Privacy Policy

Last updated: 20/05/2026

This Privacy Policy describes how Lucsartech Srl collects, uses and protects the personal data provided through www.lucsartech.it, in compliance with Regulation (EU) 2016/679 (GDPR) and the updated Italian Legislative Decree 196/2003.

1. Data Controller

The Data Controller is Lucsartech Srl, registered office at Viale Martiri della Libertà 44, 43036 Fidenza (PR), Italy. Email: info@lucsartech.it.

2. Types of Data collected

We collect the following personal data through the site:

  • Data provided directly by the user via the contact form or the demo request form: first name, last name, email, phone, company name, business role, number of users, ERPNext modules of interest, message, city/location.
  • Technical browsing data collected automatically: IP address, browser type, operating system, referrer page, pages visited, date and time of access.
  • Campaign tracking parameters (UTM): utm_source, utm_medium, utm_campaign, utm_term, utm_content — stored only if the user arrives via a link containing such parameters, to measure the effectiveness of our marketing campaigns.
  • Consent data: choice regarding cookies (accepted / rejected) and consent timestamp.

Non raccogliamo dati particolari (ex "sensibili") ai sensi dell'art. 9 GDPR.

3. Purpose and Legal Basis for Processing

Personal data is processed for the following purposes:

  • Respond to requests for information, quotes, demos or support — legal basis: pre-contractual measures at the data subject's request (GDPR art. 6.1.b).
  • Send, on explicit request, commercial documentation — legal basis: consent (GDPR art. 6.1.a).
  • Ensure proper operation of the site, prevent abuse and fraud — legal basis: legitimate interest of the Controller in service security (GDPR art. 6.1.f).
  • Analyse in aggregate form the use of the site to improve its content — legal basis: consent (GDPR art. 6.1.a), given via the cookie banner.

4. Third-Party Services and Data Transfers

We rely on the following providers, acting as Processors under GDPR art. 28:

  • Frappe Cloud (Frappe Technologies Pvt. Ltd., India): site and database hosting. Data subject to extra-EU transfer covered by Standard Contractual Clauses approved by the EU Commission.
  • Microsoft 365 (Microsoft Ireland Operations Ltd., Irlanda): sending and receiving notification emails generated by the site. Data processed within the European Economic Area.
  • Google Analytics 4 (Google Ireland Limited, Irlanda): aggregate measurement of site usage, activated only after explicit consent. IP anonymised, no sharing with third parties for profiling. Google may transfer data to the United States under the EU-US Data Privacy Framework.

5. Retention Period

  • Contact and demo requests: up to 24 months from the last interaction, unless legal or contractual obligations apply.
  • Technical server logs: 12 months, then anonymised.
  • Aggregated GA4 data: retained for 14 months per configuration.
  • Technical cookies: duration shown in the table in chapter 7.

6. Rights of the Data Subject

As a data subject you have the right to:

  • Access your data (GDPR art. 15);
  • Request correction or deletion (GDPR arts. 16-17);
  • Obtain restriction of processing (GDPR art. 18);
  • Object to processing for legitimate reasons (GDPR art. 21);
  • Request data portability (GDPR art. 20);
  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
  • Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise your rights send an email to info@lucsartech.it. We will reply within 30 days.

7. Cookie Policy

The site uses cookies grouped into the following categories:

Cookie Category Purpose Duration Consent
sidTechnicalFrappe user session7 daysNot required
lucs_cookie_consentTechnicalStores your cookie choice365 daysNot required
lucs_utmFunctionalMarketing campaign attribution (UTM parameters)30 daysNot required
_ga, _ga_*Analytics (Google Analytics 4)Aggregated visit measurement, anonymised IP2 yearsRequired

Al primo accesso il sito mostra un banner che consente di accettare o rifiutare i cookie analitici. La scelta è salvata e modificabile in qualsiasi momento svuotando i cookie del sito dal browser o cliccando "Rifiuta" nel banner quando riappare.

We do not use advertising profiling cookies, remarketing, or social plugins that track the user outside the site.

8. Changes to this Policy

The Controller reserves the right to update this policy to reflect regulatory changes or evolving services. Changes are published on this page, with an updated date at the top. Please check this page regularly.