Privacy Policy
Last updated: 28 October 2026
This notice is provided under Article 13 of Regulation (EU) 2016/679 ("GDPR") to visitors of bussolacapital.it and to anyone who contacts us through the "Contact Us" form. It explains which personal data we process, why, on what legal basis, and which rights you have. In case of discrepancies, the Italian version prevails.
1. Data controller
Bussola Capital S.r.l.
Registered office: Via Lorenzo Mascheroni, 5, 20123 Milano (MI), Italy
VAT number: 14818860968
Email: management@bussolacapital.it
For any privacy request you can write to the email address above.
2. Data we process
a) Data provided through the "Contact Us" form
Full name, email address, subject and text of the message, plus any further data you choose to include in the message. Please do not include special categories of data (for example health data).
b) Browsing data
The systems running the website collect, in their normal operation, some technical data whose transmission is implicit in the use of Internet protocols: IP address, date and time of the request, page requested, browser type and operating system. These data are recorded in the hosting provider's logs and are used to keep the website working and secure; they are not used to identify or profile visitors.
c) Language preference
The website stores the language you choose (Italian or English) on your device. Details are in the Cookie Policy.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to requests sent through the contact form or by email and handling the related correspondence | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and the controller's legitimate interest in following up on the contacts received (Art. 6(1)(f) GDPR) |
| Keeping the website working, secure and protected against abuse (browsing data) | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Establishing, exercising or defending legal claims, where necessary | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
Providing the form data is optional, but without it we cannot reply to your request. The data are not used for marketing, automated decision-making or profiling.
4. How data are processed and recipients
Data are processed electronically, with appropriate security measures, and are accessible only to Bussola Capital's partners and authorised collaborators. Data are not disclosed or sold to third parties. The following providers may access them, acting as processors (Art. 28 GDPR) or as independent controllers:
- Netlify, Inc. (United States): website hosting, recording of browsing data, and receipt/storage of messages sent through the form (Netlify Forms). Netlify privacy policy.
- Microsoft Ireland Operations Limited (Ireland): Microsoft 365 email service, through which we receive form notifications and handle correspondence. Microsoft privacy statement.
5. Transfers outside the EU
Netlify is based in the United States. Transfers rely on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR), included in Netlify's Data Processing Agreement, and on Netlify's participation in the EU-U.S. Data Privacy Framework, covered by a Commission adequacy decision (Art. 45 GDPR). Microsoft processes the data of its European Microsoft 365 customers within the European Union; any transfers to the United States are covered by the same safeguards.
6. Retention
- Contact form data and related correspondence: for as long as needed to handle the request and in any case no longer than 24 months from the last contact, unless the relationship continues or retention is needed to protect a right.
- Browsing data: for as long as strictly necessary for operation and security purposes, in line with the hosting provider's log retention policies.
7. Your rights
At any time you can exercise the rights under Articles 15-22 GDPR: access to your data, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. To exercise them, write to management@bussolacapital.it; we will reply within one month of your request.
8. Complaints
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.
9. Changes
This notice may be updated. The version in force is always published on this page, with the date of the last update.