Privacy Policy

The data controller is SERVICES HUB SRL, registered at Via F. Guglielmino 31, 95125 Catania CT, Italy — VAT IT06169490874. For any privacy-related requests, contact us at: privacy@velogest.com

We collect the following personal data: • **Contact data**: name, surname, email, phone, company — voluntarily provided through demo request or contact forms. • **Browsing data**: IP address, browser, device, pages visited, session duration — collected via technical cookies and, with your consent, analytics cookies. • **Platform usage data**: for registered users, data related to platform usage (bookings, services, accounting) necessary for service delivery.

Your data is processed for the following purposes: • **Contract execution**: delivery of the management platform service, technical support, account management. • **Commercial requests**: responding to demo requests, quotes and information submitted through website forms. • **Service communications**: sending technical notifications, platform updates, security communications. • **Analysis and improvement**: with your consent, anonymized web traffic analysis to improve the site and service. • **Marketing**: with your explicit consent, sending commercial and promotional communications.

Processing of your data is based on: • **Consent** (Art. 6.1.a GDPR): for analytics cookies, marketing and promotional communications. • **Contract execution** (Art. 6.1.b GDPR): for delivering the management platform service. • **Legitimate interest** (Art. 6.1.f GDPR): for platform security and fraud prevention. • **Legal obligation** (Art. 6.1.c GDPR): for tax and accounting compliance.

Personal data is retained for the time necessary to fulfill the purposes for which it was collected: • **Contractual data**: for the duration of the contract + 10 years (tax obligations). • **Contact data (leads)**: 24 months from last contact. • **Browsing data**: 26 months (standard Google Analytics duration). • **Backups**: 7-day retention with automatic deletion.

Your data is NOT sold to third parties. It may be shared with: • **Technical service providers**: hosting (EU data centers), transactional email, payment processing (Stripe). • **Google Analytics**: anonymized browsing data (only with your consent). • **Competent authorities**: when required by law. All providers are selected for GDPR compliance and act as data processors.

Under GDPR you have the right to: • **Access**: obtain confirmation of processing and a copy of your data. • **Rectification**: correct inaccurate or incomplete data. • **Erasure**: request deletion of your data ("right to be forgotten"). • **Restriction**: restrict processing in certain cases. • **Portability**: receive your data in a structured, machine-readable format. • **Objection**: object to processing based on legitimate interest or marketing. • **Withdraw consent**: withdraw your consent at any time. To exercise these rights, write to: privacy@velogest.com You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it).

We implement appropriate technical and organizational measures to protect your data: • End-to-end encryption for sensitive data • Two-factor authentication (2FA) • Automatic nightly backups with 7-day retention • Complete audit log of every access and modification • Servers hosted in GDPR-compliant European data centers • Data access restricted to authorized personnel only

Your data is processed and stored within the European Union. Where services involve transfers to third countries (e.g., Google Analytics), we ensure appropriate safeguards are in place pursuant to Articles 46-49 of the GDPR.