Skip to content
Beez Solutions Beez Solutions

Legal documents

Privacy Policy

Last updated: 18 October 2026.

This is an English translation provided for convenience. In case of any discrepancy, the Italian version prevails.

This page describes how the website beezsolutions.it is managed with regard to the processing of the personal data of the users who consult it. It is an information notice provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter the “GDPR”) and the national legislation in force on the protection of personal data.

1. Data Controller

The data controller of the personal data collected through this website is:

  • Company name: BEEZ SOLUTIONS S.r.l.s.
  • Registered office: Piazza Cavour 9 – 80137 Napoli (NA), Italy
  • Tax code and VAT number (Codice Fiscale and Partita IVA): 09827961211
  • Recipient code for electronic invoicing (SDI): KRRH6B9
  • Certified email (PEC): [email protected]
  • General contact email: [email protected]

2. Types of Data Processed

In the course of your use of the website and your interaction with our technical services, we may collect the following categories of data:

A. Browsing data and technical logs

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes:

  • IP addresses or domain names of the devices used by users connecting to the site;
  • URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested;
  • Time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the response given by the server (successful, error, etc.);
  • Other parameters relating to the user’s operating system and computer environment.

These data are used solely to obtain anonymous statistical information on the use of the site, to check that it is working correctly and to establish liability in the event of possible computer crimes against the site or third parties.

B. Data provided voluntarily by the user

The optional, explicit and voluntary sending of messages through the contact forms on the site (such as requests for quotes, architectural audits, activation of ongoing website care plans or urgent reports of compromised sites) entails the subsequent acquisition of the sender’s data, which are necessary to respond to the requests, as well as of any other personal data included in the message. Specifically, we collect:

  • First name and surname;
  • Name of the company or professional firm;
  • Business or personal email address;
  • Telephone number or WhatsApp contact for quick communication;
  • Address of the website or application to which the request relates;
  • Any technical notes, functional specifications or descriptions of security incidents provided in the body of the message.

C. Data processed in the context of contracts and technical services (Website Care & Disaster Recovery)

For clients who take out software development contracts, maintenance and website care plans or the emergency forensic clean-up procedure, the processing may extend to temporary access credentials, database dumps, server configurations and application logs. Such data are processed confidentially, in accordance with the agreements made with the client, and retained for as long as necessary to carry out the work.

D. Conversations with the ‘Ask Beez’ assistant

‘Ask Beez’ is available on the site: a virtual assistant that answers questions about our services using only the information published on this site. Using it is optional. When you write to it, we process:

  • the text of the messages you write and of the assistant’s replies;
  • the page of the site from which you start the conversation;
  • a cryptographic fingerprint (hash) of the IP address, used to limit abuse: the address itself is not stored in clear;
  • only when you ask to be contacted: name, contact details (email or telephone), company if you provide it and a summary of the request.

The replies are generated by an artificial intelligence model (GLM 4.7 Flash) run on the Workers AI platform of Cloudflare, Inc. Cloudflare acts as a data processor: in order to generate the reply, the messages pass through its network. Cloudflare states that it does not use this content to train models or to improve its own services.

The replies are automatic and may contain inaccuracies: for important decisions, what we confirm to you is what counts. We ask you not to write sensitive data in the chat, such as health information, bank details or passwords. The assistant is not used to profile you and does not show advertising.

3. Purposes of the Processing and Legal Bases

Personal data are processed by BEEZ SOLUTIONS S.r.l.s. for the following purposes and on the following legal bases:

  • Responding to contact and quote requests (Art. 6(1)(b) GDPR): Managing communications received via form or email, assessing the data subject’s technical needs and drawing up architectural proposals or cost estimates. Providing the data is optional but necessary in order to receive a response.
  • Performance of service contracts (Art. 6(1)(b) GDPR): Providing software development services, configuration of dedicated servers at European data centres of third-party providers, ongoing maintenance, watchdog monitoring and malware clean-up.
  • Compliance with legal, administrative and tax obligations (Art. 6(1)(c) GDPR): Issuing electronic invoices through the Exchange System (Sistema di Interscambio, SDI: KRRH6B9), complying with the obligations to keep accounting records under Article 2220 of the Italian Civil Code and cooperating with the competent judicial or supervisory authorities.
  • Infrastructure security and fraud prevention (Art. 6(1)(f) GDPR): Protecting the logical and physical security of our networks, preventing cyber attacks (DDoS, brute-force, code injection) and defending the Controller’s rights in court and out of court.
  • ‘Ask Beez’ assistant (Art. 6(1)(b) GDPR): Answering your questions about our services and contacting you when you ask us to. The conversation is kept for 90 days only if you tick the relevant box (Art. 6(1)(a) GDPR), and you can withdraw your consent by writing to us. The fingerprint of the IP address is used to prevent abuse (Art. 6(1)(f) GDPR).
  • Visit statistics (Art. 6(1)(a) GDPR): Understanding which pages are useful with Google Analytics, only if you accept via the cookie banner. Details are in the cookie policy.

No Commercial Profiling: The data collected are in no way used for automated decision-making or invasive commercial profiling.

