How we handle the data
this site collects.
This notice covers ONLY the data we collect from eventhea.com — that is, the contact form. Data about people using the Eventhea application is a different matter, with documents of its own.
First published: 06/08/2026·Last updated: 06/08/2026
1. Who handles your data
The controller for the data collected through this site is:
Promethea S.r.l.
Via Flavia 82, 34148 Trieste (TS) — Italia
VAT no. IT01417350327
For privacy matters: privacy@prometheasrl.it
Certified email: promethea@legalmail.it
2. What we collect, and why
We only collect what you type into the contact form. The site has no analytics, no advertising, and collects nothing while you browse it.
Contact form data
| Data | Required | Why we need it |
|---|---|---|
| Organisation | Yes | To understand who is writing and what kind of organisation we're talking to |
| Yes | To reply: it's the one address we can be sure works | |
| Full name | No | To know who we're talking to instead of addressing a company |
| Phone | No | To call you back, if you'd rather talk than write |
| Message | No | To answer your question rather than a generic one |
| Reason for the request | No | To route the request to the right person (information or partnership) |
There are no hidden fields: what you see in the form is everything that gets sent.
3. On what legal basis
Your consent
We process this data on the basis of the consent you give by ticking the box before submitting the form (art. 6.1.a GDPR). Without that tick the form doesn't send, and if you don't write to us we hold no data about you at all.
You can withdraw your consent at any time, without explaining why, by writing to privacy@prometheasrl.it.
What we do with it
- We reply, within 24 working hours
- We call you, if you left a number and prefer that
- We record the request in our CRM as a commercial contact (see section 4)
- We send you the information about Eventhea relevant to what you asked
What we do NOT do: automated profiling, passing your data to third parties, sending advertising or newsletters you didn't ask for.
4. Where it ends up, and for how long
The form writes to a CRM, not to an inbox
When you submit the form the data doesn't become an email: it is recorded as a commercial contact (a «prospect») in the Promethea Account CRM, the system Promethea S.r.l. uses across all its applications. The controller is unchanged — it's our own archive, not a third party's. If you had written before, the new request is added to the existing record instead of creating a second one. At the same time our team receives an internal notification containing the request: it travels encrypted to the recipient's device, so the service that delivers it cannot read it.
How long we keep it
We keep the contact for as long as it takes to handle your request, and in any case no longer than 12 months from the last contact — unless a contractual relationship begins in the meantime (in which case contract retention applies) or the law requires otherwise. You can ask for immediate deletion at any time.
How we protect it
- All traffic on the site and the form travels over HTTPS, i.e. encrypted
- Data is stored on Supabase, on servers in the West EU region (Ireland): it stays inside the European Union
- Access is limited to authorised Promethea staff
- We don't share your data with anyone for commercial purposes
External processors
For storage and technical management we rely on two external suppliers, appointed as processors under art. 28 GDPR:
Supabase Inc. — database and CRM infrastructure. Data processed: what you enter in the form. Servers: West EU region, Ireland. Supabase Inc. is based in the United States, but the data does not leave the European Union. Privacy policy: supabase.com/privacy
Aruba S.p.A. — hosting for this site. Data processed: the web server access logs, which include the IP address of anyone visiting the pages. Company and servers: Italy. Privacy policy: aruba.it/informativa-privacy
No other supplier has access to your personal data. If one were ever added, it would appear here before processing began.
5. Your rights
Regulation (EU) 2016/679 gives you the right to:
- Access — know whether we process data about you and receive a copy
- Rectification — have inaccurate or incomplete data corrected
- Erasure — have it removed (the «right to be forgotten»)
- Restriction — ask that it only be stored and not used
- Objection — object to the processing
- Portability — receive it in a format another system can read
- Complaint — complain to the Italian Data Protection Authority (garanteprivacy.it)
To exercise any of these rights, write to privacy@prometheasrl.it. We answer within 30 days.
6. Cookies and tracking
This site uses no cookies
There are no technical cookies, no profiling cookies, no advertising and no analytics tool of any kind: no browsing data is collected or sent anywhere. That's why you don't see a consent banner — there would be nothing to consent to.
Two things saved on your device
The site uses the browser's «localStorage» to remember two preferences. They stay on your device, are never transmitted to us or anyone else, and disappear when you clear the site's data in your browser:
- the light or dark theme you chose
- the language you're reading in
If we ever add analytics
If we switch on a traffic analysis tool in the future, this page will be updated FIRST — with a new date at the top — and a banner will appear asking for consent: no script will run before you accept.
7. Changes to this notice
If we change how we handle data, we change this page first and update the date at the top. We won't send you a notice: we don't have your address unless you wrote to us — and in that case, if the change affects you, we will write.