Last updated: July 31, 2026

Pursuant to Article 13 of EU Regulation 2016/679 (GDPR), SAR Consulting srl (hereinafter “SAR Consulting” or “Data Controller”) provides the following information on the processing of personal data collected through the website gruppomancuso.it

1. Data Controller

SAR Consulting srl
Registered Office: Viale Mediterraneo sn
92021 Aragona (AG) – Italy
VAT ID: IT02295640847
Email: comunicazione@sarconsulting.it
PEC: comunicazione@sarconsulting.it

2. Types of Data Processed

a) Browsing Data

Data collected automatically during website access (e.g., IP address, browser type, operating system, access time, pages visited).
This data is used anonymously for statistical and security purposes.

b) Voluntarily Provided Data

Personal data voluntarily entered by the user in contact forms, newsletter subscriptions, or email submissions: name, surname, email, phone, company, free text messages.

c) Cookies

The website uses technical, analytical, and profiling cookies, including third-party cookies. For more details, please consult the Cookie Policy.

3. Purposes and Legal Basis of Processing

4. Processing Methods

Data processing is carried out using IT, electronic, and paper tools, in compliance with the principles of lawfulness, fairness, transparency, minimization, and integrity.
The Data Controller adopts appropriate technical and organizational measures to protect data from unauthorized access, loss, disclosure, or destruction.

5. Data Retention

Personal data will be retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case:

• contact data: up to 12 months from the last interaction;
• data for promotional purposes: until consent is revoked;
• browsing data: max 26 months for analytical/statistical purposes (Google Analytics or similar);
• legal and accounting obligations: up to 10 years.

6. Disclosure to Third Parties and Transfer

Data may be disclosed to:

• IT and hosting service providers;
• email marketing and CRM platforms;
• accounting, legal, or tax consultants;
• public bodies and judicial authorities, if required by law.

All entities are duly appointed as Data Processors (Art. 28 GDPR) or act as independent Data Controllers.

The website may use tools (e.g., Google Analytics, Meta Pixel) that involve data transfers outside the EU. Such transfers occur in compliance with Chapter V of the GDPR (e.g., standard contractual clauses).

7. Data Subject Rights

The user has the right to:

• access their personal data (Art. 15);
• request its rectification (Art. 16) or erasure (Art. 17);
• restrict or object to processing (Art. 18-21);
• request portability (Art. 20);
• withdraw consent at any time;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights:
📧 comunicazione@sarconsulting.it

8. Updates

This policy may be subject to changes. We invite you to consult it periodically.
Last revision date: 07/31/2026