4. Processing Methods and Security Measures

The data are processed with the aid of electronic tools and automated procedures, as well as on paper where strictly necessary, using logic related to the purposes stated and in compliance with the principles of lawfulness, fairness, transparency and data minimisation laid down in Article 5 of the GDPR.

BEEZ SOLUTIONS S.r.l.s. adopts technical and organisational security measures appropriate to the risk, including:

  • encrypted connections via the HTTPS protocol;
  • access to data restricted to authorised persons and protected by personal credentials;
  • periodic backups of the systems;
  • use of reliable technology service providers, with servers in the European Union for hosting the site and for email.

5. Place of Processing and Transfer of Data outside the EU

Personal data are processed by BEEZ SOLUTIONS S.r.l.s. The site hosting and the email service are located on servers in the European Union (European Economic Area – EEA).

Some services are based in the United States or outside the EEA:

  • Cloudflare, Inc. (United States): protection and speed of the site, and the engine of the ‘Ask Beez’ assistant. Data may pass through its global network. Cloudflare participates in the EU-U.S. Data Privacy Framework and applies the Standard Contractual Clauses approved by the European Commission.
  • Google: visit statistics with Google Analytics, only if you accept them via the banner. Google participates in the EU-U.S. Data Privacy Framework. Details are in the cookie policy.
  • Telegram: we use it to notify the team when a contact request arrives from the form or from the assistant. The notification contains name, contact details and a summary of the request. For accounts registered in the EEA, Telegram stores the data in data centres in the Netherlands.

Apart from these cases, BEEZ SOLUTIONS S.r.l.s. does not transfer personal data outside the EEA without an adequacy decision of the European Commission or Standard Contractual Clauses (SCC) ensuring a level of protection equivalent to that of the EU.

6. Data Retention Period

Personal data are retained for as long as strictly necessary to achieve the purposes for which they were collected, in accordance with the storage limitation principle (Art. 5(1)(e) GDPR):

  • Contact data and quote requests: Retained for a maximum of 24 months from receipt to allow commercial and technical follow-up, unless a contractual relationship is established.
  • Administrative, accounting and invoicing data: Retained for 10 years from the date the invoice is issued, in compliance with civil-law and tax obligations (Article 2220 of the Italian Civil Code).
  • Browsing logs and security telemetry: Retained for a maximum of 12 months, after which they are deleted or irreversibly anonymised.
  • Conversations with the ‘Ask Beez’ assistant: Deleted automatically within 24 hours. If you tick ‘Keep this conversation for 90 days’ they are kept for 90 days and then deleted. Contact requests collected by the assistant follow the rules for contact data set out above.
  • Test data and dumps provided for extraordinary support: Securely deleted or destroyed within 30 days of the end of the technical work or of the malware clean-up.

7. Recipients and Disclosure of Data

Personal data are not disseminated to unspecified parties. They may be disclosed exclusively to:

  • Authorised employees and collaborators of BEEZ SOLUTIONS S.r.l.s., formally instructed on the security measures and bound by a duty of confidentiality;
  • Third-party technical service providers (web hosting providers, Cloudflare for the site network and for the ‘Ask Beez’ assistant, connectivity providers, providers of email and PEC mailboxes) appointed as Data Processors pursuant to Article 28 of the GDPR;
  • Banks, financial intermediaries and tax/legal advisers for compliance with legal obligations;
  • Judicial authorities, police bodies or regulatory bodies solely in the cases provided for by mandatory provisions of law.

8. Data Subject Rights

As a data subject, the GDPR grants you the following rights (Articles 15-22 of the GDPR):

  • Right of Access (Art. 15): To obtain confirmation as to whether or not personal data concerning you are being processed and to receive a copy of them;
  • Right to Rectification (Art. 16): To obtain the updating, correction or completion of inaccurate or incomplete data;
  • Right to Erasure (“Right to be Forgotten”, Art. 17): To request the erasure of personal data when they are no longer necessary for the original purposes or when the processing is unlawful;
  • Right to Restriction of Processing (Art. 18): To request the temporary blocking of the processing where certain conditions apply;
  • Right to Data Portability (Art. 20): To receive the data in a structured, commonly used and machine-readable format, and to request their direct transmission to another controller where technically feasible;
  • Right to Object (Art. 21): To object at any time, on grounds relating to your particular situation, to the processing of data based on the controller’s legitimate interest.

9. How to Exercise Your Rights and Lodge a Complaint

To exercise your rights, you may contact the Data Controller at any time without any particular formalities, by sending a communication to:

  • Registered letter with return receipt (raccomandata A/R): BEEZ SOLUTIONS S.r.l.s., Piazza Cavour 9 – 80137 Napoli (NA), Italy
  • Certified email (PEC): [email protected]
  • Ordinary email: [email protected]

We will reply promptly and in any event within 30 days of receiving the request.

You also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (the Italian data protection supervisory authority) if you believe that the processing of your data infringes the legislation in force. For more information, you can consult its official website: www.garanteprivacy.it (opens in a new window) (Piazza Venezia 11, 00187 Roma).

Legal documents