Privacy notice
Scope. This notice describes personal data processing relating to visits to the website, contact enquiries and, as outlined below, professional engagements performed by ARGO DILIGENCE. Engagement-specific privacy terms may be provided where appropriate.
Controller. ARGO DILIGENCE, VAT no. 02507250690, Viale Maiella 13, 66037 Sant'Eusanio del Sangro (CH), Italy. Privacy contact: [email protected].
Data and purposes. The contact form collects name, email address, requested service and, where supplied, role, company/VAT details and message. Technical information for website security and anti-spam checks, language and a request identifier are also processed. These data are used to respond, assess possible engagements and prevent abuse. During engagements, identifying, professional, corporate, financial and documentary information about clients, contacts and subjects of analysis may be processed as necessary for the agreed due diligence and advisory services. Please do not submit highly confidential information or special categories of personal data through the contact form.
Lawful bases. Enquiries about possible engagements are processed to take pre-contractual steps at the data subject's request, where applicable, or on the basis of legitimate interests in handling professional enquiries. Engagement data are processed for performance of a contract where the data subject is a party, or on the basis of legitimate interests in providing B2B services; administrative and tax obligations rely on legal obligations. Anti-spam and security processing relies on legitimate interests in protecting the website. Any further processing requires an appropriate lawful basis. Acknowledging this notice in the form is not consent to marketing.
Sources, recipients and providers. Information may be obtained from clients, lawfully accessible registers and sources, and professional business information services including CRIBIS and Cerved, as relevant to the engagement. The contact form uses Cloudflare Pages Functions, Cloudflare Turnstile and Resend; correspondence is handled through the email service actually configured. Access to engagement files is limited to authorised persons and necessary providers. Providers' privacy roles and contractual arrangements depend on the actual services and must be verified before final publication.
Confidentiality and VDR. Engagement documents are handled using technical and organisational measures appropriate to their nature. Where the engagement, document sensitivity or circumstances require, ARGO DILIGENCE may use a secure Virtual Data Room (VDR) or other protected sharing arrangements with controlled access. The platform and safeguards will be selected for the specific engagement.
Retention. Enquiries not resulting in an engagement are deleted from the controller's operational records within 30 days. Following an engagement, a digital-only copy of the final report or dossier, including a compressed PDF where appropriate, and documents strictly necessary to reconstruct the work are ordinarily retained for 10 years from completion, unless legal obligations or the protection of rights require a different period. Working drafts, duplicates and unnecessary information are removed once no longer needed. Invoices and accounting records are kept as legally required, generally for 10 years. Providers' technical logs, copies and backups may have different retention periods, to be checked against their agreements and configurations.
International transfers. Some providers may process data outside the European Economic Area. Where applicable, transfers must comply with GDPR requirements and relevant safeguards. Actual countries, safeguards and service arrangements must be checked before final publication; EU-only storage is not claimed.
Rights. Subject to GDPR conditions, individuals may request access, rectification, erasure, restriction and portability, object to processing, and lodge a complaint with the competent supervisory authority. Contact: [email protected]. Whether a data protection officer is required must be assessed against the processing actually carried out.
Cookies and technical tools. See the cookie policy for website technologies, including Turnstile anti-spam protection. Any consent mechanism depends on a technical assessment of the services actually enabled.