1 Data Controller
The Data Controller for personal data collected through the website www.innovahelix.it is:
| Company name | InnovaHelix S.r.l. |
|---|---|
| Legal status | Innovative startup — Spin-off of the University of Messina |
| Registered office | Piazza Municipio, 8 — 98042 Pace del Mela (ME), Italy |
| Operating office | Department of Veterinary Sciences, Polo Annunziata — Messina |
| VAT / Tax ID | 03760630834 |
| info@innovahelix.it | |
| Phone | +39 392 814 6712 |
The Controller has not appointed a Data Protection Officer (DPO) as it does not fall within the categories for which such appointment is mandatory under Art. 37 GDPR. For any privacy-related matters, please contact the Controller at the addresses above.
2 Personal data collected
2.1 Navigation data (automatic)
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category includes: IP addresses, browser type, operating system, provider domain name, pages visited and access times.
2.2 Data voluntarily provided by the user (contact form)
Through the contact form in the "Contact" section of the site, users may provide the following data:
- First and last name (required)
- Email address (required)
- Company name (optional)
- Type of interest — category selected from the dropdown menu (optional)
- Message (required)
Form submission is voluntary. Failure to provide data marked as required will make it impossible to send the message.
2.3 Cookies
The site uses essential technical cookies and, with prior consent, analytical cookies. For details, refer to the Cookies and similar technologies section.
3 Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to contact requests and enquiries submitted via the form | Art. 6(1)(b) — performance of pre-contractual measures; Art. 6(1)(f) — legitimate interest |
| Technical management and security of the website (navigation data) | Art. 6(1)(f) — legitimate interest of the Controller |
| Aggregate statistical analysis of visits (if analytical cookies accepted) | Art. 6(1)(a) — data subject's consent |
| Compliance with legal obligations | Art. 6(1)(c) — legal obligation |
4 Retention period
| Data type | Retention period |
|---|---|
| Messages submitted via contact form | 24 months from receipt, unless legal protection is required |
| Navigation data (server logs) | 30 days, then automatic deletion |
| Consent cookie (privacy banner preferences) | 365 days from choice |
| Email correspondence received | Until request is fulfilled + 12 months |
At the end of the retention period, data is deleted or irreversibly anonymised.
5 Recipients and data transfers
Personal data is not sold or disclosed to third parties for commercial purposes. It may be communicated to:
- Hosting provider — the server hosting the website (data processor pursuant to Art. 28 GDPR);
- Email provider — used to receive communications sent via the form;
- Competent authorities — where required by law or court orders.
The site does not systematically transfer data to third countries (outside the EEA). Any transfers (e.g. via CDN servers) are carried out in compliance with the safeguards provided by Arts. 44-49 GDPR (adequacy decisions, standard contractual clauses).
Typefaces: the site uses typefaces (DM Sans, DM Serif Display, Syne) loaded in self-hosted mode directly from its own server. No data is transferred to third-party servers for font loading.
6 Cookies and similar technologies
The site uses only technical cookies and preference cookies for privacy consent. It does not use its own tracking or profiling cookies.
| Cookie name | Type | Purpose | Duration |
|---|---|---|---|
ih_cookie_ok | Technical / preference | Stores the user's choice on the cookie banner | 365 days |
| PHP session cookie | Essential technical | Required for contact form management | Session (browser close) |
Users can manage, block or delete cookies through their browser settings. Disabling essential technical cookies may impair the correct functioning of the contact form.
Instructions for major browsers: Chrome · Firefox · Safari · Edge
7 Data subject rights
Under Arts. 15-22 of EU Regulation 2016/679, data subjects have the right to:
Access (Art. 15)
Obtain confirmation of whether processing is underway and receive a copy of personal data.
Rectification (Art. 16)
Request correction of inaccurate or incomplete data.
Erasure (Art. 17)
Request deletion of data ("right to be forgotten") in applicable cases.
Restriction (Art. 18)
Request restriction of processing in certain circumstances.
Portability (Art. 20)
Receive data in a structured and commonly used format.
Objection (Art. 21)
Object to processing based on legitimate interest.
Withdrawal of consent
Withdraw consent at any time without prejudice to prior processing.
Complaint (Art. 77)
Lodge a complaint with the Data Protection Authority.
To exercise these rights, please send a written request to: info@innovahelix.it. The Controller will respond within 30 days of receiving the request, unless complexity requires an extension of a further 60 days (with written notice).
8 Changes to this policy
The Controller reserves the right to modify this policy at any time to adapt to regulatory changes or new processing methods. Material changes will be communicated to users via a notice on the site. We recommend consulting this page periodically.
Date of last revision: 14 March 2026
9 Contact and complaints
For any questions regarding this policy or to exercise your rights:
- Email: info@innovahelix.it
- Phone: +39 392 814 6712
- Address: InnovaHelix S.r.l., Piazza Municipio 8, 98042 Pace del Mela (ME), Italy
If you receive an unsatisfactory response, you may lodge a complaint with the Italian Data Protection Authority (Garante):
- Website: www.garanteprivacy.it
- Email: garante@gpdp.it
- PEC: protocollo@pec.gpdp.it
- Tel: +39 06 69677 1