1. Data Controller
The data controller for this website is:
Fulvio Domenico Marchetti
Strada Cesare Ferrero di Cambiano, 51
10024 Moncalieri (TO), Italy
Email: privacy@onesynergy.eu
2. What Data We Collect
When you submit the contact form on this website, we collect the following personal data:
- First and last name: to identify who is contacting us
- Email address: to reply to your enquiry
- Message: the content of your enquiry or expression of interest
- Organisation / Company (optional): to understand your professional context
- Area of Expertise / Interest (optional): to better direct your request within the network
We do not collect sensitive personal data (such as health data, political opinions, or financial information).
When you use the Digital Readiness Score (DRS) assessment tool and choose to receive your personalised report by email, we additionally collect:
- Email address: to deliver your assessment report
- Assessment responses: your answers to the 23 digital readiness questions (not linked to any identifier beyond your email)
- Score results: your overall DRS score and dimensional scores
The DRS assessment can be completed and viewed online without providing any personal data (use the “Skip and view online only” option).
When you visit this website, we may also collect the following technical data for analytical purposes, subject to your cookie consent:
- IP address (anonymised): to understand the geographic distribution of visitors; Google Analytics 4 applies IP anonymisation by default
- Browser type, operating system, and device type: to ensure the site displays correctly across devices
- Pages visited, time spent on each page, and navigation path: to understand how visitors use the site and improve its content
- Traffic source (search engine, direct, referral): to understand how visitors find us
This data is collected through Google Analytics 4 via Google Tag Manager, and is processed only after you have given your consent via the cookie banner (Statistics category).
3. Legal Basis for Processing
We process your personal data on the basis of the following legal grounds under the GDPR:
- Contact form: freely given consent (Article 6(1)(a) GDPR), expressed by ticking the privacy checkbox before submitting the form.
- DRS report delivery: consent (Article 6(1)(a) GDPR): mandatory to receive your personalised report by email. Without this consent, the report cannot be sent.
- DRS commercial communications (optional): separate, freely given consent (Article 6(1)(a) GDPR): you may receive your report without ticking this box.
- Website analytics (Google Analytics 4): freely given consent (Article 6(1)(a) GDPR), expressed via the cookie consent banner (Statistics category). You may withdraw this consent at any time by adjusting your cookie preferences via the cookie icon at the bottom of the page.
- Search Console monitoring (Google Search Console): legitimate interest (Article 6(1)(f) GDPR): to monitor search performance and technical health of this website. No personal data of visitors is transferred to Google Search Console.
You may withdraw any consent at any time by contacting us at privacy@onesynergy.eu, without affecting the lawfulness of processing carried out prior to withdrawal.
4. Purpose of Processing
Your data is collected exclusively to:
- Respond to your enquiry or expression of interest in joining the OneSynergy network
- Follow up on collaboration or partnership opportunities you have initiated
- Deliver your Digital Readiness Score (DRS) personalised report: only when you request it by email
- Send commercial communications from OneSynergy: only if you have separately and explicitly opted in
- Analyse website usage in aggregate to improve the quality and content of this site: only with your consent (Statistics category)
Your data will not be used for any automated decision-making or profiling.
5. Data Retention
Personal data is retained as follows:
- Contact form data: maximum 24 months from date of submission, or until you request deletion, whichever comes first.
- DRS assessment data (email + responses): maximum 12 months from the date of assessment, or until you request deletion. If you have opted in to commercial communications, your email is retained until you withdraw consent.
- Analytics data (Google Analytics 4): retained for 14 months from the date of collection (GA4 platform default), after which it is automatically deleted by Google.
After the applicable retention period, all data is permanently deleted from our systems.
6. Data Sharing
We do not sell, trade, or rent your personal data to third parties. Your data may be processed by the following technical service providers acting as data processors on our behalf:
- Aruba S.p.A.: web hosting provider (servers located in Italy/EU)
- WPForms LLC: contact form software (form data stored on our server only, not transmitted to WPForms)
- Notion Labs, Inc.: workspace and database platform used to store Digital Readiness Score (DRS) assessment submissions (data stored in Notion’s cloud infrastructure in the United States; privacy policy: notion.com/trust/privacy-policy)
- Google LLC: Google Analytics 4 and Google Tag Manager, used for website analytics (processed only on your consent, Statistics category); and Google Search Console, used to monitor search performance (no visitor personal data is transferred). Privacy policy: policies.google.com/privacy
Data processed by Aruba S.p.A. and WPForms LLC is stored on servers located within the European Union or EEA.
Notion Labs, Inc. stores DRS submissions in the United States, and Google LLC may transfer analytical data to the United States. These transfers are lawful under the certification of both companies in the EU–US Data Privacy Framework (DPF), which the European Commission recognised as providing an adequate level of data protection (Decision of 10 July 2023).
7. Cookies
This website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help the site function correctly and allow us to understand how visitors use the site.
We use the following categories of cookies:
- Functional: strictly necessary for the website to operate (e.g. cookie consent preferences). These are always active and do not require consent.
- Statistics: analytical cookies that collect anonymised data on how visitors use the site, managed via Google Tag Manager and Google Analytics 4. These cookies are only set after you give your consent. Cookies in this category include:
_ga(2 years) and_ga_G59FHYFKC7P(2 years).
You can manage or withdraw your cookie consent at any time by clicking the cookie icon at the bottom of the page. For detailed information on all cookies in use, please refer to our Cookie Policy.
8. Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access (Art. 15): you may request a copy of the data we hold about you
- Right to rectification (Art. 16): you may request correction of inaccurate data
- Right to erasure (Art. 17): you may request deletion of your data (“right to be forgotten”)
- Right to restriction of processing (Art. 18): you may request that we limit how we use your data
- Right to data portability (Art. 20): you may request your data in a structured, machine-readable format
- Right to object (Art. 21): you may object to the processing of your data
- Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at: privacy@onesynergy.eu. We will respond within 30 days.
9. Right to Lodge a Complaint
If you believe your data is being processed in violation of the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority:
Garante per la Protezione dei Dati Personali
Piazza Venezia 11, 00187 Roma, Italy
Website: www.garanteprivacy.it
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date.
Last updated: October 2026