1. Data collected
When you press Send, we collect the data entered in the form. Depending on the request, this may include first and last name, email, company, telephone number, area of interest, message and professional information. Applications may include the role, professional links and a CV.
We also collect technical information needed to manage the form and prevent abuse, such as request source, date and time, form-completion checks and spam-protection outcomes. We do not retain the Cloudflare Turnstile token in plain text.
Please do not include health information, religious beliefs, trade-union membership or other special-category data that are not necessary for your request or application.
2. Purposes and legal basis
We process data to respond to your request or assess your application, manage communications, verify that the form was sent correctly, prevent abuse and produce aggregated, non-identifying statistics about form performance.
Where applicable, the legal basis is taking steps at the data subject’s request before entering into a contract, under Article 6(1)(b) GDPR. For security, abuse prevention and service protection, processing may rely on the controller’s legitimate interests under Article 6(1)(f), while respecting the data subject’s rights and freedoms.
The form checkbox confirms that you have read the privacy policy and this notice. It does not subscribe you to newsletters or unsolicited promotional communications.
3. Request handling and recipients
Requests are viewed by authorised Sorgetech staff. Commercial requests may be directed to the Sales team; applications to Human Resources. A request may undergo an internal review to check completeness, security and correct delivery.
The service may involve hosting, maintenance, email and anti-spam providers, appointed or used according to the roles required by applicable law. Cloudflare Turnstile is used for spam protection.
Technical signals about potential abuse or bots support review only; they do not make automated decisions with legal or similarly significant effects on you.
4. Deletion after 7 days
Personal data in the form register and any CV are permanently deleted after 7 days from registration, regardless of the outcome of the request. Deletion includes identifying data, contact details, messages, attachments and the filename.
After deletion, only a record without personal data may remain, with technical information and aggregated statistics used to measure form performance and prevent abuse. This information is not used to identify you.
Emails that have already been sent follow the retention rules of the relevant email system and the general privacy policy.
5. Your rights
You may request access, rectification, erasure, restriction, portability or object to processing where Articles 15–22 GDPR apply. You can contact Sorgetech using the contact details above.
You may also lodge a complaint with the Italian Data Protection Authority under Article 77 GDPR.