Privacy policy.

1. Data controller

The controller of the data collected through sorain.com is Sorain Techno srl, registered office at Via Eufrate 34, 00144 Rome (Italy), VAT and Tax Code 04502101001, registered with the Rome Company Register under no. 774106. For any request concerning the processing of personal data, please write to info@sorain.com.

2. What data we collect

Sorain.com collects two types of personal data:

• Browsing data: collected automatically during normal use of the site (IP address, browser type, pages visited, access time), necessary for the technical operation of the infrastructure and for security.
• Data provided voluntarily: when filling in the contact form (name, company/organisation, email, subject, message) to request technical or commercial information.

3. Purposes and legal basis

• Responding to requests sent through the contact form: legal basis: performance of pre-contractual measures at the request of the data subject (art. 6.1.b GDPR) or legitimate interest in responding (art. 6.1.f GDPR).
• Ensuring the security and proper functioning of the site: legitimate interest (art. 6.1.f GDPR).
• Playing facility videos hosted on YouTube: user consent at the moment of clicking the player (art. 6.1.a GDPR); see the Cookie Policy for details.

4. Third-party services used

The site is deliberately built to minimise reliance on external services:

• Hosting (Vercel Inc., USA): the site’s publishing infrastructure. The transfer of data to the United States is covered by the European Commission’s Standard Contractual Clauses.
• YouTube (Google Ireland Ltd.): facility videos are shown as a static preview; the player only loads if the user explicitly clicks to watch, in privacy-enhanced mode (youtube-nocookie.com). No data is sent to Google before that click.
• Fonts and maps: the site’s font and the office-location map are generated and served directly from our own server, with no requests to external services (Google Fonts, Google Maps or similar are not used).

5. Cookies

Details of the cookies used are described in the Cookie Policy, an integral part of this notice.

6. Retention period

Messages received through the contact form are kept for as long as needed to handle the request and, afterwards, for the period required by commercial and tax law obligations. Technical browsing data is kept for a limited period, no longer than necessary for security purposes.

7. Data subject rights

As a data subject, you may exercise the rights set out in articles 15-22 of the GDPR at any time:

• access to your personal data;
• rectification of inaccurate or incomplete data;
• erasure (“right to be forgotten”), within the limits set by law;
• restriction of processing;
• data portability;
• objection to processing;
• lodging a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali; in Spain, the Agencia Española de Protección de Datos).

8. Changes to this notice

This notice may be updated periodically, for example following regulatory changes or the introduction of new services on the site. The last-updated date is shown at the top of the page.

9. Contact

To exercise your rights or for any question about this notice, please write to info@sorain.com.