Privacy notice & B2B service status.
This notice explains how data are processed across ospivia.it, our licensed diagnostic APIs, and the B2B proposal request form.
1. Data processed
Ospivia uses zero advertising pixels, behavioral cookies, or third-party tracking scripts. Diagnostic scanner endpoints (/api/scan) are restricted to authenticated license holders.
When you submit the B2B inquiry form, we process your work email address, company/property name, public domain, selected tier, and a one-way cryptographic hash of the connecting IP solely for abuse rate limiting in Cloudflare D1. Please do not submit passwords, guest personal data, reservation codes, or payment credentials.
2. Legal bases & purposes
Inquiry data are processed exclusively to assess technical feasibility on your domain and provide a written commercial proposal under GDPR Article 6(1)(b) (pre-contractual steps at your request) or Article 6(1)(f) (legitimate interest in answering B2B inquiries). Security logs rely on Article 6(1)(f). Data are never sold or used for unsolicited marketing lists.
3. Infrastructure & subprocessors
The platform runs on Cloudflare Pages and Cloudflare D1 under Cloudflare’s Data Processing Addendum and declared subprocessors. Inquiry notifications to commerciale@ospivia.it are routed via Resend Inc. under Standard Contractual Clauses, and @ospivia.it email hosting is operated by OVHcloud.
4. Retention & rights
B2B inquiries are retained for up to 12 months from the last exchange unless earlier erasure is requested. You may request access, rectification, erasure, restriction, or objection at any time by writing to commerciale@ospivia.it, or lodge a complaint with the Italian Data Protection Authority (Garante).