top of page

Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how FST 3D S.r.l. Società Unipersonale processes the personal data of users who visit and use the website https://www.fst3d.com, hereinafter referred to as the “Website”.

​

This notice is provided in accordance with Articles 12, 13 and 14 of Regulation (EU) 2016/679, hereinafter referred to as the “GDPR”, and with the applicable Italian data protection legislation.

1. Data Controller

The Data Controller is:

​

FST 3D S.r.l. Società Unipersonale
Via Alpi 14
63812 Montegranaro (FM) – Italy
Italian Tax Code and VAT No. 02611660446
REA FM-317157
Email: info@fst3d.com
Certified email: fst3dsrl@pec.it
Telephone: +39 348 554 1071

​

Hereinafter also referred to as the “Data Controller” or “FST 3D”.

2. Personal Data Processed

2.1 Browsing and Technical Data

​

The IT systems and services used to operate the Website collect certain technical data during their normal operation.

​

This data may include:

  • IP address;

  • date and time of the request;

  • requested URL and resource;

  • outcome of the request;

  • browser and device information;

  • operating system;

  • technical identifiers;

  • pages visited;

  • source of the visit;

  • diagnostic and security data.

  • ​

Some of this information, when combined with other data, may indirectly identify the user.

​

2.2 Data Provided Through the Contact Form

​

When users submit the contact form available on the Website, the following data may be collected:

  • first name and surname;

  • email address;

  • telephone number;

  • company name;

  • content of the message;

  • any data contained in attachments or subsequent communications.

  • ​

Fields marked as mandatory in the interface are required to submit and properly manage the request.

​

Users are invited not to include unnecessary personal data, information relating to third parties or particularly sensitive information in their messages.

​

2.3 Data Provided by Email, Telephone or When Booking an Appointment

​

When users contact FST 3D by email or telephone, the data required to respond to the request, provide information, prepare a quotation or manage a potential pre-contractual or contractual relationship will be processed.

​

If users book a meeting through Calendly, the data required to arrange the appointment will be processed.

Calendly may collect additional personal data directly, in accordance with its own privacy policy. When Calendly is accessed through a simple external link, the related processing begins on the Calendly website or platform.

​

2.4 Analytics and Interaction Data

​

Subject to the user’s consent, where required, the Website may use tools to analyse traffic and measure the user experience.

​

Google Analytics 4 may collect:

  • online identifiers;

  • browsing events;

  • session information;

  • pages visited;

  • interactions with the Website;

  • technical information;

  • approximate geographical data.

  • ​

Microsoft Clarity may collect:

  • clicks;

  • scrolling activity;

  • browsing paths;

  • screen dimensions;

  • technical data;

  • interactions with page elements;

  • visual reconstructions of browsing sessions.

  • ​

Microsoft Clarity does not record a video of the person using the Website. It technically reconstructs the interactions that take place within the pages.

​

Sensitive form fields must be excluded or masked in the tool’s configuration.

​

2.5 Third-Party Content and External Links

​

The Website may contain YouTube videos and links to external services or websites, including Calendly, LinkedIn, YouTube and other platforms.

​

A simple external link does not normally result in cookies being installed by the destination website until the user chooses to visit it.

​

Embedded content, such as YouTube videos displayed directly within a page, may instead transmit data to the relevant provider. Where such content uses cookies or technologies that are not strictly necessary, it must be blocked until the user has given consent.

3. Source of the Data and Processing Methods

Personal data may be:

  • provided directly by the user;

  • collected automatically while browsing;

  • received through tools and providers used to operate the Website;

  • communicated during enquiries, appointments or professional relationships.

​

Data is processed using IT systems and, where necessary, manually.

​

FST 3D processes personal data in accordance with the principles of:

  • lawfulness;

  • fairness;

  • transparency;

  • data minimisation;

  • accuracy;

  • storage limitation;

  • integrity;

  • confidentiality.

​

The Data Controller adopts technical and organisational measures appropriate to the risks and the nature of the data processed.

4. Purposes and Legal Bases

Provision, Operation and Security of the Website

​

Purpose: to provide the Website, ensure its stability and security, prevent misuse and resolve technical issues.

Data processed: technical data, logs, IP addresses and diagnostic data.

​

Legal basis: the Data Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations.

​

Retention: for the period strictly necessary to ensure the operation and security of the Website and in accordance with the retention periods applied by Wix to technical logs.

​

Management of Enquiries and Appointments

​

Purpose: to respond to users’ enquiries, arrange appointments, provide information, prepare quotations and take pre-contractual measures.

​

Data processed: data submitted through the contact form, contact details and the content of communications.

​

Legal basis: steps taken at the request of the data subject before entering into a contract or performance of a contract, pursuant to Article 6(1)(b) GDPR.

