LEGAL NOTICE

Privacy
Policy.

Information on the processing of personal data pursuant to EU Regulation 2016/679 (GDPR) and applicable Italian data protection laws.

Last updated: January 1, 2026

— 01 — INTRODUCTION

Transparency,
first.

This Privacy Policy describes how Boost My SEO (hereinafter “we”, “us” or the “Data Controller”) collects, uses, stores and protects the personal data of users who visit the website https://boostmyseo.net (hereinafter the “Site”).

We invite you to read this notice carefully before providing any personal data or using the services offered. The Data Controller is committed to processing your data in full compliance with EU Regulation 2016/679 (GDPR) and applicable Italian data protection legislation.

— 02 — TYPES OF DATA COLLECTED

What data
we collect.

The Site may collect different types of personal data depending on user interaction with our services.

3.1 — VOLUNTARY
Data you provide
When you interact with contact forms, consultation requests, or newsletters:
→ First and last name
→ Email address
→ Phone number
→ Company name and job title
→ Website URL
→ Message or request content
3.2 — AUTOMATIC
Browsing data
Automatically collected by IT systems during navigation:
→ IP addresses and domain names
→ URL addresses of requested resources
→ Time of the request
→ Browser, OS, device type
→ Response status and file size
→ Operating system parameters
3.3 — COOKIES
Data via cookies
The Site uses technical cookies and, subject to consent, analytical and profiling cookies.
For more information, consult the dedicated Cookie Policy.
Go to Cookie Policy →

— 04 — PURPOSES AND LEGAL BASIS

Why we process
your data.

Your personal data is processed for the following purposes — expand each item for complete details.

Purpose: respond to consultation requests, quotes, and information sent through contact forms.

Legal basis: performance of pre-contractual or contractual measures (Art. 6.1.b GDPR).

Retention period: for the duration necessary to fulfill the request and for a subsequent period as required by law.

Purpose: comply with obligations imposed by applicable laws, regulations, and standards, particularly in tax and accounting matters.

Legal basis: compliance with a legal obligation (Art. 6.1.c GDPR).

Retention period: 10 years from the termination of the relationship, as required by tax legislation.

Purpose: sending newsletters, informational materials, educational and promotional content about offered services.

Legal basis: explicit consent of the data subject (Art. 6.1.a GDPR).

Retention period: until consent is withdrawn by the data subject.

Purpose: analyze traffic, understand user behavior, and improve the browsing experience.

Legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR) or consent for third-party analytical cookies (Art. 6.1.a GDPR).

Retention period: as defined by individual analytics services used.

Purpose: assert or defend a right in judicial, extrajudicial, or administrative proceedings.

Legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR).

Retention period: for the duration necessary to pursue the purpose.

05 — METHODS
How we process data
Personal data is processed using automated and/or manual tools, for the time strictly necessary.
SECURITY MEASURES
→ Communication encryption (HTTPS/SSL)
→ Two-factor authentication
→ Periodic backups
→ Updated antivirus software
→ Credential-protected access
→ Limited access to authorized personnel only
06 — RECIPIENTS
Who may receive data
Your data may be shared with specific categories of recipients:
→ Authorized personnel trained on data processing
→ Technical service providers (hosting, email, Site managers)
→ Professional consultants (accountants, lawyers)
→ Analytics service providers (Google Analytics 4)
→ Email marketing platforms
→ Competent authorities upon legal request
Data is never sold or transferred to third parties for marketing purposes.
🌍
07 — TRANSFER OUTSIDE THE EU
When data leaves Europe
Some services used (Google Analytics, hosting, email marketing) may involve transferring your data outside the EU, particularly to the USA.
EU-US Data Privacy Framework
Standard Contractual Clauses (SCC)
EU adequacy decisions
Safeguards under Art. 46 GDPR

— 08 — YOUR RIGHTS AS A DATA SUBJECT

8 rights the law
guarantees you.

As a data subject, you have the right at any time to exercise the rights provided by the GDPR.

Art.15
GDPR
Right of access
Obtain confirmation of whether personal data concerning you exists and access it, including a copy of the data.
Art.16
GDPR
Right to rectification
Request correction of inaccurate personal data or completion of incomplete data.
Art.17
GDPR
Right to erasure
Obtain the deletion of your personal data when no longer necessary, upon consent withdrawal, or for unlawful processing.
Art.18
GDPR
Right to restriction
Request the restriction of processing of your data in specific circumstances provided by law.
Art.20
GDPR
Data portability
Receive your personal data in a structured, commonly used, and machine-readable format.
Art.21
GDPR
Right to object
Object at any time to the processing of your personal data for reasons related to your particular situation.
Art.7
GDPR
Withdraw consent
Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
Art.77
GDPR
Right to complain
File a complaint with the competent Supervisory Authority — in Italy the Italian Data Protection Authority (Garante).
✉️
HOW TO EXERCISE THEM
Send a written request to info@boostmyseo.net
We will respond within 30 days of receiving the request, as required by law.

— 09 — COOKIES AND SIMILAR TECHNOLOGIES

4 types
of cookies.

The Site uses cookies to enhance user experience. You can manage your preferences through the cookie banner or your browser settings.

COOKIE
Technical
Necessary for the Site to function, do not require consent.
COOKIE
Analytical
Used to collect statistical information about Site usage (e.g., Google Analytics 4).
COOKIE
Profiling
Used to build user profiles and deliver targeted advertising.
COOKIE
Third-party
Installed by third parties (social networks, video services, analytics).
10 — MINORS
The Site is not intended for users under 16
We do not intentionally collect personal data from minors. If you are a parent or guardian and believe your minor child has provided us with personal data, please contact us immediately to request deletion.
11 — CHANGES
Privacy Policy may be updated
The Data Controller reserves the right to modify this Privacy Policy at any time. Changes will be published on this page with the date of the last update. We invite you to consult this page periodically to stay updated.