This notice covers the data you send by filling in the contact forms of the Bantoa website (requests for information from users, brands and companies). For all other processing see the General Privacy Policy.
Data controller
Bantoa Srl, with registered office in Via Belluno 22/A - 37133 - Verona, Italy, in the person of its pro tempore Legal Representative.
To contact the Data Controller: e-mail [email protected]
Which data we process
The data you enter in the form (for example first name, last name, e-mail address, telephone number, company, text of the message) and the technical data of the request (IP address, date and time). Please do not include in the message data that are not needed for the request, in particular health data or other special categories of data.
Why we process the data and on what legal basis
- Replying to your request
- Art. 6 par. 1 lett. b) GDPR: pre-contractual measure taken at your request. Providing the data is necessary: without it we cannot reply.
- Protecting the form against spam and abuse
- Art. 6 par. 1 lett. f) GDPR: legitimate interest of the controller in the security of the platform. The form is protected by Google reCAPTCHA (Google privacy notice).
The data sent through the contact form are not used for marketing purposes.
To whom we disclose the data
To persons authorised to process the data under the authority of the controller (art. 29 GDPR and art. 2-quaterdecies of Italian Legislative Decree 196/2003) and to the providers supporting us in managing the website, e-mail and cloud services, appointed as processors (art. 28 GDPR). The data are not disseminated.
Transfer of data outside the European Union
Some providers (for example Google for reCAPTCHA and the e-mail service provider) belong to groups based in the United States. Transfers take place on the basis of the European Commission adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) or of the standard contractual clauses approved by the European Commission (art. 46 GDPR).
How long we keep the data
Until the request has been handled and, for more complex requests or requests leading to a negotiation, for a maximum of 1 year; if a contractual relationship arises, the data are kept for the duration of the relationship and for the period required by law.
Your rights
You can exercise at any time the rights provided by arts. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) by writing to [email protected]. The controller replies within one month of receipt of the request. You also have the right to lodge a complaint with the Italian Data Protection Authority (art. 77 GDPR, www.garanteprivacy.it).
Last update: 26 October 2026
