--- title: "Privacy Policy" canonical: "https://blissagency.it/en/privacy-policy/" url: "https://blissagency.it/en/privacy-policy/md/" site: "Bliss" published: "2025-01-10T15:04:12+02:00" modified: "2026-10-14T12:35:30+02:00" language: "en-US" description: "Privacy is non-negotiable in marketing and communications. At Bliss, we respect it in every form" --- # Privacy Policy ## Notice on the processing of personal data In force since 19 January 2019. Last updated: 24 September 2026. Data controller Bliss S.r.l., Via del Mandrione 63, 00181 Rome, VAT No. IT17963561000. Telephone 06 8635 7195. Data protection contact: [modulo di contatto](https://blissagency.it/contatti/). This notice describes how we collect, use and retain the personal data of those who visit the website [blissagency.it](https://blissagency.it/en/marketing-communications-brand-advisory-agency/), fill in the forms, write to the editorial team or use the services available online. How cookies are set is described in the [Cookie Policy](https://blissagency.it/en/cookie/). ### Data processed and purposes Processing concerns the information listed below, for the purposes and on the legal bases shown alongside each item. | Data | Purpose | Legal basis | Retention | | --- | --- | --- | --- | | Company name, website, city, VAT number, contact person's role, subject of the request, name, e-mail, telephone | Assessing contact and partnership requests, responding and initiating the relationship | Pre-contractual measures taken at the data subject's request and consent given on submission | 24 months from last contact | | Form completion path: screens visited, fields completed and their content, time taken, point of abandonment | Assessing requests received, including incomplete ones, and improving the form completion process | The controller's legitimate interest in receiving and understanding expressions of interest | 120 days | | IP address, geographical location derived from it, date and time of the request | Application security and prevention of abuse and automated submissions | The controller's legitimate interest in the security of its systems | 24 months | | Content of messages sent to the chatbot, IP address, date and time | Providing automated assistance and ensuring the technical operation of the service | The controller's legitimate interest in providing assistance | 12 months | | Browsing data collected through analytics and advertising cookies | Measuring website performance and campaign effectiveness | Consent given via the banner | For the periods specified in the Cookie Policy | | CVs and application data | Assessing unsolicited applications and applications for open positions | Pre-contractual measures taken at the data subject's request | 12 months from receipt | ### Disclosure of data Data are processed by authorised personnel and may be disclosed to parties that provide us with technical services, appointed as data processors under Article 28 of the Regulation. - Bliss CRM, our internal contact management system, hosted on infrastructure provided by Vercel Inc. and Render Services Inc. - The website hosting provider and the e-mail service provider - Google Ireland Limited, for analytics and advertising campaigns - Hotjar Ltd., Malta, for analysing page usage - Meta Platforms Ireland Limited, for statistics and advertising campaigns - OpenAI, for operating the chatbot on the website Data are not disseminated and are not transferred to third parties for their own commercial purposes. ### Transfers to third countries Some providers are based in the United States or use infrastructure located outside the European Union. In such cases, the transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission and, where applicable, the provider's participation in the Data Privacy Framework, with the additional safeguards provided for by the Regulation. ### Provision of data Providing the data marked as mandatory in the forms is necessary to follow up on the request. Without those data, the request cannot be assessed. Providing any other data is optional, and failure to do so has no consequences. ### Automated decision-making Requests received are assessed by people. The website does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject. ### Data subject rights You may exercise the rights set out in Articles 15 to 22 of the Regulation at any time: - access to personal data and to information on how they are processed - rectification of inaccurate data and completion of incomplete data - erasure of data, where provided for by law - restriction of processing - portability of the data provided, in a machine-readable format - objection to processing based on legitimate interest, including profiling - withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal Requests should be sent to [modulo di contatto](https://blissagency.it/contatti/). We respond within one month of receipt. This period may be extended by two months in particularly complex cases, in which event the data subject will be informed. This is without prejudice to your right to lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome ([garanteprivacy.it](https://www.garanteprivacy.it)), or to seek a judicial remedy. ### Security We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction and unlawful processing: encrypted transmission, named access limited to those who need it, continuous system updates and logging of relevant events. Any attempt to breach our IT systems will be prosecuted to the full extent of the law. ### Changes This notice may be updated to reflect changes to our services, the tools we use or applicable legislation. The updated version is published on this page with the new last-updated date and applies from publication. Material changes are announced on the website.