Legal

Privacy
policy.

RAMAS TECH
Last updated: 7 October 2026

This policy explains how personal data are handled when you visit the website ramas.tech, send us an enquiry or write to us, and how we handle customer information from purchases made on external platforms. Controller: RAMAS TECH di Dar'Ya Samarska. Full details and contacts are in section 11.

1. What this policy covers

This policy covers the RAMAS TECH website (ramas.tech) in its English and Italian versions, enquiries sent through the "Start a project" form or by email, and our handling of customer correspondence and order information. External platforms on which our products are sold (for example Etsy and Gumroad) process your data under their own privacy notices. The Loop app has a separate privacy policy; its pages on this domain are not covered here.

2. Enquiries and correspondence

What we receive. When you use "Start a project", we receive your name, email address, message, the selected project type and the date and time of submission. If you email us, we receive your address and whatever you include in the message. Please do not send sensitive personal data that are not necessary for your enquiry.

Why and on what basis. We use this information to answer you and to discuss the project you ask about. The legal basis is the performance of steps taken at your request before entering into a contract, where you would be a party to that contract (Article 6(1)(b) GDPR). For general correspondence and for messages sent by representatives of companies or organisations, the basis is our legitimate interest in answering and managing business enquiries (Article 6(1)(f)). Protecting the form and our mailbox against spam and abuse is based on our legitimate interest in keeping these channels usable (Article 6(1)(f)).

Is it mandatory? Contacting us is voluntary. The form requires the fields marked as mandatory; without a usable email address and enough information we may be unable to answer.

How long. Ordinary enquiries, the related notification emails and the correspondence they generate are deleted from the systems and copies we manage within 12 months of submission. The only exceptions are information that must be kept for an ongoing project, for a legal obligation or for a specific claim, as described in section 6.

3. Hosting and technical request data

The website is hosted by Netlify, Inc. When your browser requests a page, Netlify processes technical data of the request: IP address, requested URL, date and time, browser and device information (user agent) and, where supplied, the referring page. This is necessary to deliver the pages, keep the website secure, prevent abuse and investigate technical problems. The basis is our legitimate interest in operating a secure and available website (Article 6(1)(f)).

Netlify's Data Processing Agreement (Exhibit II, § 5.A) states that logs supporting its services are retained online for 90 days and offline for one year; we therefore consider one year plus 90 days as the maximum retention period for these logs. We ourselves can see technical request data for the previous 24 hours in Netlify's Observability dashboard, which we use only for operating, troubleshooting and securing the website.

4. No analytics, advertising or tracking

The website does not use analytics, advertising, social-media or other tracking tools, and it loads no scripts, fonts, images, videos or embedded content from third parties. Your visit is not recorded by any analytics provider. The only data generated by a visit are the hosting provider's technical request data described in section 3. If we ever decide to introduce such a tool, we will update this policy before using it and, where the law requires it, ask for your consent first.

5. Providers and international transfers

We use the following providers, which process data on our behalf as processors under their data-processing terms:

Authorised staff of these providers and their sub-processors may access data only to the extent needed to deliver the service. Where necessary we may also share information with professional advisers (for example our accountant or lawyer) or with authorities when the law requires it. We do not sell personal data and we do not add enquiry contacts to any marketing list.

These providers may process data outside the European Economic Area, in particular in the United States. Netlify's Data Processing Agreement relies on the EU–US Data Privacy Framework and, where that framework does not apply, on the European Commission's Standard Contractual Clauses (DPA of 9 June 2026, §§ 14.2–14.3). Automattic states that transfers of Akismet data outside the EU take place under the Standard Contractual Clauses. Namecheap's Data Processing Addendum provides for the Standard Contractual Clauses for transfers from the EEA. Relevant documents: Netlify DPA, Netlify sub-processors, Akismet and the GDPR, Namecheap DPA. You can also write to us to obtain a copy of the relevant safeguards, subject to redaction of commercial information. If the legal framework for international transfers changes, we will review this section and our providers' terms.

Provider backup and security copies may follow the provider's own retention rules: Netlify describes the deletion of a form submission as permanent but does not publish how long a deleted submission may remain in backups. Our 12-month rule in section 2 refers to the records and copies we control.

6. Purchases on external platforms and subsequent projects

Purchases are completed on external platforms (for example Etsy or Gumroad), not on this website; those platforms process your data under their own privacy notices. Where a platform shares order information with us, or where an enquiry becomes a project, we use the necessary order details, contact details and support correspondence to deliver what was agreed, answer support requests and meet our accounting and tax obligations. We never receive payment-card details.

The legal bases are the performance of a contract (Article 6(1)(b)), compliance with legal obligations, in particular accounting and tax law (Article 6(1)(c)), and our legitimate interest in corresponding with representatives of organisations and in establishing, exercising or defending legal claims (Article 6(1)(f)).

Records that form part of an order, a contract or an accounting or tax record are kept for the period required by Italian law — as a rule ten years under Article 2220 of the Italian Civil Code, or longer while a tax assessment period is still open. Information needed for a specific pending claim is kept until the claim and the related limitation or enforcement periods are over, and is reviewed periodically. These exceptions are not used to keep ordinary enquiries for longer than 12 months.

7. Cookies and browser storage

Our code sets no cookies and writes nothing to your browser's local storage or session storage. If your browser still holds entries created by an earlier version of this website, the website deletes them when you open a page; the Cookie policy lists them and explains why there is no cookie banner. Your browser also keeps its usual cache of pages and files, which you control through its settings.

8. Security

The website is served only over HTTPS and loads nothing from third parties. Form submissions and emails are accessible only to the owner through password-protected accounts. Our providers describe their technical and organisational measures in the documents linked in section 5.

9. Your rights

Under the GDPR you may ask us for access to your personal data and a copy of them, for their rectification or erasure, for the restriction of processing, and for the portability of data you provided to us where processing is carried out by automated means on the basis of Article 6(1)(b). You may object, on grounds relating to your particular situation, to processing based on our legitimate interests (Article 21). We do not take decisions based solely on automated processing that produce legal or similarly significant effects on you; automated spam filtering is used only to protect the form.

To exercise your rights, write to info@ramas.tech. We answer within one month; if the GDPR allows an extension, we tell you the reason within that first month. We may ask for proportionate information to confirm your identity. Some rights are subject to exceptions, for example where a legal retention obligation applies.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you habitually live, work or where the alleged infringement occurred (Article 77). In Italy this is the Garante per la protezione dei dati personali. You may also seek a judicial remedy.

10. Children and changes

The website is intended for adults and businesses. We do not knowingly collect personal data of children under 14; please do not send them. We revise this policy when the website, the processing or our providers change; the date at the top identifies the published version, and the English and Italian versions have the same content. A new purpose that requires consent will never be introduced merely by changing this text.

11. Controller details and contacts

Controller: RAMAS TECH di Dar'Ya Samarska — sole proprietorship (ditta individuale) under Italian law, owner Dar'Ya Samarska
VAT number (P.IVA): 03059980429
Address (fiscal domicile): Via Friuli 4, Int. 1 — 60015 Falconara Marittima (AN), Italy
Email: info@ramas.tech · Phone: +39 334 120 0589
Data protection officer: none designated, because Article 37 GDPR does not require one for this activity; all data-protection requests go to the email address above.
Supervisory authority: Garante per la protezione dei dati personali, www.garanteprivacy.it.

See also the Cookie policy, the Terms of use and the Legal notice.