Privacy notice

General draft for the test website — updated on 20 September 2026. This notice describes the website in its current configuration. Before final publication, Big Project must confirm the controller’s details, the providers involved, any international transfers and the retention periods for enquiries and applications.

1. Controller and contact details

The controller identified for this website is Big Project SRL, Via P. Tosi, 308, 47822 Santarcangelo di Romagna (RN), Italy. For information about the processing of personal data or to exercise your rights, email info@big-project.it. These are the contact details currently published on the website. Further identification details and any appointment of a data protection officer must be confirmed by the controller.

2. Information requests and quotations

The Contact form collects your name, email address and message, which are required to handle your enquiry. Company, telephone number and service of interest are optional. You can describe your project without including sensitive data, credentials or unnecessary information about other people. The form does not accept attachments.

The data is used to read your enquiry, contact you and assess the requested work. For quotations and steps taken at the individual’s request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For general enquiries and communications with business contacts, processing relies on the legitimate interest in handling and responding to incoming communications, Article 6(1)(f), subject to the individual’s rights. The form does not subscribe you to a newsletter or trigger promotional campaigns.

Providing data is voluntary, but the form cannot be submitted without the required fields. Email delivery from the test website still needs to be configured and verified. For operational communications, use the company’s contact details directly.

3. Job applications

The Careers page lets you start an application by email. Information supplied by the applicant, including any CV, is used to assess the application and manage recruitment communications as part of pre-contractual steps requested by the individual. Send only information relevant to the role and avoid unnecessary special categories of personal data. The controller must define CV retention criteria and periods before this notice is used as the final version.

4. Browsing and security

During browsing, the server and technical services may process IP addresses, dates and times, requested pages, browser information and connection data. This information supports website delivery, fault detection and protection against abuse. The legal basis is the legitimate interest in the security and proper operation of the service. Hosting, security and backup log retention periods must be checked with the respective providers.

The form uses a temporary technical identifier to display submission feedback and recover fields after an error. Feedback data has an application validity of five minutes and is consumed when read. Physical removal of expired data from the database and backups depends on their cleanup cycles. An anti-spam counter based on a fingerprint of the IP address expires after fifteen minutes.

5. Cookies and external services

The website uses technical tools to remember preferences and provide requested functions. The preference manager stores the cookieadmin_consent cookie, currently for 365 days. The pll_language cookie remembers the language for 365 days. The form’s bp_contact_feedback cookie lasts five minutes. Authentication cookies may be used when accessing restricted areas. You can review your choices through the website’s cookie preference control.

The current theme does not integrate advertising or traffic analytics. Fonts for the main website are served locally. Maps are links to Google Maps and are not embedded in the page. The external service opens only when you follow the link and applies its own privacy notice. Before adding analytics, embedded content or other services, this notice must be reviewed and prior consent obtained where required.

6. Recipients and transfers

Enquiries are intended for people authorised by Big Project to handle them. Technical operations may involve hosting, email, maintenance, security and backup providers, whose roles and arrangements must be verified. Data may also be disclosed where required by law. The actual providers, processing locations, any transfers outside the European Economic Area and the relevant safeguards must be confirmed. This draft does not assume that all data remains within the European Union.

7. Retention

Enquiries should be retained for as long as necessary to handle them and any subsequent contractual relationship, taking account of legal obligations and documented needs to protect legal rights. Before final publication, the controller must establish operational periods or criteria for enquiries with no follow-up, applications, logs and backups. The form’s short feedback validity does not determine how long emails received in an inbox are retained.

8. Your rights

Where the GDPR applies, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Write to the contact address above. The controller may request information needed to verify your identity.

You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. The website form does not make automated decisions about enquiries or profile visitors.

9. Updates

This draft must be updated when services, purposes or processing methods change. The legal reference is Regulation (EU) 2016/679. Further cookie guidance is available from the Italian Data Protection Authority.