Controller and contact
SENES SOCIETA' COOPERATIVA SOCIALE, Via Principe di Paternò, 78, 90144 Palermo, Italia. Email: info@senesgroup.it. Use this address for data protection requests.
Contact enquiries
The form collects your name, email, optional organisation and message. Required fields let us understand and answer the enquiry; without them we cannot process the submission. We do not request attachments, health data or confidential information about others. We do not use these details for newsletters or marketing.
Purposes and legal bases
For requests made by an individual in preparation for a possible contract with that individual, processing is based on the requested pre-contractual steps (GDPR Article 6(1)(b)). For professional contacts acting for an organisation and general enquiries, the basis is the legitimate interest of SENES and the requester in managing correspondence and collaboration (Article 6(1)(f)), subject to individual rights. Protecting services and preventing abuse also relies on legitimate interests. Applicable legal obligations rely on Article 6(1)(c). We do not request generic consent simply to answer an enquiry.
Browsing and abuse prevention
The hosting infrastructure may process IP addresses, timestamps, requested URLs, browser information and security events needed to deliver and protect the service. The form limits requests: the function temporarily holds an identifier derived from the IP address, a counter and a 10-minute expiry. Application code does not log messages, email addresses or IP addresses. Infrastructure providers manage their own technical logs under their contracts.
Recipients and providers
Authorised SENES staff and providers needed for hosting, email delivery and mailbox management can access enquiries. The site is prepared for Vercel hosting; form email delivery uses Resend (Plus Five Five, Inc.) and the SENES recipient mailbox is provided by IONOS. Form contents and the SENES recipient are sent to the delivery provider, with the requester’s email as the reply address. We do not automatically email copies to the requester. Providers acting for SENES must be governed under GDPR Article 28.
International transfers
Providers with infrastructure or access outside the EEA may involve international transfers. Resend states that stored data is held in the United States; a European sending region does not restrict storage to the EEA. Its DPA includes EU Standard Contractual Clauses. Contact SENES for information on applicable provider safeguards and a copy of relevant information. DNS configuration or a European sending region alone does not eliminate transfers.
Retention
Enquiries are kept for the time needed to answer them and handle the follow-up conversation. At closure, information no longer needed is assessed for deletion. If a relationship follows, relevant relationship-management and legal retention rules apply. Defending rights may require limited retention where necessary. The function keeps no message archive; messages remain in the SENES mailbox and delivery systems under their respective rules. Resend currently states 30 days for email and log data on Free, Pro and Scale plans; this is not the retention period for the SENES mailbox.
Photographs and dissemination
Mobility stories may publicly display photographs of people and information on project activities. SENES collects participants’ consent for publication of photographs for dissemination in the mobility context (GDPR Article 6(1)(a)). Consent must cover the intended uses and can be withdrawn without affecting previous lawful uses. Project-specific information and permissions explain the context and applicable conditions; any children require the relevant specific safeguards and permissions. To flag an image or ask about its use, contact info@senesgroup.it and identify the relevant page.
Your rights
Where applicable, you may request access, correction, erasure, restriction, portability and objection, especially to processing based on legitimate interests. Consent-based processing, if any, can be withdrawn without affecting previous lawful processing. Contact the controller, who will respond within GDPR time limits, normally one month subject to permitted extensions. You may complain to the Italian Garante or the competent supervisory authority. We do not make automated decisions producing legal or similarly significant effects.
Cookies and updates
Read the cookies and browser technologies page. We update this notice when processing changes. Text reviewed: 17 October 2026.