How we process the data you send us and which tools this site uses. In plain language, without pointless legalese.
Last updated: 6 July 2026 · version v2026-07-06
The data controller is Donzella di Thomas Donzella, with registered office at Via S. Francesco D'Assisi 47E, 20073 Opera (MI), P.IVA IT02865930180, C.F. DNZTMS00M31F205N. For any request regarding your data you can write to info@quotlab.com.
This site collects personal data only when you fill in the contact form. In that case we process: first and last name, shop or company name, email address, and (if you provide them) phone number, city or district and the content of the message. At the time of submission we also record the IP address and the date, for security purposes and to prevent form abuse.
We do not collect data through simple page browsing, beyond what is indicated in the Cookies and third-party tools section.
We keep the form data for the time needed to handle your request and any resulting business relationship, and in any case no longer than 24 months from the last contact, save for legal obligations. You can ask us to delete them at any time.
The data is neither disclosed nor sold. It may be processed, on our behalf and as processors, by the providers that enable us to deliver the service: the hosting and email provider (SiteGround, European Union); during registration the VAT number is verified through OpenAPI (Italy); subscription payments are handled by Stripe and invoicing through Fatture in Cloud; the site's public forms (registration and contact) are protected against bots by Cloudflare Turnstile, which for this purpose receives the visitor's IP address. Some providers (in particular Stripe and Cloudflare) may involve a transfer of data to the United States, covered by the safeguards of the EU-US Data Privacy Framework and by the Standard Contractual Clauses. The complete and up-to-date list of providers is on the Sub-processors page. The email you send us is delivered to our info@quotlab.com mailbox.
Virtual assistant (chat). The site offers an AI-based assistant ("Lea") to answer questions about Quot. The messages you type in the chat are processed by Anthropic (United States) solely to generate the reply; the transfer is covered by the Standard Contractual Clauses and the messages are not used to train models. Please do not enter confidential data or special categories of data in the chat. Anthropic is listed on our Sub-processors page.
This site does not use profiling cookies and does not install advertising tracking cookies. To measure use of the site in aggregate form we use Plausible Analytics, a cookieless statistics tool that does not profile visitors and does not follow them across different sites, with data hosted in the European Union (legal basis: legitimate interest, art. 6.1.f GDPR); the details are in the Cookie Policy.
The site's typefaces (DM Sans) are hosted directly on our own servers (self-hosting): they are not loaded from third-party services, do not involve any transfer of data to external parties and do not install cookies.
Only on the public forms (registration and contact) is Cloudflare Turnstile active, an anti-bot security tool that does not profile users but reports the visitor's IP address to Cloudflare in order to prevent abuse (legitimate interest, art. 6.1.f GDPR). Further details in our Cookie Policy and in the Sub-processors list.
When you activate an account or the subscription to the Quot application, we process, as controllers, the data needed to manage the account, access, the free trial and invoicing (including the contact person's name, email and VAT number), on the basis of the performance of the contract and legal obligations. For the data you enter into the application relating to your own customers (records, quotes), we act instead as processors on your behalf: the relevant terms are in the Data Processing Agreement.
We do not carry out any automated decision-making or profiling and we do not use artificial intelligence systems on your data.
How long we keep the data. Account and activity data are kept for the entire duration of the contractual relationship and, after it ends, for the time needed to comply with legal obligations: in particular, tax documents and invoices are kept for 10 years (art. 2220 of the Italian Civil Code). Technical and security logs (IP addresses, logins, activity records) are kept for a limited period after collection, normally no longer than 12 months, unless it is necessary to keep them longer to establish or defend a legal claim. Upon deletion of the account we remove or anonymise the personal data that we are not required to retain by law.
If you use the Quot app on your smartphone and enable notifications, the device generates a technical identifier (token) needed to deliver them. For delivery, the token is transmitted to the operating system's notification services: Apple Push Notification service (APNs) on Apple devices and Google's Firebase Cloud Messaging (FCM) on Android devices. These services process the token on our behalf solely in order to deliver the notification, without accessing the content of your quotes. Delivery entails a transfer to the United States, covered by Standard Contractual Clauses and, where applicable, by the EU-US Data Privacy Framework. You can disable notifications at any time from your device settings. Apple and Google are listed in the Sub-processors list.
As a data subject you have the right to access your data, request its rectification or erasure, restrict or object to processing, and request portability (arts. 15 to 22 GDPR). You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal. To exercise these rights, write to info@quotlab.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
We may update this notice to bring it in line with regulatory or service changes. The version published on this page, with the date of last update at the top, is the one in force.