Last updated: 19 August 2026
Privacy Policy
Home »
At a glance:
| Who handles your data | Tipic srl, Piazzale Bologna 4, 36100 Vicenza (Italy) |
| What we collect | Browsing data; your name, company and email if you write to us or request a toolbox |
| Why | To reply to you, to send you the toolboxes and updates you asked for, to understand how the site is used |
| For how long | For as long as needed, with an annual review of our archive; until you withdraw consent for updates |
| Do we sell or share it? | No, never |
| Your rights | Access, rectification, erasure, objection, portability, withdrawal of consent, complaint to the supervisory authority |
| How to reach us | hello@tipic.it |
1. Data controller
The data controller is Tipic srl, registered office at Piazzale Bologna 4, 36100 Vicenza (Italy), VAT/tax code 04115150247.
For anything concerning your personal data you can write to hello@tipic.it or to tipic@pec.it.
We have not appointed a Data Protection Officer, as this is not mandatory for our activity: the contact point for privacy matters is the address above.
2. What we collect and how
2.1 Browsing data
When you visit tipic.it, the systems running the website automatically collect some data that internet transmission entails: IP address, browser and device type, pages visited, date and time of the visit, referring website. We use this data to keep the site running and secure and, in aggregate form, to understand how it is used.
2.2 Data you give us to receive a toolbox
On our tools pages you can request a toolbox by filling in a form with your name, company and email address. By ticking the box on the form you allow us both to send you the tool you requested and to write to you afterwards with our content on futures design and innovation: they are two sides of the same relationship, and you can end it whenever you like through the unsubscribe link at the bottom of every email.
The messages you send us through the forms are stored within the website, in an area accessible only to authorised Tipic staff.
2.3 Data you give us by writing to us
If you write to hello@tipic.it we process the data contained in your message in order to reply and to manage any relationship that may follow.
2.4 LinkedIn newsletter
Our newsletters are hosted on LinkedIn. If you subscribe, the subscription takes place entirely on the LinkedIn platform: we neither receive nor store your contact details, and the processing is governed by LinkedIn's own privacy policy.
2.5 What we do not do
You cannot register an account on this website, comments on articles are closed, and we do not process special categories of data (Art. 9 GDPR). We do not carry out automated decision-making or individual profiling.
3. Why we process your data, on what legal basis and for how long
| Purpose | Legal basis | For how long |
|---|---|---|
| Replying to your requests and managing contacts | Art. 6(1)(b) GDPR — responding to your request | For as long as needed to handle the request and any relationship that follows. We review our archive once a year and delete contacts with whom there has been no exchange for more than three years |
| Storing the messages received through the website forms | Art. 6(1)(f) GDPR — our legitimate interest in keeping a record of requests received | Same criterion as the row above |
| Sending you the toolbox you requested and our subsequent updates | Art. 6(1)(a) GDPR — your consent | Until you withdraw your consent; after withdrawal we delete your address within 30 days |
| Running and protecting the website, keeping forms free of spam | Art. 6(1)(f) GDPR — our legitimate interest | Technical logs are kept by our hosting provider according to its own rotation, in the order of a few months |
| Statistics on how the website is used | Art. 6(1)(a) GDPR — your consent through the cookie banner | 14 months, per the Google Analytics setting |
| Measuring how our LinkedIn activity performs | Art. 6(1)(a) GDPR — your consent through the cookie banner | Per LinkedIn's own retention policies |
| Understanding which companies visit our website, to guide our business activity | Art. 6(1)(a) GDPR — your consent through the cookie banner | Per the provider's own retention policies |
| Defending a legal claim | Art. 6(1)(f) GDPR — our legitimate interest | For the duration of the proceedings and up to the statutory limitation periods |
Providing your data is always optional. However, without the data in the form we cannot send you the toolbox, and without your message we cannot reply to you.
4. Third-party services and cookies
The website uses services provided by third parties, which may set cookies or similar technologies. Cookies that are not strictly necessary are activated only after you consent, and you can give, refuse or change your consent at any time from the preferences panel.
| Service | Provider | What it does | Category |
|---|---|---|---|
| Google Analytics 4 | Google Ireland Ltd. | Anonymous statistics on website use | Statistics — consent |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company | Measuring how our LinkedIn activity performs | Marketing — consent |
| Leadfeeder / Dealfront | Dealfront Group GmbH (Germany) | Recognising which companies visit the site, based on IP address | Marketing — consent |
| Google reCAPTCHA | Google Ireland Ltd. | Protecting forms from automated submissions | Necessary |
| Vimeo | Vimeo LLC (USA) | Playing the videos on some pages | Consent, at playback |
| Google Fonts | Google Ireland Ltd. | Website typefaces | Necessary / consent |
| Adobe Fonts (Typekit) | Adobe Systems Inc. (USA) | Website typefaces | Necessary / consent |
| Cloudways / DigitalOcean | Cloudways Ltd. | Website hosting | Necessary |
| WPML | OnTheGoSystems Ltd. | Managing the site languages | Necessary |
The full, always up-to-date list of cookies, with names, duration and purpose, is in our Cookie Policy.
5. Who we share your data with
Your data is handled by authorised Tipic staff and by the suppliers that help us run the website and our communications: Cloudways Ltd. for hosting, Google Ireland Ltd. (Google Workspace) for the email we write to you and send the toolboxes with, Brevo (formerly Sendinblue), Brevo SAS — France for sending our periodic communications, together with the services listed in section 4. These parties act as data processors under a contract pursuant to Art. 28 GDPR.
We do not sell, trade or otherwise transfer your data to anyone for third-party commercial purposes. We may disclose it to judicial or public authorities where the law requires us to.
6. Transfers outside the European Union
Some of the providers listed in section 4 (in particular Google, LinkedIn, Vimeo and Adobe) may also process data in the United States. Transfers take place under the safeguards set out in Chapter V GDPR: adherence to the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission. You can ask us for a copy of the safeguards in place by writing to hello@tipic.it.
7. Your rights
At any time you can ask us to:
- access your data and receive a copy of what we process (Art. 15)
- correct it if it is inaccurate or incomplete (Art. 16)
- erase it (Art. 17)
- restrict its processing (Art. 18)
- receive it in a readable format or have it transferred to another controller (Art. 20)
- object to processing based on our legitimate interest (Art. 21)
- withdraw the consent you gave us, at any time and without having to give reasons: withdrawal does not affect the lawfulness of processing carried out beforehand (Art. 7(3))
To exercise these rights, write to hello@tipic.it. We will reply within one month. For email updates, withdrawing is even simpler: there is an unsubscribe link at the bottom of every message.
8. Lodging a complaint
If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it), with the supervisory authority of your country of residence, or to bring the matter before the courts.
9. Security
We take appropriate technical and organisational measures to protect your data from unauthorised access, loss or disclosure: encrypted connection (HTTPS), protected access limited to authorised staff, and regular backups.
10. Changes to this policy
We may update this policy to reflect changes in the law or in the services we use. The version in force is always the one published on this page, with the last-updated date shown at the top. If the changes are substantial we will make that clear.