Who processes your data (data controller)
Drop Promotion di Alessio Cerizzi, Via Giuseppe Verdi 9, 20851 Lissone (MB), Italy, VAT no. 03069620965. For anything concerning this page: info@droppromotion.com.
When you are only browsing
If you browse the site without filling in a form, we collect nothing that identifies you: no profiling cookies, and fonts are served from our own server. The servers hosting the site (Vercel) record technical logs including the IP address for security and operation, as any server does. The visit statistics we use are aggregated and cookie-free: they count visits, not people.
When you write to us through the contact form
We collect your name, email, message and the optional answers about your need, timing and budget. We use them only to reply to you (legal basis: pre-contractual measures at your request, Art. 6(1)(b) GDPR). Your IP address is included in the internal notification to prevent abuse (legitimate interest, Art. 6(1)(f)). We keep the request for 12 months from the end of the conversation, then delete it.
When you request the compliance scanner
We collect your website address, your email and two size brackets (number of employees and turnover), which are needed to test the legal thresholds. Before we analyse anything, we ask you to confirm your email address (double opt-in): without confirmation, nothing starts. The report goes to you and no one else. On confirmation we save your contact in our address book (on Brevo) for the sole purpose of sending you the report and answering any questions about it: we do not subscribe you to a newsletter and we do not send you marketing communications without your separate consent. Retention: 24 months, or until you ask us to delete you.
When you apply as a creator
We process the data in your application — including the links to your public profiles — only in order to assess it for campaigns that suit you (Art. 6(1)(b)). Retention: 24 months, then deletion, unless a working relationship begins in the meantime.
When you apply to work with us
We process your application data and your CV only for the selection process (Art. 6(1)(b)). We ask you not to include unnecessary data in your CV (health data, for example): if it is there, we still process it only for the selection process and with the same confidentiality. Retention: 12 months, then deletion. If the collaboration goes ahead, the data becomes part of the contractual relationship.
When you arrive from one of our Google ads
If you accept in the banner, we use the Google Ads conversion tag to learn whether our ads bring real enquiries (a WhatsApp message, a call, a form). Legal basis: your consent (art. 6.1.a), which you can withdraw at any time via "Cookie preferences" at the bottom of every page. No remarketing and no personalised advertising. Details, cookies and durations in the cookie policy.
When you message us on WhatsApp
We process your number and the chat content only to reply and follow up on your request (art. 6.1.b). We do not use it for unsolicited marketing and we do not share it. Retention: 12 months after the conversation ends. WhatsApp (Meta Platforms Ireland) processes chat data as an independent controller under its own notice.
Who sees your data
Only us, plus the technical suppliers who process it on our behalf as data processors: Brevo (email sending and contact address book, servers in the EU), Vercel (site hosting, with Data Privacy Framework safeguards for transfers outside the EU), Hosting Solutions (our mailbox). We do not sell, we do not transfer and we do not use your data for advertising.
Your rights
Access, rectification, erasure, restriction, objection, portability: write to info@droppromotion.com and we reply within 30 days. If you think something is wrong, you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Updates
If anything substantial changes, we update this page and the date below.
Last updated: 10 September 2026