Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
Last updated: 03-03-2026
DATA CONTROLLER
The Data Controller is Fortunato Stark Industries Ltd, in the person of its legal representative pro tempore,
Ulitsa Seliolu 17, 9000 Varna, Bulgaria,
Email: gdpr@fortunatostark.com, Phone: +39 3801970988
(hereinafter also the “Controller” or “we”)
This page describes how the personal data of users who visit the website of Fortunato Stark Industries, available at https://fortunatostark.com/, is processed. This information does not concern other websites, pages or online services reachable through hyperlinks that may be published on the site but do not refer to Fortunato Stark Industries.
TYPES OF DATA PROCESSED
Through the website, browsing and behaviour data is collected and processed via cookies or other tracking systems (see Cookie Policy), together with the preferences expressed and the information provided during browsing and interaction with the platform, as well as the following data collected through the online forms:
- Personal and contact data: first and last name, email address, phone number, physical address (optional) and date of birth (optional), collected through the forms:
- Free Consultation:
forminator_form - Support Request:
forminator_form
- Free Consultation:
- Browsing and tracking data: anonymised age and gender (Google Analytics and Facebook Pixel), IP, browsing data and cookies
- Business data collected through the form: type of business, number of employees, years in operation, legal representative, certified email (PEC), VAT number, company name and position
All data collected is managed and stored securely in the Odoo CRM Bulgaria, with access limited to authorised staff and in accordance with the security measures indicated.
PURPOSES OF PROCESSING
The data is processed to:
a) Pre-contractual and contractual purposes
- Provide the services requested (contract management, POS, web development, consulting)
- Manage administrative and operational activities for contracts and technical support
- Communicate the data to partners for these purposes
b) Compliance with legal obligations
- Fulfil obligations under national or EU legislation
c) Direct marketing
- Sending commercial and promotional communications by email, SMS, WhatsApp or phone (with prior consent)
d) Profiling / Behavioural analysis
- No automated profiling is carried out. Data analysis is used only to support internal activities and does not result in automated decisions about users
LEGAL BASIS FOR PROCESSING
- Pre-contractual and contractual purposes: Art. 6(1)(b) GDPR
- Compliance with legal obligations: Art. 6(1)(c) GDPR
- Direct marketing: Art. 6(1)(a) GDPR – explicit consent; Art. 6(1)(f) GDPR – legitimate interest
- Profiling / Behavioural analysis: Art. 6(1)(a) GDPR – explicit consent
PROCESSING METHODS AND DATA RETENTION PERIOD
The data is processed with IT, digital and paper tools in accordance with the principles of fairness, lawfulness, transparency and minimisation.
Retention periods are:
- Until the contract ends or consent is withdrawn
- 24 months for marketing purposes (unless consent is renewed)
- 2 months for data collected at quotation stage where no contract is signed
RECIPIENTS OF THE DATA
The personal data collected may be communicated to the following parties, as processors or independent controllers, solely for the purposes indicated:
- Hosting and IT infrastructure providers:
- Netsons s.r.l., Milan, Italy
- Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, Arizona 85034, United States
- Analytics and statistics services:
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA
- Meta Platforms, Inc., 1 Meta Way (formerly 1 Hacker Way), Menlo Park, California, 94025, USA
- Partners for workflow management and CRM:
- Odoo CRM, Chaussée de Namur 40, Ramillies, Belgium
- In-house professionals of Fortunato Stark Industries Ltd, responsible for legal, tax and accounting management, based in Bulgaria
TRANSFER OF DATA ABROAD
The data may be processed in EU member countries or in third countries with adequate safeguards under Articles 45-46 GDPR.
The list is available on request by writing to gdpr@fortunatostark.com.
YOUR RIGHTS
You have the right to:
- Access, rectification, erasure, restriction of processing and data portability.
- Object to the processing of data and withdraw consent.
- Not be subject to automated decisions.
- Lodge a complaint with the supervisory authority.
To exercise your rights, contact gdpr@fortunatostark.com or use the form of the Italian Data Protection Authority: https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali
RIGHT TO LODGE A COMPLAINT
If you believe that the processing of your data violates the GDPR, you may lodge a complaint with the Data Protection Authority (Art. 77) or bring the matter before the competent courts (Art. 79 GDPR).
CHANGES AND UPDATES
We reserve the right to update and amend this notice to keep it in line with regulatory developments.
For any request or clarification, contact the Controller at: gdpr@fortunatostark.com
Visit statistics and referral codes
The site records visits in aggregate form (page, date and time, device type, browser, operating system, language, referring site). It does not use profiling cookies or third-party tools: the visit identifier is generated with an irreversible function and changes every day, and the IP address is truncated before being stored. Visit data is kept for up to 13 months. Tracking does not take place if the browser sends the “Do Not Track” signal.
If you arrive from a link with a referral code (ref parameter), the code is saved in your browser for 90 days and sent together with your contact request, in order to recognise the benefit due to the client or promoter who referred you.
Requests sent through the website forms are stored in the owner's private management panel and are not forwarded by email.