Privacy policy.

This notice explains how personal data is processed when you visit slamcrab.com or contact us through it, as required by Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

1. Data controller

Slam Crab S.r.l. — registered office: Largo Francesco Torraca 71, 80133 Napoli (NA), Italy — VAT No. IT 11090071215 — registered with the Companies Register of Napoli, REA No. NA-1154500 — paid-up share capital as stated in the latest financial statements: EUR 30,000.00, fully paid up — single-member company (società a socio unico) — email production@slamcrab.com — certified email (PEC) slamcrab@pec.it. For any privacy request, write to the email address above.

2. What data we process, why, and on what legal basis

a) Browsing data. When you open the site, the hosting provider automatically records technical data such as your IP address, browser type, date and time of the request and the pages visited. These logs are used only to run the site and keep it secure (legitimate interest, art. 6(1)(f) GDPR). Routine logs are deleted within 30 days; where specific records are needed to investigate a security incident, only those records are kept until the investigation and any related proceedings are concluded.

b) Contact form. If you send a message through the contact page we process the data you type in (name, email address, company, subject and message) to handle your enquiry and, where requested, to prepare a proposal. Where you ask us for steps towards a contract to which you would personally be a party, processing is based on art. 6(1)(b) GDPR (pre-contractual measures). For general enquiries and for people writing on behalf of a company or organisation, processing is based on our legitimate interest in responding to enquiries and managing business relationships (art. 6(1)(f) GDPR). Providing your data is voluntary: the fields marked as required (name, email, message) are necessary to submit and handle your enquiry; the other fields are optional. Please send only information relevant to your request. Enquiries that do not lead to a contract are deleted no later than 24 months after our last substantive exchange, and earlier where no longer needed; records needed for a specific legal claim are kept until that claim is finally resolved.

c) Email. If you write to us directly, we process your address and the content of your message for the same purposes and with the same retention as point b).

We do not use your data for marketing, profiling or automated decision-making, and we do not sell it.

3. Who can access your data

Data is processed by the controller's staff authorised to handle it and by these service providers, acting as data processors under art. 28 GDPR:

• Netlify, Inc. (San Francisco, USA) — hosting of the site and handling of the contact form submissions. Netlify is certified under the EU-U.S. Data Privacy Framework and offers Standard Contractual Clauses for transfers outside the EU. Privacy notice: netlify.com/privacy.
• Our email provider, for messages sent to the addresses above.

Data is not otherwise shared with third parties, except where required by law or by a public authority.

4. Transfers outside the European Union

Personal data is transferred to Netlify, Inc. in the United States for website hosting and contact-form processing. Transfers covered by Netlify's EU-U.S. Data Privacy Framework certification rely on the European Commission's adequacy decision (art. 45 GDPR); where that mechanism does not apply, the Standard Contractual Clauses (art. 46 GDPR) and any necessary supplementary safeguards govern the transfer, as set out in Netlify's Data Processing Agreement (netlify.com/pdf/netlify-dpa.pdf). You may request a copy of the applicable safeguards by writing to production@slamcrab.com.

5. Your rights

You may at any time ask us to access, correct, delete or restrict your data, object to its processing or receive it in a portable format (art. 15-22 GDPR). Write to production@slamcrab.com. These rights apply under the conditions set by the GDPR. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.

Your right to object. You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (art. 21 GDPR). Write to production@slamcrab.com: we will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.

6. Cookies

This site does not use profiling or analytics cookies. See the cookie policy.

7. Changes

We may update this notice; the date at the top tells you when it was last revised.