Privacy policy

The data controller is ITAPAK Srls, Via Ginevrina da Fossano 29, 22063 Cantù (CO), Italy, P.IVA 04256290133. We have not appointed a data protection officer. For anything about your personal data, write to info@itapak.com.

This policy is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003). It covers the website itapak.com and the requests you send through it.

Requests you send us. When you contact the Forum, request an introduction, nominate a story or register interest in an event, we collect the details you enter: name, email address, organisation, the subject of your request, your message and, for nominations, the name and website of the company or person you propose. We use these to reply, to arrange the introduction or nomination you asked for, and to manage event places. Legal basis: the steps needed to act on your request (Article 6(1)(b) GDPR) and the consent you give by ticking the box on the form (Article 6(1)(a)).

Forum updates. If you subscribe, we use your email address to send news and invitations. Legal basis: your consent (Article 6(1)(a)). Every message includes a way to unsubscribe, and you can also write to us.

Technical data. Our hosting provider records the IP address, browser type, requested page and time of each request in server logs, used only to keep the site available and secure and to detect abuse. Legal basis: our legitimate interest in running a safe website (Article 6(1)(f)).

Analytics, only with your consent. If you accept analytics in the cookie banner, Vercel Web Analytics records the pages viewed, the referring site, the country of the request and the device and browser type. It sets no cookies and uses an identifier derived from the request that resets every day, so visits cannot be linked to you across days. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time from Cookie settings in the footer.

Your cookie choice. One first-party cookie records whether you accepted or rejected analytics, so we do not ask again for six months. Legal basis: our legitimate interest in honouring your choice (Article 6(1)(f)).

We do not ask for and do not want special categories of data such as health, political or religious information. Please leave them out of your messages. We make no decisions about you by automated means.

Introductions. The Forum exists to connect people. When you ask for an introduction to a company, investor or institution, we pass on the details needed for that introduction to the party you asked to meet. We do this only for the introduction you requested and tell you who we are contacting.

Service providers. Vercel Inc. hosts the website and processes server logs and, with your consent, analytics. Google LLC provides the email system in which requests and correspondence are kept. Both act on our instructions under data processing agreements.

Others. Professional advisers bound by confidentiality, and public authorities where the law requires it. We never sell personal data and do not share it for advertising.

The website runs on Vercel infrastructure in Frankfurt, Germany, in the European Union. Vercel and Google are certified under the EU-US Data Privacy Framework and are bound by the European Commission's standard contractual clauses for any access from the United States.

The Forum works between Italy, Pakistan and the Gulf. If you ask to be introduced to a party outside the European Economic Area, your details are transferred to that party because you requested it (Article 49(1)(b) GDPR). Their handling of your data is then governed by their own privacy practices and local law.

• Requests, introductions and related correspondence: 24 months after our last exchange, unless a business relationship follows, in which case for its duration and any legal retention period.
• Forum updates: until you unsubscribe. We keep a minimal record of the unsubscribe so we do not contact you again.
• Server logs: a short period set by our hosting provider.
• Your cookie choice: six months, then we ask again.
• Analytics: only aggregated statistics, which do not identify you.

You can ask us to confirm whether we hold data about you and to give you a copy (access); to correct it; to delete it; to restrict how we use it; to receive it in a portable format; and to object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time without affecting what was done before.

Email info@itapak.com and we will respond within one month. We may ask you to confirm your identity first.

If you believe we have not handled your data properly, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority in the EU country where you live or work.

The website is served over HTTPS, hosted in the EU and does not store form submissions in its own database. Access to correspondence is limited to the people who handle it.

The website is intended for professionals and is not directed at children. We do not knowingly collect data from anyone under 16.

We will update this page when our practices change and revise the date at the top. Significant changes will be announced on the website.