Privacy & Cookie Policy

1. Data controller

The data controller is Service ABA Srls, Via Casale snc, 19037 Santo Stefano di Magra (SP), Italy, VAT IT01551000118 (brand: Hell-Sea).

Contact for any privacy request: info@hellsea.it.

2. Data we collect and why

• Contact form: name, company, email, application details and message. Used only to reply to your request and prepare a quote. Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)). Retention: requests are stored for 24 months from receipt and then deleted; if a business relationship follows, data needed for it is kept for the applicable legal retention periods.
• Anti-spam: the contact form uses Cloudflare Turnstile, which processes technical signals (such as IP address and browser data) to tell humans from bots. Legal basis: legitimate interest in protecting the site from abuse.
• Audience statistics (Cloudflare Web Analytics): aggregated, cookie-free measurement of visits. It does not track individual users across sites.
• Audience statistics (Google Analytics 4): used only if you accept analytics cookies. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Server logs: our hosting provider (Vercel) processes technical data such as IP address and requested URL for security and delivery of the site.

3. Cookies and similar technologies

Technical cookies and storage (for example those set by Cloudflare Turnstile on the contact page) are necessary for the service and do not require consent.

Google Analytics 4 sets analytics cookies (such as _ga) to measure how the site is used, for example pages visited, time on site and the origin of visits. These are used only after you give consent through the cookie banner. Until then, no analytics cookies are set.

You can change or withdraw your choice at any time from the "Cookie settings" link in the footer, and delete cookies from your browser settings.

4. Recipients and international transfers

Data is processed by providers acting on our behalf: Vercel Inc. (hosting), Cloudflare, Inc. (Turnstile and Web Analytics), Supabase (database where contact requests are stored, hosted in the European Union), Resend (delivery of contact form emails) and, if you consent, Google Ireland Ltd / Google LLC (Google Analytics 4).

Some of these providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses, as applicable.

We do not sell your personal data.

5. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing (Arts. 15–22 GDPR), and withdraw consent at any time without affecting the lawfulness of prior processing. Write to info@hellsea.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

6. Changes

We may update this notice when our processing changes. The date of the last update is shown at the top of this page.