Social DevPrivacy policy
Last updated: 2 November 2026
Controller and contact
The controller is CBF E-Social S.R.L., Via Borgoratto 26, 27031 Candia Lomellina (PV), Italy, VAT number 02773120189. For privacy questions or to exercise your rights, email cbfesocial@gmail.com. The website developer can be contacted at cbfdigitalagency@gmail.com.
Visiting the site and security
The site uses Cloudflare Workers for hosting and content delivery. To operate and secure the service, providers may process your IP address, timestamp, requested URL and browser or device information. We use this information to deliver the site, manage the network and prevent abuse. The legal basis is the controller’s legitimate interest, Article 6(1)(f) GDPR.
When you explicitly request access to the protected phone or WhatsApp contact, the site loads Cloudflare Turnstile. Cloudflare may receive your IP address, user agent and TLS and browser security signals; the server checks the token through Siteverify before revealing the contact. The verified contact remains in page memory for five minutes. Chat text is not sent to Cloudflare Turnstile.
Cloudflare’s notice describes it as a processor for Turnstile security and a separate controller for its own improvement. Providers’ technical retention periods depend on contractual and configurable terms and remain to be verified.
Contact and external services
The site includes a request configurator and has no newsletter. Email, telephone and WhatsApp links open only on your click and do not automatically send chat text.
If configurator submission is enabled and you press Send, your name, email, project details and optional attachments are sent through FormSubmit.co to cbfdigitalagency@gmail.com so we can respond. While submission is disabled, the form transmits no data. Do not send passwords, identity documents or sensitive data; the chat conversation is not automatically attached.
FormSubmit states that it retains text submissions for 30 days; uploaded files are not retained or accessible in its submission archive. This does not determine retention in the recipient’s mailbox. Mailbox retention, processing locations, further providers and applicable safeguards still need to be defined and verified.
If you contact us, we use the information you choose to provide to reply and manage the relationship. The legal basis is taking pre-contractual steps at your request under Article 6(1)(b), where applicable; otherwise it is our legitimate interest in responding under Article 6(1)(f). Applicable legal obligations rely on Article 6(1)(c). Contact information is kept for the time needed to respond, manage the relationship and meet legal requirements; the controller still needs to set the applicable periods.
Chat and local storage
The FAQ chat uses deterministic rules and predefined answers, not generative AI or a web AI API. Messages remain only in browser memory, are not sent to the backend and are removed on refresh or when you clear the chat. Please do not enter passwords or confidential information.
The site uses local technical storage for notices and offline copies, even without installation. It embeds no separate visitor-analytics or marketing tools, social widgets or personalised advertising; fonts are local. Cloudflare may provide aggregate technical metrics about Turnstile checks. The cookie policy explains logical durations and removal.
Recipients, transfers and your rights
Technical providers process information to deliver the service; external services handle information according to their own roles and policies. Transfers outside the European Economic Area are possible. The controller must verify provider agreements and applicable international transfer safeguards.
You can request access, rectification, erasure or restriction and, where applicable, portability. You can object to processing based on legitimate interests. Contact cbfesocial@gmail.com. You may also complain to the Italian data protection authority, Garante, or the competent authority in a member state.