Privacy Policy
Last updated: 5 August 2026
This privacy notice is provided pursuant to Articles 13 and 14 of Regulation EU 2016/679 and describes how the personal data collected through the techcorp.it site, the contact form and the communications linked to the consulting, activation, training and support services is processed.
1. Data Controller
NRC Company SRL
TechCorp is a brand of NRC Company SRL
Registered office: Via degli Ottoboni 16, Milan, Italy
TechCorp operational office: Rome, Italy
VAT number: IT14804430966
General email: info@techcorp.it
Requests concerning personal data: privacy@techcorp.it
A Data Protection Officer has not been appointed, as the mandatory conditions set out in Article 37 GDPR do not apply. Any request concerning personal data may be addressed to the contact details indicated above.
2. Scope of application
This privacy notice concerns the techcorp.it site and the processing that derives directly from it. It does not concern the third party software presented on the site, which remains subject to the privacy notices and conditions of the respective manufacturers. When a solution is activated at a client, the processing of the data entered in the software is governed by a separate agreement and, where applicable, by a deed appointing the data processor.
3. Categories of data processed
| Category | Data | Source |
|---|---|---|
| Contact details | First name and surname, email address, telephone number, company or practice | Provided by the data subject through the form or by email |
| Content of the request | Solution of interest, description of the business, of the operational problem and of the desired outcome | Provided by the data subject |
| Technical browsing data | IP address, browser and device type, operating system, referring page, date and time of the request | Collected automatically from the logs of the server hosting the website |
| Support data | Description of the malfunction, screenshots and attachments sent by the client through the agreed channels | Provided by the client |
No special categories of data under Article 9 of the GDPR are requested, nor data relating to criminal convictions or offences. Data subjects are asked not to enter data of this kind in the free text fields of the form.
4. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to requests for information, quotations or demos | Article 6.1.b GDPR: precontractual measures taken at the request of the data subject | 24 months from the last meaningful contact, unless the request develops into a contractual relationship |
| Management of the contractual relationship for software resale, consulting, training and support | Article 6.1.b of the GDPR: performance of a contract | For the entire duration of the relationship and subsequently within the ordinary limitation periods |
| Accounting, tax and administrative compliance obligations | Article 6.1.c GDPR: legal obligation | 10 years, as required by Italian civil and tax law |
| Website security, abuse prevention and technical diagnostics | Article 6.1.f of the GDPR: legitimate interest of the Data Controller in protecting its own infrastructure | Technical logs retained for a maximum of 12 months |
| Establishment, exercise or defence of a legal claim in court | Article 6.1.f of the GDPR: legitimate interest of the Data Controller | Until the proceedings are concluded and the time limits for appeal have expired |
No unsolicited direct marketing is carried out. Any future commercial communications will be sent only with free, specific and revocable consent, or within the limits set out in Article 130, paragraph 4, of the Italian Privacy Code for products similar to those already purchased.
5. Nature of the provision of data
Providing the data marked as required in the form is necessary in order to receive and handle the request. Without this data the form cannot be submitted and no reply can be given. Providing the other data is optional and serves only to make the reply more relevant.
6. Recipients and data processors
The data may be accessed by authorised staff of the Data Controller, instructed pursuant to Article 29 of the GDPR, and disclosed to the parties listed below, appointed as data processors pursuant to Article 28 of the GDPR where the relevant conditions apply.
| Recipient | Activities | Role |
|---|---|---|
| Hosting provider for the website | Storage of the site files and the server logs | Data Processor |
| FormSubmit | Forwarding of the messages submitted through the contact form to the Data Controller’s email inbox | Data processor or independent controller according to its own terms |
| Email service provider | Receipt, storage and management of correspondence | Data Processor |
| Accounting, tax and legal advisers | Administrative compliance obligations and protection of rights | Independent controllers or processors, depending on the engagement |
| NRC Company group companies | Shared administrative and support functions | Independent data controllers or data processors according to the internal agreement |
Data is not disseminated or transferred to third parties for marketing purposes. An up to date list of data processors can be requested by writing to privacy@techcorp.it.
7. Transfers outside the European Economic Area
Some technical suppliers may be based, or hold infrastructure, outside the European Economic Area. In particular, the FormSubmit service used to send the contact form may involve a transfer to the United States. In these cases the transfer takes place on the basis of an adequacy decision of the European Commission, or on the basis of the standard contractual clauses adopted pursuant to Article 46 of the GDPR, supplemented where necessary by additional measures. Anyone who prefers not to rely on this service may write directly to info@techcorp.it without filling in the form.
8. Security measures
The website is served exclusively over an encrypted HTTPS connection. Access to the systems that store the requests is restricted to authorised personnel and protected by individual credentials. Technical and organisational measures appropriate to the risk are adopted pursuant to Article 32 GDPR, including system updates, permission management based on the principle of least privilege and written instructions to personnel.
9. Automated decision making and profiling
No automated decision making, including profiling, is carried out that produces legal effects concerning the data subject or that similarly significantly affects them within the meaning of Article 22 GDPR.
10. Unsolicited applications
Anyone sending a curriculum vitae to the published addresses consents to the processing of the data it contains for the sole purpose of assessing the application, pursuant to Article 6.1.b of the GDPR, in order to take steps at the request of the data subject prior to entering into a contract. Unsolicited curricula are retained for a maximum of 12 months and are then deleted, unless the candidate indicates otherwise. Candidates are asked not to include in the curriculum any data belonging to special categories, which are not requested and are not relevant to the assessment.
11. Minors
The website is addressed to businesses, professionals and organisations. The services are not intended for minors and personal data of minors is not knowingly collected. Should such data be identified, it will be erased without delay.
12. Rights of the data subject
Within the limits and under the conditions set out in Articles 15 to 22 GDPR, the data subject has the right to:
- obtain confirmation as to whether processing is taking place and access their personal data;
- obtain the rectification of inaccurate data and the completion of incomplete data;
- obtain erasure of the data in the cases provided for by Article 17;
- obtain restriction of processing in the cases provided for by Article 18;
- receive, in a structured and commonly used format, the data processed by automated means on the basis of the contract or of consent, and transmit it to another controller;
- object at any time to processing based on legitimate interest, on grounds relating to their particular situation;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Requests should be sent to privacy@techcorp.it. The Data Controller replies without undue delay and in any case within one month of receipt, a term that may be extended by a further two months in the case of complex or numerous requests, with notice given to the data subject. In order to act on the request, it may be necessary to verify the identity of the applicant.
13. Complaint to the supervisory authority
A data subject who considers that the processing of their data infringes the GDPR has the right to lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or to bring proceedings before the competent judicial authority. The authority’s current contact details are published on the website garanteprivacy.it.
14. Third party data and support material
Access credentials, data belonging to special categories and personal information about third parties that is not necessary for the request must not be entered in the public form. Screenshots and documents sent for support purposes must be kept to the strict minimum and, where possible, stripped of irrelevant data. Anyone sending data relating to third parties warrants that they are entitled to do so and undertakes to provide those data subjects with the required privacy notice.
15. Cookies and similar technologies
Information on the storage technologies used by the site is set out in the Cookie Policy, which forms an integral part of this privacy notice.
16. Amendments to this notice
This privacy notice may be updated to reflect regulatory, technical or organisational changes. The version in force is always the one published on this page, together with the date of the latest update. Should substantial changes affect processing already under way, data subjects will be informed by appropriate means.