Last updated: 8 November 2026
This Privacy Notice explains how personal data are processed when you visit lolligroup.com, contact Lolli Group or request information about our professional services.
1. Data Controller
The Data Controller is Lolli Group, the business name used for the professional activity identified by VAT No. IT14193041002.
Address: Via Camillo Iacobini 185, 00139 Rome, Italy
Email for privacy matters: [email protected]
2. Personal data we process
Information you provide
When you contact us, we process the information you choose to provide, such as your name, email address, company, project requirements, message and subsequent correspondence. Please do not submit special-category data or confidential information unless it is necessary and we have expressly requested it.
Technical and security data
Our servers and security systems may process IP address, date and time of access, requested resource, browser and device information, referring page, response status and security events. These data are used to deliver the website, maintain its security and diagnose technical problems.
Analytics and advertising data
Google Analytics, Google Ads and Google Tag Manager are activated only after the relevant consent. Depending on your choices, these services may process online identifiers, IP-derived information, page views, interactions, campaign information and device or browser data. Non-essential tags remain blocked when consent is refused or has not yet been given.
3. Purposes and legal bases
- Provide and secure the website: our legitimate interest in operating a reliable and secure service under Article 6(1)(f) GDPR.
- Respond to enquiries and prepare proposals: steps taken at your request before entering into a contract under Article 6(1)(b) GDPR.
- Perform professional services: performance of a contract under Article 6(1)(b) GDPR.
- Meet tax, accounting and legal obligations: compliance with a legal obligation under Article 6(1)(c) GDPR.
- Analytics and advertising measurement: your consent under Article 6(1)(a) GDPR and Article 122 of the Italian Privacy Code. You can withdraw consent at any time.
- Prevent abuse and defend legal rights: our legitimate interest under Article 6(1)(f) GDPR or the establishment, exercise or defence of legal claims.
We do not use contact-form data for marketing unless you have separately requested or consented to marketing communications.
4. Whether data are required
The email address and message marked as required in the contact form are necessary to receive and answer your enquiry. If you do not provide them, we cannot respond through the form. Other information is optional unless it becomes necessary for a requested service or legal obligation.
5. Recipients and service providers
Personal data may be processed by suppliers that provide hosting and infrastructure, email delivery, website forms, security, maintenance, analytics and advertising services. They act as independent controllers or as processors under appropriate contractual terms, according to their role.
Google Ireland Limited and its affiliates process data only for the Google services you enable through the consent panel. Data may also be disclosed to professional advisers, public authorities or other recipients when required by law or necessary to protect legal rights. We do not sell personal data.
6. International transfers
Some suppliers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework for participating organisations, Standard Contractual Clauses or another lawful safeguard under Chapter V GDPR. You may contact us for information about the safeguard relevant to a specific transfer.
7. Retention
- Enquiries that do not lead to a contract are normally deleted or anonymised within 24 months after the last meaningful contact.
- Contractual, billing and accounting records are retained for the period required by Italian law, normally 10 years.
- Routine technical and security logs are normally retained for no longer than 12 months, unless a security event, investigation or legal obligation requires longer retention.
- The cookie preference is stored for 6 months.
- Google Analytics data are retained according to the active GA4 property setting and only while needed for aggregate website measurement. The period is reviewed whenever the analytics configuration changes.
Data contained in protected backups are isolated from ordinary use and removed when the applicable backup cycle expires.
8. Cookies and consent choices
Essential technologies are used to deliver and secure the website. Analytics and marketing technologies are optional and are blocked until you choose to enable them. See the Cookie Policy for the current categories, providers and durations.
You can change or withdraw your choice at any time through the “Cookie settings” link in the footer. Withdrawal does not affect processing carried out before withdrawal.
9. Your rights
Under the GDPR, where the relevant conditions apply, you may request access, rectification, erasure, restriction, data portability and objection. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali.
Send requests to [email protected]. We may ask for information reasonably necessary to verify your identity and will respond within the period required by law.
10. Security and children
We use technical and organisational measures proportionate to the nature of the data and the risks involved. No internet service can guarantee absolute security. This website and its professional services are not directed to children.
11. Other services
This Notice applies to lolligroup.com. LollyMap, Google Ads Manager and any other Lolli Group application should display a service-specific notice when their processing differs from the website processing described here.
12. Changes
We may update this Notice when our services, suppliers or legal obligations change. The date above identifies the latest published version. Material changes will be highlighted where appropriate.