Privacy Policy

Who processes your data

The data controller is Best Tech Partner SRL, Via Lodovico Il Moro, 133, 20142 Milano (MI), Italy, VAT 13224220965.

For anything concerning your personal data, including the rights described below, write to [email protected].

What we collect

This site collects very little, and only when you send it yourself.

Data you provide

Filling in one of the contact forms sends us your name and email address. The phone number is optional and the form does not ask for it: we offer you the option on the thank-you page after you have sent the enquiry. If you leave it, we attach it to the enquiry you just sent; if you do not, we reply by email. To match the number to the right enquiry your browser holds a random, meaningless code for the length of the session; it contains none of your data, it is not a cookie, and it disappears when you close the tab.

The Italian newsletter is not offered on the English pages.

The Contact page also has an optional message field for describing the role you need to fill; whatever you write there is handled together with the rest of the enquiry.

We ask for no special category data (Art. 9 GDPR), and you do not need to name your employer. Please do not put third parties' personal data or confidential information in the message field unless it is needed to assess the enquiry.

Data collected automatically

Alongside the form we record the page the request came from and the country code of the connection, so we know where enquiries originate. The country code comes from our hosting provider's network: your IP address is never read or stored by our systems.

To prevent automated submissions, the form applies a per-connection rate limit. The count is tied to a code derived from your IP address through a one-way cryptographic function: it cannot be turned back into the address, it is not linked to the contents of your enquiry, and it expires automatically after one hour. Here too, the IP address itself is not retained.

Our hosting provider also generates technical connection logs, needed to deliver and protect the service. We do not use them for profiling.

Confirmation email

When you send an enquiry we send a single acknowledgement email to the address you gave us. It is not a marketing message, it does not subscribe you to anything, and no further automated emails follow it.

What we do not collect

The site has no application form and accepts no CV uploads, and is not a channel for sending CVs — see Applications and CVs.

Why we process your data, and on what legal basis

You do not need to give consent to contact us. When you write through the form, processing what you type is necessary to reply to you: that is the Art. 6(1)(b) basis, not a consent you could refuse while still receiving the service. This is why there is no tick-box.

We do not use your data for automated marketing or profiling, and we take no decisions about you based solely on automated processing.

How long we keep it

• Contact enquiries: 24 months from our last exchange, then deleted. If the enquiry leads to a contract, statutory retention periods for contractual and accounting records apply (10 years under Art. 2220 of the Italian Civil Code).
• Hosting provider technical logs: kept for as long as service security requires, and in any case for a limited period, under the provider's policies.
• CVs: not retained at all. We do not collect CVs through this site and do not keep any that reach us — see Applications and CVs.

You can ask us to delete your data at any point before those periods expire.

Who else processes your data

Your data is available to authorised staff at Best Tech Partner SRL. We do not sell it, trade it, or disclose it to third parties for marketing.

We use the following providers, appointed as processors under Art. 28 GDPR:

For traffic and campaign measurement we also use Google Ireland Limited (Google Tag Manager, Google Analytics 4, Google Ads) and Microsoft Corporation (Clarity, session recording), appointed as processors, and only after your consent: see the Cookies section.

One of the mailboxes that receives enquiries is hosted on Gmail, provided by Google Ireland Limited. Google is not one of our processors: it is that mailbox's email provider, and in that capacity it handles the content of the message you send us — name, email address, phone number and text — under its own terms and privacy policy, which may involve a transfer of data outside the EEA. We tell you because you should know where what you write ends up, even where the choice of provider is not one we made on your behalf.

Data may also be disclosed to advisers, professionals and authorities where necessary to meet a legal obligation or to establish, exercise or defend a legal claim.

Transfers outside the European Economic Area

The providers above are based in the United States, so some processing may involve a transfer of data outside the EEA. Such transfers rely on the Standard Contractual Clauses adopted by the European Commission (Art. 46 GDPR) and the supplementary safeguards set out in the respective data processing agreements.

You can request a copy of the safeguards in place by writing to [email protected].

Cookies and similar technologies

This site uses measurement cookies, and only after your consent. On your first visit a banner appears with two equivalent choices, accept and refuse: until you choose, none of these cookies is set and no data reaches Google. If you refuse, the site works exactly as before — you lose no functionality.

If you accept, Google Tag Manager loads, which in turn enables Google Analytics 4 for readership statistics and Google Ads conversion tracking, that is, checking which ads lead to an enquiry. Google Analytics runs with IP anonymisation and with Google signals disabled, so the data does not feed Google's advertising audiences.

Session recording. Again only after your consent, we use Microsoft Clarity (Microsoft Corporation), which goes beyond counting visits: it records how you interact with the page — pointer movement, clicks, scrolling, resizing — and reconstructs a replay of the session and heatmaps from it. We use it to find where pages are confusing, not to identify you: Clarity masks text typed into form fields by default, so what you write in the contact form does not enter the recordings. Refuse cookies and no session is recorded.

You can change your mind at any time from the “Cookie preferences” link at the foot of every page. Withdrawing consent prevents further processing; to delete cookies already set, use your browser settings.

We embed no social widgets that track browsing, and we do not sell data to advertising networks.

One exception, and you choose it: on the Contact page the map of our office is provided by Google and is not loaded automatically. A panel with a button appears instead; until you press it, no data reaches Google. If you do press it, Google receives your IP address and browser data and may set its own cookies, under Google's privacy policy. Reloading the page returns it to the unloaded state.

Should we enable a cookie-based analytics tool in future, a banner would appear letting you accept or refuse with equal ease, and nothing would be set before you choose. Strictly necessary technical cookies, if introduced, require no consent under Art. 122 of the Italian Privacy Code.

Applications and CVs

Best Tech Partner recruits on behalf of client companies, but this site is not an application channel. We host no candidate forms, accept no CV uploads, and collect no CVs through these pages.

Please do not send us unsolicited CVs, by email or through the contact forms. We do not add them to any database, do not use them for recruitment, and do not pass them to client companies: any CV that does reach us is deleted without being retained.

If you are looking for work, open roles are posted on the recruitment platforms we work with — Indeed and Glassdoor — and on our LinkedIn page. Applications are collected and handled there, with the relevant privacy information provided at the point of application.

Your rights

At any time you may exercise the rights set out in Arts. 15-22 GDPR:

• Access — find out whether we process data about you, and obtain a copy.
• Rectification — have inaccurate data corrected or incomplete data completed.
• Erasure — ask for your data to be deleted, in the cases the law provides.
• Restriction — ask for processing to be suspended pending a check.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interest.
• Withdrawal of consent — where processing rests on consent, withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise them, write to [email protected]. We will reply without undue delay and in any case within one month, as Art. 12 GDPR requires. Exercising your rights is free of charge.

Complaints to a supervisory authority

If you believe the processing of your data breaches the GDPR, you may lodge a complaint with the Italian Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or with the supervisory authority of the Member State where you live or work. You may also bring the matter before a court.

Changes to this notice

We may update this notice to reflect changes to our services or legal obligations. The date at the top always shows the latest revision. Where changes materially affect how we handle your data, we will make that clear.