1. Data Controller
The Data Controller is:
Boris Technologies S.r.l.Via Giacomo Medici 84, 10145 Turin (TO), Italy
VAT No. 13134560013
Email: info@boristechnologies.com
You may contact the Data Controller at the address above with any request concerning the protection of your personal data.
2. Personal data processed
Browsing data
When you browse the website, its IT systems may automatically collect technical information such as your IP address, browser and device type, operating system, requested pages, date and time of the request, URI/URL addresses and server response codes. This information is necessary to operate, secure and correctly deliver the website.
Data you provide voluntarily
If you contact Boris Technologies by email or through other contact details published on the website, we process the data you voluntarily provide, such as your name, email address, company, message and any attachments.
Cookies and tracking technologies
The website uses Google Analytics 4 only after the user has given consent. Before acceptance, the Google Analytics tag is not loaded and no data is sent to Google through this tool. After consent, Google Analytics may collect device and browser information, visited pages, interactions, visit duration and source, and technical data needed to produce usage statistics. The website does not enable Google Signals or advertising personalisation through the tag.
With the same consent, the website also uses Microsoft Clarity, a behavioural analytics tool provided by Microsoft. Before acceptance, the Clarity script is not loaded. After consent, Clarity may record your interactions with the pages, such as mouse movements and clicks, scrolling, visited pages, device and browser information and IP address, to produce heatmaps, aggregate statistics and replays of browsing sessions. By default, Clarity masks the data entered into form fields.
The table below summarises the cookies and storage used by the website. Except for boris-analytics-consent-v1, which is saved in your browser’s local storage even if you reject, all of them are set only after consent. Durations are the providers’ defaults and may be shortened by browser limits.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
boris-analytics-consent-v1 | Boris Technologies | Stores your analytics consent choice. | 6 months |
_ga | Distinguishes users for statistical purposes. | 2 years | |
_ga_<container-id> | Persists session state. | 2 years | |
_clck | Microsoft | Stores the Clarity user ID and preferences. | About 1 year |
_clsk | Microsoft | Connects the pages you visit into a single session. | About 1 day |
MUID | Microsoft (third party) | Recognises the browser on Microsoft domains. | Up to 1 year |
You can change or withdraw your choice at any time with the button below or by selecting “Cookie preferences” in the footer. Withdrawal prevents further measurement and attempts to delete existing Google Analytics and Microsoft Clarity cookies for this website. Third-party cookies set on Microsoft domains can be deleted from your browser settings.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Enable browsing, keep the website secure and prevent abuse or malfunction. | The Controller’s legitimate interest in the security and operation of the website (Article 6(1)(f) GDPR). |
| Respond to information or contact requests submitted by you. | Taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), or the legitimate interest in managing communications (point (f)). |
| Produce aggregate statistics about website usage through Google Analytics 4 and analyse browsing behaviour through Microsoft Clarity, in order to understand performance and improve content and navigation. | Your consent (Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code). |
| Comply with legal obligations or requests from competent authorities. | Compliance with a legal obligation (Article 6(1)(c) GDPR). |
| Establish, exercise or defend legal claims. | The Controller’s legitimate interest in protecting its rights (Article 6(1)(f) GDPR). |
4. Provision of data
The provision of browsing data is necessary to use the website. Providing data by email is optional, but if you do not provide the information needed to handle your request, Boris Technologies may be unable to respond.
5. Processing and security
Personal data is processed using appropriate IT and organisational measures and in accordance with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation. The Controller takes reasonable technical and organisational measures to protect data against loss, unauthorised access, disclosure, alteration or destruction.
The website does not carry out solely automated decision-making that produces legal or similarly significant effects on its users.
6. Retention periods
Technical browsing data is retained only for as long as necessary to operate and secure the website, unless it is needed to investigate unlawful activity. Communications are retained for the time required to handle the request and generally for no longer than 24 months after the contact has ended, unless a contractual relationship is established or retention is necessary to comply with the law or protect a legal right.
Google Analytics cookies have a default maximum duration of 2 years. Data collected by Google Analytics is retained for the period configured in the relevant property and may be deleted or aggregated earlier where provided by the service settings and terms.
Microsoft Clarity cookies have a maximum duration of about 1 year. Data collected by Clarity, including session replays, is retained for the periods set by Microsoft for the service and deleted afterwards.
7. Recipients of personal data
Personal data may be processed by authorised personnel and disclosed, where necessary, to:
- Cloudflare, Inc., which provides hosting, delivery and protection for the website and therefore processes the browsing data of every visit;
- other infrastructure, cybersecurity and email providers;
- Google Ireland Limited and the Google group companies involved in providing Google Analytics, only after the user’s consent;
- Microsoft Ireland Operations Limited and the Microsoft group companies involved in providing Microsoft Clarity, only after the user’s consent;
- technical, legal, tax or administrative advisers;
- public authorities or other parties where required by law.
Providers that process personal data on behalf of Boris Technologies are appointed as processors under Article 28 GDPR where required.
8. Transfers outside the European Economic Area
Cloudflare, Google, Microsoft and other technology providers may process personal data in countries outside the European Economic Area, including the United States. In such cases, transfers are based on a European Commission adequacy decision or on appropriate safeguards under Articles 44 and following of the GDPR, including standard contractual clauses where applicable. More information is available in the Google Privacy Policy and its documentation on data transfer mechanisms, the Microsoft Privacy Statement and the Cloudflare Privacy Policy.
9. Your rights
Where provided for by the GDPR, you may ask the Data Controller to:
- provide access to your personal data;
- correct or complete inaccurate or incomplete data;
- erase your personal data;
- restrict processing;
- provide your data in a portable format;
- allow you to object to processing based on legitimate interests;
- allow you to withdraw consent, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
You may submit a request to info@boristechnologies.com. You also have the right to lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in your Member State.
10. Children
The website is intended for a professional audience and is not specifically directed at children. Boris Technologies does not knowingly collect children’s personal data through this website.
11. Changes to this policy
Boris Technologies may update this policy to reflect legal, technical or organisational changes. The updated version will be published on this page together with its revision date.