/h3>\n\n\n\n
3.5 Newsletter and marketing communications \u2014 legal basis: consent (Art. 6.1.a GDPR)<\/h3>\n\n\n\n
3.6 Management of comments and reviews \u2014 legal basis: consent (Art. 6.1.a GDPR)<\/h3>\n\n\n\n
4. Data retention periods<\/h2>\n\n\n\n
\n
5. Sharing and disclosure of data<\/h2>\n\n\n\n
5.1 Third-party professionals appointed to carry out the Services<\/h3>\n\n\n\n
5.2 Public bodies and archives<\/h3>\n\n\n\n
5.3 Technology service providers<\/h3>\n\n\n\n
5.4 Professional advisers<\/h3>\n\n\n\n
5.5 Judicial and supervisory authorities<\/h3>\n\n\n\n
6. Transfer of data outside the European Union<\/h2>\n\n\n\n
7. Third-party providers<\/h2>\n\n\n\n
7.1 Hosting and web platform<\/h3>\n\n\n\n
Service: Hosting and web infrastructure
Location: United States
Privacy Policy: https:\/\/rocket.net\/privacy-policy\/<\/p>\n\n\n\n
Service: CMS used to manage the website
Location: United States
Privacy Policy: https:\/\/automattic.com\/privacy\/<\/p>\n\n\n\n
Service: Web font delivery service
Location: United States
Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n
Service: Cookie consent management and Cookie Policy
Location: Ireland \/ United Kingdom
Privacy Policy: https:\/\/www.cookieyes.com\/privacy-policy\/<\/p>\n\n\n\n7.2 Payments<\/h3>\n\n\n\n
Service: Card payment processing
Location: United States
Privacy Policy: https:\/\/stripe.com\/privacy<\/p>\n\n\n\n7.3 Communications and messaging<\/h3>\n\n\n\n
Service: Email service
Location: United States
Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n
Service: Email hosting and cloud services
Location: Italy
Privacy Policy: https:\/\/www.aruba.it\/documenti\/italiano\/pdf\/informativa-privacy-aruba.aspx<\/p>\n\n\n\n
Service: Document and database management (Microsoft 365)
Location: United States
Privacy Policy: https:\/\/privacy.microsoft.com\/en-us\/privacystatement<\/p>\n\n\n\n
Service: Messaging for customer support
Location: United States
Privacy Policy: https:\/\/www.whatsapp.com\/legal\/privacy-policy-eea<\/p>\n\n\n\n7.4 Newsletter and communications<\/h3>\n\n\n\n
Service: Sending newsletters and communications by email
Location: United States
Privacy Policy: https:\/\/mailchimp.com\/legal\/privacy\/<\/p>\n\n\n\n
Service: Sending newsletters and communications by email
Location: Lithuania \/ EU
Privacy Policy: https:\/\/www.mailerlite.com\/legal\/privacy-policy<\/p>\n\n\n\n7.5 Analytics and digital marketing<\/h3>\n\n\n\n
Service: Analysis of website traffic and user behaviour (configured with IP anonymisation)
Location: United States
Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n
Service: Centralised management of tracking tags
Location: United States
Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n
Service: Measurement and optimisation of advertising campaigns
Location: United States
Privacy Policy: https:\/\/policies.google.com\/privacy<\/p>\n\n\n\n7.6 Social networks<\/h3>\n\n\n\n