LEGAL
Privacy notice
Last updated: 1 October 2026
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).
1. Data controller
The data controller is CertExe S.r.l., Corso Vittorio Emanuele II 12, 10123 Turin, Italy, with operations at Via Albert Bruce Sabin 30, 40017 San Giovanni in Persiceto (BO), Italy; VAT number and tax code IT13253100013. For any privacy-related request, please write to hello@certexe.com.
2. What data we collect on this website and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Application form | Company name, VAT number, registered office, number of employees, contact person, job title, email, information about devices and certifications | Reviewing your application, preparing a quotation and handling pre-contractual contacts | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Free guide request | Work email | Sending the guide you requested | Your request (Art. 6(1)(b)) |
| Purchase of courses and webinars | First name, surname, company, address, email, phone number if provided, VAT number, tax code, SDI code or PEC address, participants | Managing your order, delivering the course, sending materials and the certificate of attendance, invoicing | Performance of a contract (Art. 6(1)(b)) and compliance with tax obligations (Art. 6(1)(c)) |
| Optional marketing consent | Name, email, company | Sending you information about CertExe courses, webinars and initiatives | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Use of the website | Technical data (IP address, browser, pages visited) | Running the website and keeping it secure | Our legitimate interest (Art. 6(1)(f)) |
Fields marked as required are needed to process your request or order; without them, we cannot proceed. Marketing consent is optional, and declining it has no effect on your purchase or request.
3. Payments
Card payments are processed by Stripe, which acts as an independent controller under its own privacy policy; CertExe never receives or stores card numbers. For bank transfers, we only process the data needed to match your payment to your order.
4. Who we share your data with
Your data are handled by authorised CertExe staff and by the service providers that help us deliver our services, who act as data processors on our behalf:
- SiteGround (website hosting);
- Microsoft (email, and Microsoft Teams for live courses);
- Stripe (card payments).
We may also disclose data to public authorities where required by law. We never sell your data to third parties.
5. Transfers outside the European Union
Some of our providers, such as Microsoft and Stripe, may process data in the United States. Any such transfer is covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
6. How long we keep your data
- Applications that do not lead to a contract: 24 months from the date of the request.
- Free guide requests: 24 months, unless you have given marketing consent.
- Orders, invoices and accounting records: 10 years, as required by Italian law.
- Marketing data: until you withdraw your consent.
- Technical website data: no longer than 12 months.
7. Cookies
Our website only uses technical cookies that are essential for it to work, such as those for the shopping cart and checkout, your language preference and payment fraud prevention. These cookies do not require your consent. We do not use profiling cookies or third-party analytics tools.
8. Your rights
You have the right to access your data and to ask us to rectify or erase them, to restrict processing, and to receive your data in a portable format. You may also object to processing based on our legitimate interest. You can withdraw your marketing consent at any time, without affecting the lawfulness of any processing carried out before withdrawal. To exercise your rights, please write to hello@certexe.com. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
9. Changes to this notice
We may update this notice from time to time; the version in force is always the one published on this page, together with the date of the latest update.