Skip to main content

Privacy Policy

Last updated: March 2026

1. Data Controller

The Data Controller for personal data processing is FLIT Advisory S.r.l., with registered office in Milan, Italy (hereinafter "FLIT Advisory", "we" or "the Controller").

For any questions regarding personal data processing, you may contact us at: privacy@flitadvisors.com.

2. Types of Data Collected

In the course of providing its services and managing the website, FLIT Advisory may collect the following categories of personal data:

  • Identification and contact data: name, surname, email address, phone number, company name, voluntarily provided through the contact form.
  • Browsing data: technical data automatically collected during website navigation, such as anonymized IP address, browser type, operating system, pages visited, and visit duration.
  • Service-related data: information provided in the context of consulting engagements, including business data and relevant documentation.

3. Purposes of Processing

Personal data is processed for the following purposes:

  • Responding to contact requests and providing information about our services.
  • Delivery of consulting services requested by the client.
  • Compliance with legal, accounting, and tax obligations.
  • Aggregated and anonymous statistical analysis of website usage to improve functionality and user experience.
  • Protection of the Controller's rights in judicial or extrajudicial proceedings.

4. Legal Basis for Processing

Pursuant to Art. 6 of Regulation (EU) 2016/679 (GDPR), the processing of personal data is based on the following legal grounds:

  • Consent (Art. 6(1)(a)): for sending informational and promotional communications, where expressly requested.
  • Contractual performance (Art. 6(1)(b)): for the delivery of consulting services and management of the contractual relationship.
  • Legal obligation (Art. 6(1)(c)): for compliance with obligations under applicable law.
  • Legitimate interest (Art. 6(1)(f)): for anonymous statistical analysis of web traffic and protection of the Controller's rights.

5. Data Retention

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, in accordance with the following criteria:

  • Contact data: retained for a maximum of 24 months from collection, unless a contractual relationship is established.
  • Contractual data: retained for 10 years from the end of the relationship, in compliance with civil and tax law obligations.
  • Browsing data: retained in anonymized and aggregated form for a maximum of 26 months.

6. Your Rights

As a data subject, you have the right to exercise the following rights under the GDPR (Arts. 15-22):

  • Right of access: obtain confirmation of processing and access your data.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your data in cases provided by law.
  • Right to restriction: request restriction of processing.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to the processing of your data on legitimate grounds.
  • Right to withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please send a request to privacy@flitadvisors.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Cookies

The website uses only technical cookies necessary for operation and anonymized analytics cookies through Umami Analytics, a privacy-first platform compliant with GDPR that does not use profiling cookies and does not track users across different websites.

For more information, please consult our Cookie Policy.

8. Data Transfers

Personal data is processed and stored within the European Economic Area (EEA). Should a transfer to third countries become necessary, it will be carried out exclusively in compliance with the safeguards provided by the GDPR (adequacy decisions, standard contractual clauses, or other appropriate safeguards).

9. Security Measures

FLIT Advisory adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit, access controls, and regular backup procedures.

10. Contact

For any questions or requests regarding this privacy policy or the processing of personal data, you may contact our Data Protection Officer (DPO) at:

Email: dpo@flitadvisors.com

Address: FLIT Advisory S.r.l., Milan, Italy