This draft is prepared under Regulation (EU) 2016/679 (GDPR), particularly Article 13, and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 and subsequent amendments.
1. Controller and contacts
The previous Wizh.it notice identifies Tomware Scarl, Viale Alberti 21/a, 48124 Ravenna, Italy, and privacy@tomware.it as its privacy contact.
For product enquiries, write to info@wizh.it.
To confirm: Confirm the controller’s current legal name and address, the privacy contact and any data protection officer (DPO).
2. Personal data
The contact form requires your first name, last name and email address. Phone number and message are optional. Emails sent directly to our published addresses contain the information you choose to provide.
The form includes an optional choice for promotional communications and spam protection, including Google reCAPTCHA. Leaving the promotional checkbox unchecked does not prevent you from sending an enquiry.
Please provide only information relevant to your enquiry. Do not send health information, passwords or other confidential information unnecessary for an initial contact.
To confirm: Verify which connection and security data are recorded, including IP address, date and time, server requests and spam-protection records.
3. Purposes and legal bases
Information sent through the website’s contact channels is used to receive, review and answer the enquiry. Where an enquiry concerns steps requested by you before entering into a contract, the relevant basis is Article 6(1)(b) GDPR.
The optional choice for product, service and event communications and satisfaction surveys concerns a separate purpose. If used, it relies on separate consent under Article 6(1)(a) GDPR, which can be withdrawn at any time without affecting the lawfulness of earlier processing.
To confirm: Confirm the promotional activities actually carried out, the basis for enquiries unrelated to a prospective contract, and the purposes and basis of technical and spam-protection processing. Automated decisions with legal or similarly significant effects have not been verified.
4. Recipients and international transfers
Enquiries may be handled by authorised staff and the providers needed to receive and manage them. The list of providers and their roles must reflect the services actually used.
The form loads Google reCAPTCHA, which involves connections to Google. See Google’s privacy policy and terms of service. The LinkedIn link opens an external service with its own privacy notice.
To confirm: Identify hosting, email, maintenance and backup providers, their roles and any processors. Verify processing locations, actual transfers outside the European Economic Area and applicable safeguards, including how to obtain a copy.
5. Retention periods
Retention must be limited to the processing purposes and any applicable obligations. An enquiry leading to a contract requires a separate assessment of the documents to retain.
To confirm: Set specific periods or criteria for enquiries and correspondence, any promotional data and consent records, technical and spam-protection logs and backups. This draft does not invent unverified company retention periods.
6. Cookies and preferences
The checked version of the website uses pll_language to remember the selected language. Your light/dark preference is stored in your browser under wizhit-appearance in localStorage until you change it or clear the website’s data. Translation uses Italian and English pages already stored on the website.
Tools strictly necessary for a requested service do not require consent where the law provides an exemption. Non-essential tools require prior consent where applicable, with a way to refuse and withdraw it. Merely browsing or scrolling does not constitute consent.
To confirm: Complete the inventory of cookies and other tools with their providers, purposes and actual lifetimes, including reCAPTCHA and any analytics. Check the public configuration and preference controls too. The preview audit does not certify the public website’s configuration.
You can delete website data or manage cookies in your browser settings. Blocking necessary tools may limit some functions.
7. Your rights
Where the GDPR provides, you can request access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests for reasons relating to your situation and object to direct marketing at any time.
You can withdraw consent without affecting the lawfulness of processing already carried out. You can also lodge a complaint with the Italian Data Protection Authority and seek a judicial remedy.
The privacy contact in the previous notice is privacy@tomware.it; its current responsibility for Wizh.it must be confirmed.
8. Scope and updates
This notice covers wizh.it and its contact channels. It does not replace the notices and agreements covering individual AI products or the processing of customer data in their environments.
Draft updated on 22 October 2026. Highlighted items require verification by the company and website administrator before the final version is published.