Skip to content
EN
Request information for your business

This is a translation: in case of differences, the Italian text prevails. Italiano

Privacy policy

Last updated: 2 November 2026

This policy explains how Il Duo Oy (“we”) processes the personal data of people who visit this website and of those who contact us, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

Il Duo Oy
Registered office: Mariankatu 31, 07900 Loviisa, Finland
Email: simeoneangelantonio@gmail.com
Phone: +358 41 3113 672

What data we process

  • Browsing data: IP address, browser and device type, pages visited, date and time. This data is collected automatically by the systems that run and protect the website.
  • Form data: full name, company, type of venue, town or city, phone, email, what you are interested in and your message.
  • WhatsApp messages: your number, your profile name and what you write to us, including attachments.
  • Emails and phone calls: your email address or phone number, and what you write or say to us.

In your messages, include only what your request needs: no health data or other special categories of data, such as religious beliefs or political opinions.

Why we use data and on what legal basis

For each purpose we state the legal basis, that is, the point of Article 6(1) GDPR that permits it.

  • Replying to your requests and, if you ask, preparing a quote or an offer for you: pre-contractual steps taken at your request (Art. 6(1)(b)).
  • Managing the contract that results from the request: performance of a contract (Art. 6(1)(b)).
  • Replying to other messages, for example a report or a job application: legitimate interest in replying to those who write to us (Art. 6(1)(f)).
  • Complying with legal obligations, for example tax and accounting obligations: legal obligation (Art. 6(1)(c)).
  • Protecting the website from abuse and automated programs: legitimate interest in security (Art. 6(1)(f)).
  • Enforcing or defending a legal right: legitimate interest (Art. 6(1)(f)).

Mandatory and optional data

Giving us your data is your choice: without the data we need, however, we cannot reply to you.

In the form you must fill in your full name, company and town or city; the other fields are optional.

When we ask for your consent, giving it is optional: if you say no, the website and the service still work.

How and for how long we keep data

We process data electronically and, where necessary, on paper. Only authorised people can see it, and we protect it with appropriate security measures.

  • The website has a password-protected private area from which Il Duo Oy updates the content: visitors to the website do not enter it and do not receive its cookies.
  • Browsing data is kept by the provider that hosts the website for as long as necessary for security, under its own rules.
  • We keep requests and messages that do not lead to a contract for as long as necessary to reply and follow up the negotiation, and in any case no longer than 6 months after the last contact.
  • To protect the private area from abuse, the website keeps, for up to 48 hours, a hash of the IP address calculated with a secret key, which does not contain the address in plain text.
  • If the request leads to a contract, we keep the data for its entire duration and then for up to 10 years, as required by the Finnish Accounting Act (kirjanpitolaki, Chapter 2, Section 10).

Who receives the data

We do not sell or publish the data. Only the following parties may receive it, each within their own role:

  • people authorised by Il Duo Oy, who are bound by confidentiality;
  • OnlinePerTutti.com (T.H.K. Consulting Limited, Hong Kong), which built and manages the website: it processes data on our behalf, solely for the technical management of the website;
  • Cloudflare, Inc. (United States), which hosts and protects the website and provides the technical tools described here: it processes data on behalf of OnlinePerTutti.com, as its provider;
  • WhatsApp Ireland Limited, if you message us on WhatsApp: it processes messages as an independent controller (WhatsApp privacy policy);
  • our accountant and other advisers, banks and public authorities, where required by law or by the contract.

Data outside the European Union

Some of the providers listed are based outside the European Union, for example in the United States, and may process some of the data there. They do so with the safeguards provided for by the GDPR (Articles 44-46):

  • for US companies that participate in the EU-U.S. Data Privacy Framework, the European Commission's adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795);
  • in other cases, the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

OnlinePerTutti.com (T.H.K. Consulting Limited) is based in Hong Kong, which is not covered by an adequacy decision of the European Commission. The data is stored on the systems of the providers listed above: T.H.K. Consulting Limited accesses it only for the technical management of the website, on our behalf.

For information about these safeguards, or a copy of them, write to simeoneangelantonio@gmail.com.

Your rights

At any time, you can ask us:

  • to see your data and obtain a copy of it (access, Art. 15 GDPR);
  • to correct or complete it (rectification, Art. 16);
  • to erase it when it is no longer needed or the law does not require us to keep it (erasure, Art. 17);
  • to restrict its use (restriction, Art. 18);
  • to receive it in a machine-readable format, to take it elsewhere (portability, Art. 20);
  • to object to its use based on our legitimate interest and, in all cases, to its use for direct marketing (objection, Art. 21).

If you have given us your consent, you can withdraw it at any time: withdrawal does not affect what we did before (Art. 7(3)).

To exercise your rights, write to simeoneangelantonio@gmail.com. We will reply within one month. In more complex cases this period may be extended by a further two months: if so, we will let you know within the first month (Art. 12(3)).

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22).

Right to lodge a complaint

If you believe that your data is being processed in breach of the GDPR, you can lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu, www.tietosuoja.fi) or with the supervisory authority of the EU country where you live or work (Art. 77 GDPR).

For the cookies and similar tools that the website uses, and how you can manage them, see the cookie policy.

Changes to this policy

This policy may change, for example if the website gains a new feature or the law changes. The version in force is always the one on this page, with the date at the top.