This notice explains how ROUTEMATES S.R.L. processes the personal data of website visitors and of people who contact us, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
ROUTEMATES S.R.L., Padova (PD), Italy, VAT and tax code 11915900960.
Email: info@routemates.it · PEC (certified email): routemates@pec.it
2. Data we process
Browsing data
The systems that run this website collect, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet protocols: IP address, date and time of the request, page requested, response code, browser type and operating system. This data is used to keep the website running and secure and is not used to identify visitors.
Data you provide
Name, company, email address, phone number and message content sent through the contact form or by email. Please do not include special categories of personal data (Article 9 GDPR) in your messages.
Cookies
For the use of cookies, please see our Cookie policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering requests for information and business enquiries | Steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b)) and legitimate interest in replying to requests received (Art. 6(1)(f)) |
| Handling support requests from clients | Performance of a contract (Art. 6(1)(b)) |
| Ensuring the security and proper functioning of the website | Legitimate interest of the controller (Art. 6(1)(f)) |
| Complying with legal obligations and, where necessary, establishing, exercising or defending legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
Data is not used for marketing or profiling and is not subject to automated decision-making.
4. Provision of data
Providing data through the contact form is optional. However, fields marked as required are necessary for us to answer your request.
5. How data is processed
Data is processed electronically by authorised staff, with appropriate technical and organisational measures to protect it against unauthorised access, loss or disclosure (Art. 32 GDPR).
6. Retention
- Contact requests: for as long as needed to handle them and, if no contractual relationship follows, no longer than 24 months from the last contact.
- Data relating to contracts: for the duration of the relationship and for the following 10 years, as required by Italian civil and tax law.
- Browsing data: for the technical period set by the hosting provider, unless needed to investigate unlawful activity.
7. Recipients
Data may be processed by authorised Routemates staff at our Padua, Durrës and Tirana offices, and by providers acting as data processors under Article 28 GDPR, including:
- the website hosting provider (Aruba S.p.A.);
- the email service provider (Microsoft Exchange);
- the helpdesk platform provider (Odoo);
- consultants and professionals, to the extent required by their engagement.
Data may also be disclosed to competent authorities where required by law. Data is not made public.
8. Transfers outside the European Union
Routemates also operates from its offices in Durrës and Tirana (Albania), a country not covered by a European Commission adequacy decision. Access to data by staff at the Albanian offices is based on standard contractual clauses approved by the European Commission (Art. 46 GDPR). Where the providers listed in section 7 process data outside the EU, transfers are based on an adequacy decision or on appropriate safeguards under Articles 45 and 46 GDPR.
9. Your rights
You may exercise the rights set out in Articles 15–22 GDPR at any time: access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest. Requests should be sent to info@routemates.it or by PEC to routemates@pec.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.
10. Changes
This notice may be updated. The version in force is always the one published on this page.
Last updated: 24 September 2026