1. Data Controller

The Data Controller for the processing of personal data is:

Feel Blue S.r.l.
Zona Ind.le Pian di Pieca, snc
62026 San Ginesio (MC) — Italy
P.IVA: 01504010438
Phone: +39 0733 1898085
Fax: +39 0733 1898086
E-mail: info@feel-blue.it
Certified e-mail (PEC): feelbluesrl@pec.it

2. Types of Data Collected

Through the website www.feelblue.it, Feel Blue S.r.l. collects and processes the following categories of personal data:

2.1 Browsing Data

The IT systems and software procedures used to operate this website automatically acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Such information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes: IP addresses or domain names of the computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response, and other parameters relating to the user's operating system and IT environment.

2.2 Data Voluntarily Provided by the User

The optional, explicit and voluntary submission of messages to the contact addresses indicated on the website, as well as the completion of contact forms, involves the subsequent acquisition of the sender's address and other personal data included in the communication, as necessary to respond to requests. This includes in particular:

• First and last name or company name
• E-mail address
• Phone number (if provided)
• Message and content of the request
• Any other personal data voluntarily provided by the data subject

2.3 Cookies and Tracking Technologies

The website uses technical cookies necessary for the functioning of its pages, as well as analytical and third-party cookies (including Google Analytics) for the analysis of website usage and for marketing purposes. Users may grant or refuse consent to the use of cookies through the dedicated banner displayed upon first access to the website. For further information, please refer to the Cookie Policy available on the website.

3. Purposes of Processing and Legal Basis

Users personal data are processed for the following purposes:

3.1 Management of Contact Requests

Legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR), or the legitimate interests of the Data Controller (Art. 6(1)(f) GDPR).

Data provided through the contact form or via e-mail are processed in order to respond to requests for information, quotes, collaborations or any other communication received from users.

3.2 Compliance with Legal Obligations

Legal basis: compliance with a legal obligation to which the Data Controller is subject (Art. 6(1)(c) GDPR).

Data may be processed to fulfil obligations under applicable tax, accounting, administrative and statutory or regulatory provisions.

3.3 Statistical Analysis and Website Improvement

Legal basis: legitimate interests of the Data Controller (Art. 6(1)(f) GDPR) or, where required, consent of the data subject (Art. 6(1)(a) GDPR).

Browsing data and analytical cookies are used in aggregate and anonymous form to analyse how the website is used and to improve its usability.

3.4 Marketing and Communication

Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).

Subject to explicit consent, data may be used to send promotional communications, updates on products, services, events or initiatives of Feel Blue S.r.l. Consent may be freely withdrawn at any time.

4. Processing Methods

Personal data are processed using IT and/or electronic tools, with organisational and logical procedures strictly related to the stated purposes. Processing is carried out by duly authorised and instructed internal staff, and, where necessary, by external parties designated as Data Processors pursuant to Art. 28 GDPR.

Feel Blue S.r.l. adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 GDPR, in order to prevent loss, unlawful or incorrect use, and unauthorised access to data.

5. Data Retention Period

Personal data are retained for the period strictly necessary to fulfil the purposes for which they were collected, and in particular:

• Browsing data: retained for the time necessary for the technical operation of the website, unless required for the investigation of offences (max. 12 months).
• Contact data: retained for the time necessary to manage the request and, subsequently, for the period required by applicable legal and tax obligations (generally 10 years for fiscal and contractual documentation).
• Data processed for marketing purposes: retained until consent is withdrawn by the data subject.

Upon expiry of such periods, data will be permanently deleted or irreversibly anonymised.

6. Disclosure and Dissemination of Data

Personal data will not be disseminated. They may be communicated, to the extent strictly necessary, to the following categories of recipients:

• Employees and collaborators of Feel Blue S.r.l. duly authorised to process data
• IT and hosting service providers (Data Processors pursuant to Art. 28 GDPR)
• Professional consultants (legal, tax, accounting) in the context of assistance relationships
• Competent authorities, in the cases provided for by law
• Third parties providing website analytics services (e.g. Google Analytics, in compliance with applicable privacy regulations)

Data are not sold or transferred to third parties for commercial purposes.

7. Transfer of Data to Third Countries

Some of the third-party services used (e.g. Google Analytics) may involve the transfer of personal data to countries outside the European Economic Area (EEA). In such cases, the Data Controller ensures that the transfer takes place in compliance with the safeguards provided for under Arts. 44-49 GDPR, including the adoption of Standard Contractual Clauses approved by the European Commission or the existence of an adequacy decision.

8. Rights of Data Subjects

As a data subject, the user has the right to exercise, at any time and without formality, the following rights against the Data Controller:

• Right of access (Art. 15 GDPR): to obtain confirmation as to whether or not personal data concerning them are being processed and, if so, to access that information.
• Right to rectification (Art. 16 GDPR): to obtain the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): to obtain the deletion of personal data, in the cases provided for by applicable law (so-called "right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): to obtain the restriction of processing in the cases provided for by law.
• Right to data portability (Art. 20 GDPR): to receive personal data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): to object to the processing of personal data at any time, on grounds relating to the data subject's particular situation.
• Right to withdraw consent: to withdraw consent previously given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint: to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it) if it is believed that the processing violates applicable regulations.

To exercise their rights, the data subject may send a written request to:

Feel Blue S.r.l. — info@feel-blue.it

The Data Controller will respond to the request within 30 days of receipt, subject to extension in the cases provided for under Art. 12 GDPR.

9. Cookie Policy

The website www.feelblue.it uses technical, analytical and third-party cookies. For detailed information on the types of cookies used, their purposes and how to disable them, please refer to the Cookie Policy available on the website, accessible via the cookie banner and in the footer of the website.

10. Personal Data of Minors

The website www.feelblue.it is intended for an adult audience and is not directed at persons under the age of 18. Feel Blue S.r.l. does not knowingly collect personal data relating to minors. Should data relating to minors be accidentally collected, the Data Controller will arrange for their immediate deletion.

11. Updates to this Privacy Policy

This Privacy Policy may be subject to revisions and updates due to regulatory, organisational or technological changes. The Data Controller reserves the right to modify or supplement this policy at any time. Any changes will be published on the website and, where necessary, communicated to data subjects. Users are encouraged to consult this page periodically.

Last updated: February 2026