Privacy Notice
QuickStart² S.r.l. | Last updated: 13 August 2026
1. Data Controller
QuickStart² S.r.l., Via Cecilio 2, 22100 Como (CO), Italy – VAT IT04062580131. Email: [email protected] – PEC: [email protected]
Privacy contact: Leonardo Guerra, [email protected]
This notice, provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), describes how QuickStart² S.r.l. ("QuickStart²") processes personal data when acting as a data controller.
2. When we act as a processor on behalf of our customers
In delivering ERP implementation and support services, QuickStart² may access personal data contained in its customers' systems (for example, employee user accounts or business contacts of the customer's suppliers and customers). For such data, QuickStart² acts as a data processor on behalf of the customer, under a data processing agreement pursuant to Art. 28 GDPR, and processes it only on the customer's documented instructions. For information on that processing, data subjects should refer to the privacy notice of the relevant customer, which is the data controller.
3. Data we process as a controller, purposes and legal bases
Representatives of customers, prospects, suppliers and partners. Identification and business contact data (name, company, role, business email and telephone), collected directly from you or from your organisation. Purposes: negotiation, conclusion and performance of contracts; project communication and administration; invoicing, accounting and other legal obligations; maintaining business relations. Legal bases: performance of a contract or pre-contractual measures (Art. 6(1)(b)); compliance with legal obligations (Art. 6(1)(c)); legitimate interest in managing business relationships (Art. 6(1)(f)).
Website visitors and enquiries. Technical navigation data (such as IP addresses and access logs) is processed for the operation and security of the website (legitimate interest, Art. 6(1)(f)). The website uses only technical cookies strictly necessary for its operation; no profiling cookies are used. Data you provide when contacting us (by email or through the website) is processed to respond to your enquiry (pre-contractual measures and legitimate interest).
Job applicants. Data contained in CVs and applications is processed for recruitment purposes (pre-contractual measures, Art. 6(1)(b)); any special categories of data spontaneously provided are processed in accordance with applicable law.
4. Recipients
Personal data is processed by authorised QuickStart² personnel bound by confidentiality obligations, and may be shared with: providers of IT services (email, collaboration, hosting, ticketing) acting as processors under Art. 28 GDPR; professional advisors (legal, accounting); banks for payment purposes; and public authorities where required by law. Personal data is not sold and is not disclosed to third parties for their own marketing purposes.
5. Transfers outside the EU/EEA
Personal data is stored primarily within the EU/EEA. Where service providers involve transfers to third countries, such transfers take place under the safeguards of Art. 46 GDPR (adequacy decisions or Standard Contractual Clauses).
6. Retention
Contract and accounting data: 10 years after contract termination, per Italian statutory retention. Business contact data: for the duration of the business relationship and up to 24 months of inactivity, or until objection. Enquiries: up to 12 months after the last contact. Job applications: up to 12 months. Website technical logs: up to 6 months, unless required for security investigations.
7. Your rights
You have the right to access, rectify, erase, restrict and port your personal data, and to object to processing (Arts. 15-22 GDPR), as well as to withdraw consent where processing is based on consent. Requests may be addressed to [email protected]. You may also lodge a complaint with the Italian supervisory authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) or with the authority of your place of residence.
8. Provision of data and automated decision-making
Providing the data required for contractual purposes is necessary to establish and perform the relationship; refusal may prevent it. QuickStart² does not carry out automated decision-making or profiling.