dbinnovation

Legal

Privacy & Cookie Policy

Last updated: 26 July 2026

This notice explains how DB Innovation S.r.l. ("DB Innovation", "we", "us") processes personal data and uses cookies and similar technologies on this website, dbinnovationsrl.it (the "Site"), in line with Regulation (EU) 2016/679 (the "GDPR") and the ePrivacy rules implemented in Italy via the Personal Data Protection Code (Legislative Decree 196/2003, as amended) and the Garante per la protezione dei dati personali's Cookie Guidelines.

This Site is an informational corporate presence only — it has no user accounts, no checkout, and no login. It links out to royalpie.it, which operates under its own, separate privacy and cookie policy governing the Royalpie product and app.

1. Data controller

The data controller is DB Innovation S.r.l., a company incorporated under Italian law with registered office in Montecatini Terme (PT), Italy, registered with the Companies Register of Pistoia-Prato under no. 02117080479 (P.IVA / tax code 02117080479), share capital € 10.000,00 fully paid up. For any privacy question or to exercise the rights described below, contact us at contact@dbinnovationsrl.it.

We have not appointed a Data Protection Officer, as none of the conditions in Art. 37(1) GDPR applies: we are not a public authority, our core activities do not consist of large-scale regular and systematic monitoring of data subjects, and we do not process special categories of data on a large scale. Privacy requests are handled directly at the address above.

2. What personal data we process

We only process the following, and nothing else:

  • Data you send us directly — if you email contact@dbinnovationsrl.it, we receive whatever you include (typically your name, email address and message content) in order to reply to you. This Site has no contact form, no newsletter sign-up and no user accounts: email is the only channel through which you can send us data.
  • Standard hosting/server logs — the Site is served by Cloudflare Pages. Like virtually any web host, Cloudflare's edge network processes technical data (IP address, user agent, request timestamps) to serve pages, keep the Site secure and mitigate abuse. DB Innovation does not itself run any additional visitor tracking, analytics or advertising scripts on this Site at this time.
  • Local storage on your device — a small amount of data is written to your browser's localStorage, not to third-party trackers. See §5 Cookies & similar technologies for the full inventory.

We do not use advertising cookies, do not sell personal data, and do not build advertising or tracking profiles of visitors.

  • Replying to your emails — Art. 6(1)(b) GDPR (pre-contractual/contractual relations) or Art. 6(1)(f) GDPR (our legitimate interest in responding to inbound inquiries), depending on context.
  • Keeping the Site secure and operational (hosting/server logs) — Art. 6(1)(f) GDPR, our legitimate interest in security, fraud prevention and service reliability, exercised through our hosting provider, Cloudflare.
  • Strictly necessary local storage (language preference, cookie-preference record) — exempt from consent under Art. 122 of the Italian Privacy Code because it is technically essential to a feature you actively use.
  • Any future non-essential cookie or script (e.g. analytics) — Art. 6(1)(a) GDPR, your freely given, specific consent, collected via the cookie banner described in §5, and never activated beforehand.

4. Retention

  • Email correspondence (held in our Zoho Mail mailbox) is kept only as long as needed to handle your request and for any legitimate follow-up — generally no longer than 24 months from the last exchange, unless a longer period is required by law (e.g. tax or civil-law limitation periods).
  • Hosting/server logs are retained by Cloudflare for a limited operational period consistent with security and abuse-prevention purposes, not indefinitely.
  • Local-storage values persist on your own device until you clear your browser data or withdraw consent as described below — we never receive or store this locally-held data on our servers.

5. Cookies & similar technologies

A cookie (or similar technology, such as browser localStorage) is a small piece of data a website can store on your device. The table below lists everything this Site stores, why, and for how long.

