Privacy policy
Information notice pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR).
Version 1.3 — effective from 30/09/2026
1. Data controller
ONE S.r.l. Unipersonale
Registered office: Via C. Colombo 94 — 36061 Bassano del Grappa (VI), Italy
VAT No.: IT03741450245 — REA VI-350151
E-mail: contact@one.vi.it
Phone: +39 0424 878682
Certified e-mail (PEC): one.bassano@legalmail.it
The Controller has not appointed a Data Protection Officer (DPO), as the conditions set out in Art. 37 GDPR do not apply. Any request may be addressed directly to the Controller at the contact details above.
This privacy policy applies exclusively to the website https://one.vi.it (the "Website").
The Website is not directed at minors; its content is intended for professionals and businesses.
2. Data processed and purposes
2.1 Browsing data
The IT systems operating the Website automatically collect certain data whose transmission is inherent in the use of Internet protocols: IP address, date and time of the request, URL requested, response code, browser type and operating system.
- Purpose: ensuring the proper functioning of the Website, the security of the infrastructure and the prevention of abuse.
- Legal basis: legitimate interest of the Controller in the security and continuity of the service (Art. 6(1)(f) GDPR).
- Retention: server log files are retained by the hosting provider for the time strictly necessary for security purposes and in any event for no longer than 30 days, unless a longer retention is required for security or legal reasons.
2.2 No data entered by the user
The Website does not feature contact forms, user accounts, registration systems, e-commerce functionality or newsletters. No personal data voluntarily provided by the user is collected through the Website.
To contact the Controller, please write to contact@one.vi.it or call +39 0424 878682. In that case, the processing of the data contained in the communication takes place within the direct relationship between the user and the Controller, on the legal basis of pre-contractual measures or contract performance (Art. 6(1)(b) GDPR).
2.3 Aggregated visit measurement
The Website uses Cloudflare Web Analytics to count, in aggregated form, page views, the source of the visit, the country and the device type. The tool does not set cookies, does not use local storage and does not assign an identifier to the visitor. The country is derived from the IP address, which Cloudflare does not retain in the analytics reports.
- Purpose: understanding, in aggregated form, how the Website is used.
- Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR). The measurement does not profile the user and has no effect on browsing.
- Retention: for the time needed for aggregated measurement, in accordance with Cloudflare’s service terms. The reports do not contain data that identifies the user.
- Objection: you may object by writing to contact@one.vi.it, or block third-party scripts in your browser settings.
3. Cookies and tracking technologies
The Website does not use cookies of any kind — neither technical, analytics nor profiling cookies — and does not use local storage. The resources required to display the pages (stylesheets, fonts, images, the Website’s own scripts) are hosted on the Website’s own servers. The only resource loaded from a third party is the measurement script described in section 2.3, served from static.cloudflareinsights.com. As no cookies requiring consent are installed, no cookie banner is displayed. Details are set out in the cookie policy.
4. Recipients of data
Data may be processed by the Controller’s personnel duly authorised under Art. 29 GDPR and by the processors:
- Register S.p.A. (team.blue group), acting as data processor under Art. 28 GDPR for domain registration, hosting and e-mail services.
- Cloudflare, Inc., acting as data processor under Art. 28 GDPR for the Cloudflare Web Analytics service.
Other than the processors listed above, data is not transferred or otherwise disclosed to third parties, except as required by law.
5. Transfer of data to third countries
The hosting provider’s browsing logs are processed on servers located within the European Union. The measurement data referred to in section 2.3 is processed by Cloudflare, Inc. (United States). The transfer is based on the European Commission’s Standard Contractual Clauses set out in Cloudflare’s Data Processing Addendum.
6. Data subject rights
The data subject has the right to:
- access their personal data (Art. 15 GDPR);
- obtain rectification (Art. 16) or erasure (Art. 17);
- obtain restriction of processing (Art. 18);
- obtain, where applicable, notification of rectification or erasure or restriction of processing (Art. 19);
- obtain data portability, where applicable (Art. 20);
- object to processing on grounds relating to their particular situation (Art. 21);
- not be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects (Art. 22). The Website does not carry out automated decision-making of that kind.
Requests should be addressed to contact@one.vi.it or to the certified e-mail address one.bassano@legalmail.it. The Controller will respond within one month, which may be extended by a further two months in cases of particular complexity.
The data subject also has the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). The Italian supervisory authority is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy — garante@gpdp.it — www.garanteprivacy.it.
7. Changes
Any updates to this privacy policy will be published on this page with an indication of the new effective date. Previous versions are kept by the Controller and are available upon request.