Privacy and cookie notice

Data controller

The data controller is Karstia, which develops and operates EVIDEVO.

For any request about personal data: [email protected].

Data collected and purposes

Presentation requests. Full name, work email, company, role, frameworks of interest and any message, used to reply to the request and organise the presentation. Legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR).

NIS2 check. Full name, business email, company, role, the outcome of the check and, if completed, the readiness levels, used to send a copy of the result and for any follow-up about it. Answers to the questions are processed in the browser: only contact details and the result reach the server. Legal basis: pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR). Regulatory updates are sent only with express consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time by writing to [email protected].

Email contacts. Data contained in messages sent to the published addresses, for the same purpose and on the same legal basis.

Technical browsing data. IP address and technical information logged by the systems serving the site, for security and service operation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Retention

Request data is kept as long as needed to handle the request and, if no contractual relationship follows, no longer than 24 months. Technical data is kept for short periods, unless needed for security.

Recipients

Data is processed by authorised Karstia staff and by providers acting as processors: the site hosting and delivery service and the email service. Some providers may process data outside the European Union, under the safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses. The current list is available on request.

Rights

Access, rectification, erasure, restriction or portability of data can be requested at any time, as well as objection to processing (Arts. 15–22 GDPR), by writing to [email protected]. A complaint can also be lodged with the competent data protection authority.

Cookies

The site uses a single technical cookie, evidevo_lang, which remembers the chosen language for one year. It uses no profiling cookies and no analytics tools that track people. Technical cookies do not require consent.

Data processed in the platform

This notice covers the website. Data entered by customers into the EVIDEVO platform is processed under the data processing agreement signed with each customer.