Name Type Category Purpose Duration
dbi-lang localStorage Strictly necessary Remembers your EN/IT language choice so we don't ask again on every page. Until cleared by you
dbi-cookie-consent localStorage Strictly necessary Records the cookie preference you set in the banner below, so it isn't shown again on every visit. 6 months, then we ask again — or until you change it
Cloudflare edge/security cookies HTTP cookie (only if issued) Strictly necessary Set only if Cloudflare's network needs to distinguish requests for security/abuse-prevention purposes. No advertising or analytics cookie is issued by this Site. Session or short-lived
Analytics (reserved, currently inactive) — Analytics (opt-in) No analytics script runs on this Site today. If we ever enable privacy-respecting analytics, it will load only after you actively opt in through the cookie banner, and you can withdraw at any time. N/A — not in use

No third-party content, fonts or trackers

Every asset this Site needs — stylesheets, scripts, images and the Inter and Space Grotesk typefaces — is served from dbinnovationsrl.it itself. Your browser makes no request to any third-party domain while viewing these pages. In particular:

  • Web fonts are self-hosted. The Inter and Space Grotesk font files are stored on our own servers and delivered from our own domain. We do not load them from Google Fonts (fonts.googleapis.com / fonts.gstatic.com), so your IP address is never disclosed to Google in order to render this Site. (Loading fonts from Google's CDN transmits the visitor's IP address to Google; a German court found that doing so without consent infringed the data subject's rights — LG München I, 20 January 2022, case 3 O 17493/20. We removed that transfer instead of asking you to consent to it.)
  • No analytics, tag manager, advertising pixel, social plugin, embedded video, map, chat widget or CDN-hosted library runs on this Site.
  • This is enforced technically, not just by policy: the Site sends a Content Security Policy header restricting scripts, styles and fonts to our own origin (default-src 'self'), so a third-party asset cannot be introduced silently.

The only party that necessarily sees your IP address is our hosting provider, Cloudflare, because it must receive your request in order to serve you the page — as described in §2 and §6.

Managing your cookie preferences

You can accept or reject non-essential categories at any time using the cookie banner shown on first visit. Rejecting is a single click, exactly like accepting, and closing or ignoring the banner is never treated as consent. Your choice is remembered for six months, after which we ask again rather than assume it still stands. You can change or withdraw it at any moment here or via "Cookie Settings" in the footer of every page:

You can also block or delete cookies/local storage entirely through your browser settings, though doing so may remove your saved language preference.

6. Recipients and international transfers

We share data only with processors strictly necessary to run the Site:

  • Cloudflare, Inc. (and Cloudflare Germany GmbH for EEA customers) — hosting, content delivery and security for the Site (Cloudflare Pages), acting as our data processor under Art. 28 GDPR. Cloudflare may process data outside the EU/EEA under appropriate safeguards (EU Standard Contractual Clauses).
  • Zoho Corporation B.V. (Zoho Mail) — our email provider, which hosts the contact@dbinnovationsrl.it mailbox and therefore processes any message you send us. Zoho acts as our data processor under Art. 28 GDPR; where data is processed outside the EU/EEA, it is covered by EU Standard Contractual Clauses. Zoho does not use the content of our mailbox for advertising.

No other recipient exists. In particular, following the removal of externally-hosted web fonts (see §5), no data is shared with Google in connection with this Site.

We do not sell, rent or otherwise trade personal data to third parties, and we carry out no automated decision-making or profiling within the meaning of Art. 22 GDPR.

7. Your rights

Under Articles 15–22 GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten"), where applicable;
  • Restrict or object to processing based on legitimate interest;
  • Receive your data in a portable format, where applicable;
  • Withdraw consent at any time (for anything processed on the basis of consent, e.g. optional cookies), without affecting the lawfulness of processing before withdrawal;
  • Lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of your EU member state of residence.

To exercise any of these rights, email contact@dbinnovationsrl.it. We will respond within one month, as required by Art. 12 GDPR.

8. Children's privacy

This Site is a corporate informational site not directed at children, and we do not knowingly collect personal data from anyone under 16.

9. Changes to this notice

We may update this notice as the Site or applicable law evolves. Material changes will be reflected by updating the "Last updated" date above; we encourage checking back periodically.