# Privacy Policy: Website and Moving Enquiries | Decorato

Read how Decorato handles personal data from the website, quote requests and plugins: purposes, recipients, retention periods, rights and privacy contacts.

Source: https://www.traslochidecorato.it/en/privacy-policy/

# Privacy notice

This notice explains how Decorato Trasporti S.r.l. processes personal data collected through traslochidecorato.it, its contact and quote forms, and the “Traslochi Milano by Decorato” plugin. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 for the activities described below.

Publisher and owner: Decorato Trasporti S.r.l. · Last updated: 5 November 2026.

## Data controller and contacts

The data controller is Decorato Trasporti S.r.l., Viale Misurata 23, 20146 Milano (MI), Italy, VAT number 12281220157, which operates under the brand Traslochi Milano by Decorato.

For information about processing or to exercise your rights: info@traslochidecorato.it; telephone +39 02 48600839. You can also write to the registered office, for the attention of the data controller.

- Contact us about privacy

## What data we receive

Data is provided by you or, when you request use of the plugin, by the platform through which you interact. Health data, criminal-record information, passwords and full payment details are not required. Share only what is necessary; avoid including unrelated documents, faces or personal items in photographs.

- Contact details: first name, surname, email and telephone number.

- Service information: collection and destination, date or period, floor levels and lifts, access, type and quantity of belongings, packing, dismantling, storage or other services required.

- Optional communications and materials sent to describe the request, including relevant photographs or documents provided through agreed channels.

- Technical data needed to operate and secure the website: connection information, IP address and request data processed by the infrastructure; essential information about technical outcomes and errors.

- External-content preferences, stored in your browser to remember your choices.

## Why we process data

Fields marked as required are needed to process your enquiry; without this information, we may be unable to respond or prepare a quote. Processing necessary for a quote does not require marketing consent. This version of the website has no active advertising tags, Google Analytics, Google Tag Manager or commercial profiling systems. Any future marketing will require its own privacy information and, where necessary, separate, optional consent.

| Purpose | Legal basis |
| --- | --- |
| Responding, preparing a quote and arranging a survey requested by the user. | Steps taken before entering into a contract at the data subject’s request: Article 6(1)(b) GDPR. |
| Managing an agreed service, operational communications and support. | Performance of a contract: Article 6(1)(b) GDPR. |
| Comply with accounting and tax obligations or lawful requests from authorities. | Legal obligation: Article 6(1)(c) GDPR. |
| Prevent abuse, ensure security and establish or defend a legal right. | Legitimate interests in protecting the service and rights, balanced against the user's interests: Article 6(1)(f) GDPR. |
| Load optional social content embedded in the page. | Consent for processing and device access that require it, in accordance with your stated preferences. |

## How the quote enquiry works

When you submit the form, your browser sends the data to the website service hosted on Cloudflare Workers. After technical checks, the service forwards it to the Google Apps Script already used by Decorato to manage enquiries and email communications. The enquiry is directed to the quotations office, preventivi@traslochidecorato.it, with a copy to the email address provided by the enquirer.

The website service does not create a persistent archive of request content or record the form body in its application logs. Data may be retained in the company and email systems needed to handle the request; providers also process the technical data required for transmission and security.

The request reference and any technical confirmation of processing do not confirm email delivery, acceptance of a contract, or a confirmed date or price. If your copy does not arrive, contact the quotes department and provide the reference.

## AI plugins and platforms

The “Traslochi Milano by Decorato” plugin allows users to consult information and prepare an enquiry. The user's chosen AI platform processes conversations according to its own privacy notice; Decorato receives the data sent to its service to perform the requested function.

Before a request is submitted through the plugin, users must be able to check and correct their details. The plugin does not automatically conclude contracts or handle payments on the website or in ChatGPT. Decorato staff review requests and any quotes.

For these requests, Decorato does not make solely automated decisions producing legal or similarly significant effects, and does not use the data received to train its own AI model.

- Artificial intelligence transparency

## Who may receive the data

Roles depend on the activities performed. Providers processing data on Decorato's behalf must act according to the instructions and agreements required by law. Platforms you choose to visit directly, such as Instagram, Facebook, LinkedIn or WhatsApp, process data relating to their services under their own privacy notices.

We do not sell enquiry data. Information about providers, roles and safeguards can be requested from the controller.

- Authorised Decorato staff, according to their roles.

- Cloudflare, for the delivery, operation and security of the new website and its web features.

