Privacy Policy
How we handle the personal data of everyone who visits untoldagency.it or gets in touch with us. In plain words: we only collect what we need to reply to you, we don’t sell data to anyone and we don’t track you.
Last updated: 24 October 2026
Who is the data controller
As required by Article 13 of Regulation (EU) 2016/679 (GDPR), this notice explains who processes your personal data, how and why.
The data controller is SAR GROUP SOLUTIONS SRL / GmbH, the company that owns the Untold Agency brand.
- Registered office
- Via Albertina Brogliati 56, 39012 Merano (BZ), Italy
- Tax code and VAT no.
- 03361450210
- REA no.
- BZ-253410
- Share capital
- € 10.000,00
- info@untoldagency.it
- PEC (certified email)
- sargroupsolutions@pec.it
- Phone
- +39 331 329 3516
We have not appointed a Data Protection Officer (DPO). For any privacy question, write to info@untoldagency.it: our team will reply to you directly.
What data we collect
Browsing data
When you open a page, the server hosting the site automatically records some technical data, as happens on any website: IP address, date and time of the visit, page requested, browser and device type, and the site you came from. It is only used to run the site and protect it from attacks and abuse: we don’t use it to find out who you are.
Data you send us
If you write to us using the form on the Contact page, you send us your first name, surname, email, mobile number, the services you’re interested in and your message. If you contact us by email, phone, WhatsApp or social media, we receive the data you choose to share, such as your name, number or email address and the content of your message.
Please don’t send us special categories of data, such as health information: we don’t need them to prepare a quote.
What we don’t collect
The site uses no profiling cookies, analytics tools or advertising pixels and doesn’t follow you around other websites. All the details are in the Cookie Policy.
Why we use it and on what legal basis
- Replying to you and preparing a quote: needed to follow up on your request (Article 6.1.b GDPR).
- Working together, if you become a client: to manage the contract and invoicing (Article 6.1.b) and to meet legal obligations, such as tax and accounting rules (Article 6.1.c).
- Protecting the site: browsing data is used for the site’s security and to prevent abuse, which is our legitimate interest (Article 6.1.f).
- Defending our rights: if a dispute arises, we use the data needed to handle it (Article 6.1.f).
We don’t use your data for newsletters, advertising or profiling, we don’t sell it and we don’t make automated decisions about you.
The form fields marked with an asterisk are needed to reply to you: without them we can’t follow up on your request.
How long we keep it
- Contact requests: if you don’t become a client, we delete your data 12 months after the last message.
- Clients: for the whole collaboration and then for as long as civil and tax law requires accounting records to be kept, that is up to 10 years.
- Browsing data: for as long as strictly necessary for the site’s security, according to the hosting provider’s settings.
- Disputes: until they are resolved.
EmailJS, the service that forwards the form’s messages, keeps a history of them for a limited period, under its own terms.
Who can see your data
Your data is only seen by our team, who are authorised and instructed to process it. To run the site and our communications we rely on a few providers, appointed as data processors (Article 28 GDPR):
- Hostinger International Ltd. (Cyprus, European Union): hosts the site.
- EmailJS Pte. Ltd. (Singapore, servers in the United States): forwards the form’s messages to our email inbox.
- Google, through Google Workspace: runs our email inbox.
If you become a client, some data also goes to our accountant and the advisers who assist us, only for tax and legal obligations. We only pass it to the authorities when the law requires it.
We never pass your data to anyone for marketing purposes. If you’d like the up-to-date list of providers, just write to us.
Transfers outside the European Union
EmailJS processes data on servers in the United States, and Google may also process it outside the European Union. In these cases the transfer is protected by the safeguards set out in the GDPR: the European Commission’s adequacy decision on the EU-US Data Privacy Framework, in which Google LLC participates, and the Standard Contractual Clauses approved by the Commission, which EmailJS uses with European customers.
Social media, WhatsApp and external links
On the site you’ll find links to our Instagram, Facebook, TikTok and LinkedIn profiles, to WhatsApp and to our Google Business Profile. They are plain links: until you click them, the site loads nothing from those platforms.
When you open one of these platforms or message us there, the rules of whoever runs it apply (for example Meta, TikTok, LinkedIn or Google), as they process the data as an independent controller. We only use the messages you send us there to reply to you, with the same retention periods set out above.
Your rights
At any time you can ask us:
- to tell you whether we process your data and to give you a copy (access, Article 15 GDPR);
- to correct or complete it (rectification, Article 16);
- to delete it (Article 17);
- to restrict its use (Article 18);
- to receive it in a machine-readable format, so you can take it elsewhere (portability, Article 20);
- to stop using it for processing based on our legitimate interest (objection, Article 21).
To exercise them, write to info@untoldagency.it or to our certified email (PEC) sargroupsolutions@pec.it. We will reply without delay and in any case within one month, free of charge.
If you think we are not handling your data correctly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the European country where you live or work.
Changes to this notice
If anything changes in the way we handle data, we update this page and the date at the top.