​

Retention: for up to 24 months after the enquiry has been closed, unless a subsequent relationship is established or longer retention is required by law or necessary for the establishment, exercise or defence of legal claims.

​

Management of Contractual Relationships and Legal Obligations

​

Purpose: to manage contracts, invoicing and administrative, tax, accounting and legal obligations.

Data processed: identification, contact, administrative and contractual data.

​

Legal basis: performance of a contract pursuant to Article 6(1)(b) GDPR and compliance with legal obligations pursuant to Article 6(1)(c) GDPR.

​

Retention: generally for 10 years or for any different period required by the applicable legislation.

​

Traffic Analysis Through Google Analytics 4

​

Purpose: to measure traffic, sessions, pages visited and how the Website is used.

​

Data processed: online identifiers, analytics data, browsing events, technical information and approximate geographical data.

​

Legal basis: the user’s consent pursuant to Article 6(1)(a) GDPR, except for configurations that may genuinely be regarded as equivalent to technical tools where permitted by the applicable legislation.

​

Retention: cookies may remain active for up to 2 years. User-level and event-level data is retained for 14 months, according to the setting selected in the Google Analytics 4 property.

​

User Experience Analysis Through Microsoft Clarity

​

Purpose: to understand the user experience through heatmaps, clicks, scrolling activity, browsing paths and session reconstructions.

​

Data processed: technical data, online identifiers and information relating to interactions with the pages of the Website.

​

Legal basis: the user’s consent pursuant to Article 6(1)(a) GDPR.

​

Retention: data required for session playback is retained for 30 days. Click data, heatmaps and selected or labelled sessions are retained for up to nine months, according to the retention periods declared by Microsoft.

​

Display of YouTube Content

​

Purpose: to display videos and other YouTube content embedded within the pages of the Website.

​

Data processed: technical data, online identifiers and information relating to interactions with the content.

​

Legal basis: the user’s consent pursuant to Article 6(1)(a) GDPR, where the content uses cookies or other technologies that are not strictly necessary.

​

Retention: in accordance with the applicable settings and the retention periods specified in the Google and YouTube privacy policies.

​

Establishment, Exercise and Defence of Legal Claims

​

Purpose: to establish, exercise or defend the Data Controller’s rights in judicial or out-of-court proceedings.

​

Data processed: personal data relevant to the dispute or request.

​

Legal basis: the Data Controller’s legitimate interest pursuant to Article 6(1)(f) GDPR and the applicable procedural rules.

​

Retention: for the period required to manage the dispute and until the applicable limitation periods have expired.

​

Data received in connection with an enquiry will not be used to send promotional communications without an appropriate legal basis and, where required, separate, freely given and revocable consent.

5. Nature of the Provision of Data

The provision of data marked as mandatory in the contact form is necessary to submit and manage the enquiry.

​

Failure to provide this data may prevent the form from being submitted or FST 3D from providing a complete response.

​

The provision of any other data is optional.

​

Consent to cookies and tools that are not strictly necessary is optional. Refusing consent does not prevent access to the essential content of the Website, although certain external content or analytics functions may not be activated.

6. Cookies and Consent Management

The Website uses cookies and similar technologies.

​

Strictly necessary cookies may be activated without consent where they are essential for:

  • the technical operation of the Website;

  • security;

  • fraud prevention;

  • management of privacy preferences;

  • provision of functions requested by the user.

​

Google Analytics 4, Microsoft Clarity and any third-party content that is not strictly necessary must only be activated after the user has made a valid choice, where required by the applicable legislation.

​

Users can accept, refuse or change their preferences through the cookie banner and the “Cookie Settings” link available in the footer of the Website.

​

Further information about the cookies used, their purposes and retention periods is available in the Website’s Cookie Policy.

​7. Recipients and Authorised Persons

Personal data may be processed by FST 3D personnel and authorised collaborators, solely within the limits of their respective duties and in accordance with the instructions received.

​

Data may also be disclosed, where necessary, to service providers that are contractually bound and appointed as data processors pursuant to Article 28 GDPR, where applicable.

​

Potential recipients may include:

  • Wix.com Ltd and other companies within its group, for the Website platform, hosting, security, forms and related functions;

  • providers of IT, email, maintenance and technical support services;

  • consultants, accountants and professionals who assist FST 3D;

  • Google Ireland Limited and other companies within its group, for Google Analytics 4 and YouTube, when activated;

  • Microsoft Corporation and other companies within its group, for Microsoft Clarity, when activated;

  • Calendly LLC and the parties involved in providing its booking service, when used;

  • public authorities, judicial authorities or other parties where disclosure is required by law or necessary for the protection of legal rights.