- Google and the email and communication providers used to manage enquiries; Google Apps Script forms part of the quote forwarding process.

- Providers appointed to maintain and provide technical support for the website or plugin, to the extent necessary.

- Logistics partners and professionals involved in the requested service, where necessary to organise or carry it out.

- Authorities and entitled parties where disclosure is required or permitted by law.

- Cloudflare privacy notice

- Google privacy notice

## Transfers outside the European Economic Area

Using international technology providers may involve processing data outside the European Economic Area. Transfers subject to the GDPR require the conditions set by law, such as an applicable adequacy decision or appropriate contractual safeguards and any necessary supplementary measures. You can ask the controller for information about the safeguards relevant to the processing of your data.

## Retention

Once the retention period ends, data no longer needed must be deleted or anonymised. Contact the controller for information about the period applicable to a particular enquiry.

| Information | Period or criterion |
| --- | --- |
| Enquiries and quotes that do not lead to a contract, and their relevant attachments. | 12 months after the enquiry is closed, in accordance with the company's published policy, unless documented needs to protect a legal right or legal obligations require otherwise. |
| Contracts, invoices and accounting records. | For the retention periods applicable to the particular documents, normally 10 years for accounting records. |
| Preferences for external content stored by the website. | six months, or until you delete browser data earlier; you can change them at any time. |
| Technical security information. | For the period necessary for the protection and diagnostic functions of the services used; any extension must be justified by incidents, misuse or the protection of rights. |
| Documentation involved in a dispute or an authority’s request. | For the time needed to deal with the matter and meet applicable obligations. |

## Cookies, social media and browser choices

You can browse and request a quote even if you decline optional content. Links to social platforms do not automatically load their content. Any embedded content is activated only after the relevant choice in the preferences panel.

The “Cookie preferences” control in the footer lets you change or withdraw your choices. Withdrawal does not affect the lawfulness of processing carried out beforehand.

- Cookie policy

## Rights and complaints

Where provided by law, you may request access, rectification, erasure, restriction and portability of your data, object to certain processing and withdraw consent. Write to info@traslochidecorato.it, stating your request and the information needed to identify it. A response is normally provided within one month, subject to any extensions permitted by law.

You may lodge a complaint with the Italian Data Protection Authority and use the other remedies provided by law.

- Italian Data Protection Authority

- Regulation (EU) 2016/679 — GDPR

## Updates

This notice is updated when functions, providers or processing activities change materially. The date at the top identifies the version. For data already collected, the terms relevant to the processing and any information communicated directly to the data subject continue to apply.

## Optional wallet connection

If you choose to connect a compatible wallet available in your browser, the page requests the authorised public address and network identifier to display the connection status. A public address may constitute personal data where it allows a person to be identified, even indirectly. Connecting is optional: you can browse the website and request a quote without using it.

The legal basis for this optional feature is consent under Article 6(1)(a) of the GDPR, given through the connection control after reading the information and the authorisation requested by the wallet. The feature does not involve consent to marketing or social content.

The page code handles the address and network only in the browser's temporary memory. The feature does not save them in cookies, localStorage or sessionStorage, send them to Decorato's servers, add them to quote forms or use them for analytics or profiling. It does not request signatures or transactions and does not record these data on a blockchain.

You can stop the feature and withdraw consent by selecting “Disconnect”: the page clears its connection state. Reloading or closing the page removes the state held by the feature. Withdrawal does not affect processing already carried out on the basis of consent. Any permission retained in the wallet is not revoked by the local command: you can remove it in the wallet settings.

## The user’s chosen wallet and its providers

The wallet, browser and any technical services used by the provider may process information according to their own configuration and privacy notice, including technical connection data. The page’s retention choices neither describe nor limit processing by the wallet provider: consult its privacy information and manage permissions there. For processing carried out by Decorato, the contacts and rights described in this notice remain available.

- GDPR — Regulation (EU) 2016/679

- EDPB — Guidelines on consent

- EDPB — Personal data and blockchain technologies

## Previously generated documents

The PDF creation form was disabled on 6 November 2026. Previously generated documents remain accessible through their links until they automatically expire 24 hours after creation. Copies downloaded or sent by the user are not deleted when the link expires.

## Related pages

- [Home](https://www.traslochidecorato.it/en/)
- [Artificial intelligence transparency](https://www.traslochidecorato.it/en/ai-transparency/)
- [Cookie policy](https://www.traslochidecorato.it/en/cookie-policy/)