Privacy notice
This notice explains which personal data we process when you visit assi4.it or contact us, why we do it and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree 196/2003).
Last updated:
Who is the data controller
The data controller for your personal data is:
Assiquattro di Colombo Cristian e Bellini Roberto & C. S.a.s., trading as Assi4.it Assicurazioni
Office: Via Avigliana 75c, 10093 Collegno (TO), Italy
Tax code and VAT no. IT09060930014 · IVASS RUI registration A000147048
Phone +39 011 020 9640 · Email ufficioassi4@gmail.com
Privacy contact. For any question about this notice or to exercise your rights, write to ufficioassi4@gmail.com with "Privacy request" in the subject: this is the address we use for all data protection requests. You can also write to us by post at the office address.
We have not appointed a Data Protection Officer (DPO), as it is not mandatory for an agency of our size (Art. 37 GDPR).
Which data we process and where it comes from
Quote requests on this site. The "Request a quote" form sends nothing to the website: at the end it opens your own email app with a pre-filled message to ufficioassi4@gmail.com. We only receive the data if you choose to send it: the type of request, the area of interest (for example motor or home), the advisory path if any, your name, phone number, town, any notes you write, your preferred contact format and day, and your email address.
Email and phone. When you write to us or call +39 011 020 9640 or +39 393 922 9094, we process the data you give us (name, contact details, content of the request). Please do not send us health data or other special categories of data unless they are needed for your request.
Browsing data. This is a static website hosted on Cloudflare. To run and protect it, Cloudflare temporarily logs technical request data: IP address, date and time, page requested, browser and device type. We use no analytics or profiling tools and we do not build visitor profiles.
Google map. On the Home and Contact pages the Google Maps map only loads if you press "Show the map". From that moment Google receives your IP address and may set its own cookies (see below and the cookie policy).
Policies and claims. If you become a client, the data needed for quotes, contracts and claims is also processed at the agency and by the insurers: that processing is described in the notice we give you together with the pre-contractual documents and in the notice of the insurer you choose.
Why we process it, on which legal basis and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering information and quote requests, booking appointments | Contact details and content of the request | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) | 12 months after the last exchange if nothing follows; 24 months for quotes not accepted |
| Managing the client relationship, including invoicing and accounting | Identity, contact, contract and tax data | Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)) | For the duration of the relationship and then 10 years (Art. 2220 Italian Civil Code and tax rules) |
| Obligations under insurance and anti-money-laundering rules | Data required by IVASS regulations and applicable law | Legal obligation (Art. 6(1)(c)) | For the periods set by those rules, usually 10 years after the relationship ends |
| Running and securing the website (protection against abuse and attacks) | Browsing data in server logs | Our legitimate interest in keeping the site available and secure (Art. 6(1)(f)) | For the short period Cloudflare keeps its logs, normally a few days |
| Showing the Google map | IP address and technical data sent to Google | Your consent, given by pressing "Show the map" (Art. 6(1)(a)); you can withdraw it at any time | Your choice stays stored in your browser until you withdraw it; Google's own retention applies to the data it collects |
| Defending our rights in case of disputes | Data relevant to the dispute | Legitimate interest (Art. 6(1)(f)) | Until the dispute is resolved |
Who receives the data
The data is processed by the agency's partners and staff, who are authorised and instructed. We do not sell or pass your data to third parties for marketing. It can only be received by:
- Cloudflare, Inc. (website hosting and protection), acting as our processor.
- Google Ireland Limited, provider of the mailbox (Gmail) where we receive your emails.
- Google for the Google Maps map, only if you choose to load it: for this data Google acts as an independent controller (Google privacy policy).
- Insurance companies we work with, when needed for a quote or policy you asked for.
- Accountant and advisers who assist us with tax and legal obligations, bound by confidentiality.
- Public authorities (for example IVASS or tax authorities), where the law requires it.
Transfers outside the European Union. Cloudflare and Google may also process data in the United States. These transfers rely on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, in which both companies participate, and on the Commission's standard contractual clauses.
How we protect the data
- The whole site is served over HTTPS only, with TLS encryption.
- The site neither collects nor stores quote form data: the request travels only as an email sent by you.
- Access to the mailbox and to client documents is limited to the agency's partners and authorised staff.
- Providers processing data on our behalf are bound by data processing agreements (Art. 28 GDPR).
- The site uses no third-party analytics or advertising scripts; fonts are hosted on the site itself, with no calls to external services.
Your rights
At any time you can ask us for:
- access to your data and a copy of it (Art. 15 GDPR);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure of your data (Art. 17), except data we must keep by law;
- restriction of processing (Art. 18);
- portability of the data you gave us, in a commonly used format (Art. 20);
- to object to processing based on our legitimate interest (Art. 21);
- to withdraw your consent at any time, without affecting earlier processing (Art. 7(3)): for the map, use the button in the cookie policy;
- not to be subject to decisions based solely on automated processing, including profiling (Art. 22): we make no such decisions.
How to exercise them. Write to ufficioassi4@gmail.com (subject "Privacy request"), call +39 011 020 9640 or visit the agency. We reply within one month of your request (Art. 12(3) GDPR); we may ask you to confirm your identity.
Complaint to the authority. If you believe the processing breaks the law, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it (Art. 77 GDPR), or with the supervisory authority of the EU country where you live or work.
Do you have to give us your data?
No. You can visit the site without giving us any data. To receive a quote or a call back we need at least a name and a contact detail: without them we cannot reply. To take out a policy, the law and the insurers require further data, which we will tell you about case by case. We do not use your data for automated decision-making or profiling.
Changes to this notice
We may update this notice, for example if we add new services to the site. The version in force is always this page, with the last-updated date shown at the top. We will flag any significant change clearly on the site.
Social networks and embedded content
This site embeds no social network content (no "like" buttons, feeds or videos from Facebook, Instagram, YouTube or other platforms) and contains no links to social profiles, so no data is sent to social platforms while you browse.
The only third-party content is the Google Maps map, which stays blocked until you press "Show the map". The "Open in Google Maps" link and the link to our Google reviews are plain links: no data reaches Google until you click them; after the click, Google's privacy policy applies.