​

Certain providers may act as independent data controllers for specific processing operations.

​

An up-to-date list of data processors may be requested from the Data Controller using the contact details provided in this Privacy Policy.

8. Transfers to Third Countries

The use of Wix, Google, Microsoft, Calendly and other international providers may involve the processing or transfer of personal data outside the European Economic Area.

​

Where applicable, such transfers are carried out on the basis of one or more of the following safeguards:

  • adequacy decisions adopted by the European Commission;

  • the EU–US Data Privacy Framework, for certified organisations;

  • Standard Contractual Clauses approved by the European Commission;

  • any additional technical, contractual and organisational measures;

  • other legal bases permitted by the GDPR.

​

Users may request information about the safeguards applied to international data transfers by contacting the Data Controller.

​9. Retention Periods

Personal data is retained for the periods specified in the section concerning the purposes of processing.

​

These periods may be extended where necessary to:

  • comply with legal obligations;

  • manage investigations or audits;

  • respond to complaints or disputes;

  • protect or defend the Data Controller’s rights;

  • manage a subsequent contractual relationship.

​

Once the applicable retention period has expired, the data will be deleted, anonymised or rendered no longer attributable to the data subject, unless further retention is required by law.

​

Cookie and similar technology retention periods are specified in the Cookie Policy and may be reduced through browser settings or by withdrawing consent.

10. Security and Confidentiality

FST 3D adopts technical and organisational measures appropriate to the level of risk to protect personal data against:

  • unauthorised access;

  • loss;

  • destruction;

  • alteration;

  • disclosure;

  • unlawful or improper use.

  • ​

Access to personal data is restricted to individuals who genuinely need it to perform their duties.

​

The Data Controller verifies, within the limits of its responsibilities, the reliability of the service providers used.

However, no system connected to the Internet can guarantee absolute security.

​

In the event of a personal data breach, the procedures provided for under Articles 33 and 34 GDPR will be applied where necessary.

11. Children

The Website presents professional services primarily intended for businesses, professionals and organisations and is not designed to knowingly collect children’s personal data.

 

A parent or person exercising parental responsibility may contact the Data Controller to request information or the deletion of data that may have been submitted by a child without appropriate authorisation.

12. Automated Decision-Making and Profiling

FST 3D does not make decisions based solely on automated processing that produce legal effects or similarly significant consequences for the user.

​

FST 3D does not carry out commercial profiling using data collected through the contact form.

 

Any analytics tools that are activated produce statistics and indicators concerning the use of the Website, in accordance with their configurations and the preferences expressed by the user.

13. Data Subject Rights

In the circumstances provided for by the GDPR, data subjects may exercise the following rights:

  • obtain confirmation as to whether their personal data is being processed;

  • access their personal data and receive a copy pursuant to Article 15 GDPR;

  • obtain the rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR;

  • obtain the erasure of personal data in the circumstances provided for by Article 17 GDPR;

  • obtain restriction of processing pursuant to Article 18 GDPR;

  • receive the data they have provided in a structured format and transmit it to another controller, where applicable, pursuant to Article 20 GDPR;

  • object to processing based on legitimate interests pursuant to Article 21 GDPR;

  • withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal, pursuant to Article 7(3) GDPR;

  • obtain the safeguards provided in relation to automated decision-making, where applicable, pursuant to Article 22 GDPR.

​

The exercise of a right may be subject to the conditions, limitations and exceptions established by the applicable legislation.

14. Complaints and Legal Protection

Data subjects who believe that their personal data is being processed in breach of the applicable legislation may lodge a complaint with the:

​

Italian Data Protection Authority
https://www.garanteprivacy.it

 

Data subjects may also contact the competent supervisory authority in the country where they live or work and retain the right to seek judicial remedies.

15. How to Exercise Your Rights

Requests concerning the exercise of data protection rights may be sent to:

​

Email: info@fst3d.com
Certified email: fst3dsrl@pec.it

​

The Data Controller may request only the information necessary to verify the identity of the person submitting the request and prevent fraudulent requests.

 

Requests will be handled within the time limits established by Article 12 GDPR. A response will normally be provided within one month of receipt, subject to any extension permitted by the applicable legislation.

16. Updates and Language

The Data Controller may update this Privacy Policy following changes relating to:

  • legislation;

  • technology;

  • its organisation;

  • the services and providers used;

  • the methods used to process personal data.

  • ​

The date of the latest update is shown at the beginning of this page.

​

Any material changes will be communicated using appropriate methods, taking into account the nature and importance of the update.

​

In the event of any discrepancy between the Italian version and the English translation, the Italian version will prevail to the extent permitted by the applicable legislation.

bottom of page