1. Data Controller

The website is operated by TIBALDI IT & INNOVATION - FZCO (the “Company”, “we”, “us”).

Registration No. 68421 · Trade License No. 70150 · DIEZA
Registered address: IFZA Business Park, Dubai Digital Park (DDP), P.O. Box 342001, Dubai, United Arab Emirates.

Privacy contact: privacy@tibaldit.com.

2. Personal Data We Collect

Depending on how you interact with the website, we may collect the following categories of data:

• Contact form data: name (where requested), email address, company/organization (if provided), subject (where requested), message content, and confirmation of acceptance of this Privacy Policy.
• Technical data: IP address, user agent (browser/device), timestamps, requested URL, and similar log data generated when you access the website.
• Anti‑abuse signals: we use standard anti‑spam techniques (e.g., hidden “honeypot” fields and timing checks) to help protect the website and our inboxes from automated submissions.

We do not knowingly collect sensitive personal data through our forms. Please avoid submitting sensitive information.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to inquiries and communicate with you.
• To evaluate feasibility, scope, and next steps for potential engagements.
• To protect the website and our systems (fraud prevention, abuse detection, security monitoring).
• To comply with applicable legal obligations and to enforce our Terms of Service.

4. Legal Bases (where applicable)

Our processing may rely on different legal bases depending on the context and the jurisdiction:

• Pre‑contractual steps: to handle your request and discuss a possible engagement.
• Legitimate interests: to operate the website securely, prevent abuse, and manage communications.
• Consent: where required (for example, when you explicitly agree to this Privacy Policy via our forms).

5. How We Share Data

We do not sell personal data. We may share information in the following limited cases:

• Service providers that help us operate the website and communications (e.g., hosting, infrastructure, email). They process data on our instructions or as required to provide their services.
• Hosting: the website is hosted on infrastructure located in Vienna (Austria) under our administration. Server logs and website traffic data are processed as part of operating and securing the service.
• Legal and compliance: if required by law, regulation, or lawful requests by public authorities.

Note: form submissions are delivered to us via email; we do not store form submissions in a public database on the website.

6. International Data Transfers

Our Company is based in the United Arab Emirates, while the website infrastructure is hosted in the European Union (Vienna, Austria). Depending on the context (for example, when our team accesses communications), your data may be processed in the EU and/or the UAE. Where applicable, we take steps intended to ensure an appropriate level of protection for transferred data.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, including to respond to your inquiry, maintain records of business communications, and comply with legal obligations. We retain inquiry emails until you withdraw your consent or request their deletion, and in any event only for as long as necessary to respond to your inquiry, manage an ongoing or potential business relationship, comply with legal obligations, or establish, exercise, or defend legal claims.

8. Security

We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; please avoid sending sensitive information via website forms.

9. Your Rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, or restriction of your personal data, as well as to object to certain processing. To exercise your rights, contact us at privacy@tibaldit.com.

If you are located in the EEA/UK, you may also have the right to lodge a complaint with your local supervisory authority.

10. Cookies

Our website is designed to be lightweight and does not require you to create an account. We do not use advertising cookies or cross‑site tracking technologies.

We use a privacy‑friendly analytics solution (Plausible Analytics, self‑hosted) to understand aggregate website usage (e.g., page views and referrers). It is designed to operate without tracking cookies and without building user profiles.

Technical note: we aim to minimize third‑party requests. Some embedded content and external links may still direct you to third‑party services outside our control.

Fonts used by this website are served from our own infrastructure (self‑hosted), not from Google Fonts CDNs.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when changes take effect.