Last updated: 20 October 2026
1. Who is responsible for your data
The data controller for this website and the enquiries it receives is FACTORY ROOM MILANO SRL, Via Fabio Filzi 2, 20124 Milano (MI), Italy. VAT and tax identification number: 12930890962. For privacy enquiries and requests concerning your personal data, contact samples@factoryroom.it.
2. Information processed and why
When you visit the website, the hosting infrastructure may process technical connection data, including your IP address, browser information, requested resources, access times and error information. This processing supports delivery, reliability and security of the website. Its legal basis is the controller's legitimate interest in operating and protecting the website (Article 6(1)(f) GDPR).
If you contact us by email or messaging, we process the contact details and information you choose to send in order to answer your enquiry. For requests concerning our services, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR); for other correspondence, it is our legitimate interest in responding to the enquiry (Article 6(1)(f) GDPR). Providing this information is voluntary, but without the details needed to handle an enquiry we may be unable to respond. Please avoid sending unnecessary sensitive information.
3. Cookies and tracking
The website application does not set cookies, use browser storage for tracking, or include advertising pixels or third-party analytics scripts. Its interactive graphics run in your browser without tracking your behaviour. Consent is not requested for these functions.
The website contains links to external services rather than embedded social media or questionnaire widgets. Opening a link takes you to the selected service, where its own cookies, technical systems and privacy information apply. If tracking technologies requiring consent are introduced on this website, the relevant information and consent controls must be updated before they are enabled.
4. Hosting, enquiries and external services
The website uses INWX hosting. Authorised personnel and providers supporting website hosting, communications and IT maintenance may access data where necessary for their work, acting as processors where applicable. Data may also be disclosed to competent authorities where required by law. Personal data is not published merely because you visit or contact the website.
Links to Instagram, WhatsApp and Telegram open external services only when selected. Their providers process data under their own privacy terms. You can use email instead of a social or messaging service to contact us.
Research questionnaires open on Tally. The purpose, questions, legal basis and retention arrangements of each research activity must be explained in the information accompanying the relevant questionnaire. This website notice does not replace that form-specific information. Tally's privacy information is available at tally.so/help/privacy-policy.
5. How long data is kept
Enquiry data is kept for the time needed to answer and complete the relevant correspondence. Where an enquiry leads to a professional relationship, records needed for that relationship are retained for its duration and for applicable legal obligations or the establishment, exercise or defence of legal claims. Unnecessary correspondence should be deleted once those purposes no longer apply.
Technical log retention is governed by the hosting configuration and the need to operate the website, investigate faults and address security incidents. Data should not be kept longer than needed for those purposes, except where retention is required by law. You may contact us for details of the retention arrangements applicable to a particular request.
6. International services
External communication services may process information outside the European Economic Area. Their privacy information describes the locations and applicable transfer arrangements. Where the controller transfers personal data through its providers, the transfer must rely on an applicable adequacy decision or appropriate safeguards under Chapter V GDPR. Details of applicable safeguards may be requested using the contact above.
7. Your rights
Under the conditions set out in the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal. Requests can be sent to samples@factoryroom.it.
You may lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, or another competent supervisory authority. The website application does not make automated decisions about visitors that produce legal or similarly significant effects.
