1. Data Controller
INCUBATEC GmbH – Srl
V. Scurcià 36, 39046 Ortisei (BZ), Italy
📞 +39 0471 796829 ✉️ info@incubatec.com
PEC – REM: incubatec@b2bsign.it
The controller is responsible for processing personal data in connection with this website and the group’s online services.
2. Scope of this Policy
This policy applies to all websites operated by INCUBATEC and its brands, including but not limited to:
Server24, Webhosting24, Firma5, Own Identity, and associated portals or support systems.
It explains how we collect, use, and protect personal data when you:
visit INCUBATEC.com or related websites;
contact us via email or form;
use our hosting, domain, or SaaS services.
3. Categories of Data Processed
Identification data (name, email, phone, company)
Technical data (IP address, browser type, access logs)
Contract data (orders, invoices, domain registration info)
Support communication (tickets, chat, correspondence)
Cookies and analytics identifiers
4. Purposes and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Website operation and security | Legitimate interest (Art. 6 (1)(f) GDPR) |
| Contract fulfilment (hosting, domain, SaaS) | Contract necessity (Art. 6 (1)(b)) |
| Customer support and communication | Legitimate interest / consent |
| Regulatory compliance (billing, tax, ICANN) | Legal obligation (Art. 6 (1)(c)) |
| Marketing and newsletter (opt-in) | Consent (Art. 6 (1)(a)) |
| Analytics and performance monitoring | Consent / legitimate interest (Art. 6 (1)(a),(f)) |
5. Data Processing in Hosting and Domain Services
When INCUBATEC provides hosting or domain services, it may process customer data as a Data Processor under a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR.
Customers remain data controllers for the data they store or manage on INCUBATEC systems.
6. Cookies and Analytics Tools
Our websites use cookies and analytics tools to improve usability and performance.
Matomo (On-Premise / Self-Hosted)
We use Matomo analytics operated on INCUBATEC infrastructure. IP addresses are anonymised before storage. Data is not shared with third parties.
Google Analytics
This website may also use Google Analytics (Google Ireland Ltd). Data may be transferred to the USA under Standard Contractual Clauses (SCCs). You can opt out via browser add-on or our cookie-consent tool.
Google reCAPTCHA
Used to protect forms against spam. It collects interaction data (IP, browser, mouse movements) to determine whether a request comes from a human user.
Other External Services
Embedded content (e.g. maps, videos, social widgets) may set third-party cookies. Such content is loaded only with prior consent.
7. Data Retention
Personal data is retained only as long as necessary for the purposes above or as required by law.
Hosting log files are generally kept for 30 days, unless needed for security, legal reasons or investigation.
8. Data Recipients
Group companies and contractual partners (e.g. data centers, payment providers)
Domain registries and ICANN-related entities for domain registrations
External advisors and service providers bound by confidentiality and data-processing agreements
9. International Transfers
If data is transferred outside the EEA (e.g. Google LLC, Cloudflare, etc.), this occurs only on the basis of adequate safeguards such as the EU Standard Contractual Clauses or adequacy decisions.
10. Your Rights
You have the right to:
access your personal data (Art. 15 GDPR);
rectify incorrect data (Art. 16);
erase data (“right to be forgotten,” Art. 17);
restrict or object to processing (Arts. 18–21);
data portability (Art. 20);
withdraw consent at any time.
Requests can be sent to privacy@incubatec.com or by PEC to incubatec@b2bsign.it.
If you believe your data is processed unlawfully, you may lodge a complaint with the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
11. Data Security
INCUBATEC applies technical and organisational measures to ensure data confidentiality and integrity, including encryption, access controls, redundant backups, and continuous monitoring.
12. Updates
This Privacy Policy may be updated to reflect legal or technical changes.
Last updated: November 2025