What data this website collects, why it is processed and how long it is kept.
The data controller is OltrExport SR, Via Luigi Settembrini, Veglie (Lecce), Italy, VAT number IT05493930753. For any matter concerning personal data, please write to info@oltrexport.com.
No data protection officer has been appointed, as the conditions set out in Article 37 of Regulation (EU) 2016/679 do not apply.
The website sets no cookies, neither its own nor third-party ones. It uses no analytics or behavioural measurement tools, hosts no social buttons, and loads no typefaces, maps, videos or other content from external servers: everything the pages are made of is hosted on this domain.
This is why no consent banner appears. Consent is required for profiling cookies and tracking technologies; where neither is present, a banner is not due.
The one exception is the WhatsApp link shown on some pages. It is an ordinary link: until it is clicked, no data reaches Meta. Clicking it opens the WhatsApp service, which is governed by the privacy notice of Meta Platforms Ireland Ltd.
When the form on the Contact page is submitted, the data entered in its fields is processed: name, company, e-mail address, website if given, and the text of the message.
Alongside these, the IP address from which the message is sent is recorded, with the date and time. It serves solely to limit repeated submissions from the same address and to contain unwanted automated messages.
Messages are delivered by e-mail and are also saved to a log on the server, so that an enquiry is not lost should e-mail delivery fail.
The form data is used to answer the enquiry and, should the exchange continue, to assess a possible working relationship. The legal basis is the performance of pre-contractual measures taken at the request of the data subject, under Article 6(1)(b) of the Regulation.
Recording the IP address rests on the controller’s legitimate interest in protecting the site from automated submissions and abuse, under Article 6(1)(f).
No profiling is carried out and no automated decisions are taken. The data is not used for marketing and is neither sold nor disclosed to third parties.
Messages and contact details are kept for twenty-four months from the last exchange, unless that contact gives rise to a contractual relationship: in that case the retention periods laid down by tax and civil law apply.
Server access logs are kept by the hosting provider according to its own technical retention periods.
The data is accessible to the controller. It is also technically accessible to the hosting provider, Aruba S.p.A., acting as a processor under Article 28 of the Regulation, and to the e-mail service provider.
No data is transferred outside the European Economic Area. The servers hosting the website and the e-mail are located in the European Union.
Anyone who submits their data may at any time ask to access it, to have it corrected or erased, to restrict its processing, to receive it in a machine-readable format, or to object to processing based on legitimate interest. These are the rights set out in Articles 15 to 22 of the Regulation.
To exercise them, simply write to info@oltrexport.com. A reply follows within one month.
It is always possible to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Notice last updated on 21 October 2026.