Privacy notice

Last updated: 4 September 2026 · version 2.0

1. Data controller

4T4 Technology Srl, via del Molo 65 a/r, 16128 Genoa, Italy — VAT/Tax code 03063040996. Privacy contact: privacy@4t4technology.com. We have not appointed a Data Protection Officer; privacy requests are handled by the address above.

2. What data we collect

Data you give us in our forms. When you book a call, request a demo, join the pilot programme or create an account: first and last name, company name, company type, work email, the operational problem you describe and — for accounts — a password (stored only as an irreversible hash).

Consent records. Proof of the consent you give in our forms: the version of this notice you accepted, whether you opted in to commercial messages, the language and the date and time.

Technical data. IP address, browser and device type, pages visited and error logs, generated automatically when you browse the site and needed to serve and protect it.

Platform data. If you become a customer, the operational data you or your team enter in the 4T4 platform (orders, vehicles, drivers, terminals). That processing is governed by the contract and by a data processing agreement, and is not part of this website notice.

We do not collect special categories of data (health, political opinions, and similar) and we do not use automated decision-making that produces legal effects on you.

3. Why we use it and on which legal basis

• Answering your request and setting up a pilot or an account — performance of a contract or of pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). Providing the data is optional, but without it we cannot reply.
• Commercial messages and newsletter — your consent (Art. 6(1)(a) GDPR), given with a separate, optional checkbox. You can withdraw it at any time; withdrawal does not affect messages already sent.
• Keeping the site running, secure and free of abuse — our legitimate interest in protecting our systems (Art. 6(1)(f) GDPR).
• Statistics on how the site is used — your consent through the cookie banner (Art. 6(1)(a) GDPR). Nothing beyond strictly necessary storage runs before you choose.
• Accounting, tax and legal obligations, and defending our rights — legal obligation and legitimate interest (Art. 6(1)(c) and (f) GDPR).

4. Who can access the data

Data is accessible to our authorised staff and to service providers acting as processors under Art. 28 GDPR and bound by written agreements: cloud hosting and database, email delivery, payment processing, and customer support tools. We never sell personal data and we do not share it for third-party advertising.

Data may also be disclosed to public authorities where the law requires it.

5. Transfers outside the EU

Our hosting and database are located in the European Union. Some providers may process data in countries outside the EU: in that case the transfer relies on an adequacy decision of the European Commission or on the Standard Contractual Clauses, together with additional technical measures such as encryption in transit and at rest. You can ask us for the list of providers and the safeguards in place.

6. How long we keep it

• Contact and demo requests that do not become a relationship: 24 months from the last contact.
• Account and customer data: for the duration of the relationship and 12 months afterwards, except where accounting or tax law requires 10 years.
• Marketing consent and mailing list: until you withdraw consent or unsubscribe.
• Consent records: 5 years, as proof that consent was validly obtained.
• Technical and security logs: up to 12 months.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave at any time.

Write to privacy@4t4technology.com: we reply within 30 days. If you believe your data is not handled lawfully you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of your country of residence.

8. How we protect the data

Data is encrypted in transit (HTTPS) and at rest, access is restricted to authorised people through individual accounts and role-based rules, passwords are stored only as irreversible hashes, and our database enforces row-level access rules so contact and account records cannot be read publicly. We keep backups and log administrative access.

9. Cookies

This site uses only strictly necessary storage by default. Details of every cookie and similar technology, and how to change your choice, are in the cookie policy. You can reopen your preferences at any time from the “Cookie preferences” link in the footer.

10. Changes to this notice

We may update this notice; the version and date at the top always identify the text in force. Material changes are announced on this page and, where appropriate, by email.