Privacy notice
This notice explains how we handle the personal data of visitors to lastmile2you.com, of people who write to us through the contact form and of people who apply through the Careers page. It is given under Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (the “Privacy Code”). The Italian version is the reference text.
Data controller
The controller is Last Mile Solutions S.r.l., which trades as LastMile2You.
- Registered office: via Pola 11, 20124 Milan, Italy
- VAT no. 10468120968, REA MI-2533687
- Email: info@lastmile2you.com
- Certified email (PEC): lastmilesolutions@legalmail.it
Data protection officer
The company has appointed a data protection officer (DPO), whom you can contact at dpo@lastmile2you.com.
For any privacy question you can write to info@lastmile2you.com.
What data we handle
Browsing data. When you open a page, the service that hosts the site automatically records some technical data: IP address, date and time, the page requested, the referring page, browser type and operating system. We need it to show you the site and to protect it from misuse.
Contact form data. If you write to us, we handle what you enter: name, company, email, phone number, type of request (services, partnership, API integration, other) and message. We also record the language of the page you wrote from. The service that runs the form also records the date, time and IP address of the submission.
Application data. If you apply through the Careers page, we handle your name, surname, chosen city (east Rome, Milano Bovisa, Peschiera Borromeo or Bologna), email, phone number and whether you hold a category B licence. We also record the language of the page. The service that runs the form records the date, time and IP address of the submission. We do not ask for anything else: please do not enter health data, origin or other special categories of data.
Cookies and similar tools. Only with your consent do we use Google Analytics for statistics and the Meta pixel to measure our campaigns. The details are in the Cookie notice.
Why we handle it and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Showing the site and protecting it from misuse and attacks | Browsing data | Legitimate interest in running the site securely (Art. 6(1)(f) GDPR) | 30 days (the period stated by Netlify) |
| Assessing your application and contacting you for an interview | Application data | Steps taken at your request before a contract (Art. 6(1)(b) GDPR); for employment rules, Art. 111-bis of the Italian Privacy Code | Copy held by Netlify: deleted after 12 months. Unsuccessful applications: deleted after 36 months; after the first 12 months they are kept only in an archive, for possible future openings. |
| Answering your request and, if you ask, preparing a quote | Form data | Answering your request and taking steps at your request before a contract (Art. 6(1)(b) GDPR) | Copy held by Netlify: deleted after 12 months. Email in the company mailbox: until the request or the business relationship is closed and for 10 years after that, under the Italian rules on keeping business correspondence (Art. 2220 Civil Code). |
| Blocking automated messages (spam) | Form data and a hidden field that only automated programs fill in | Legitimate interest in protecting the form (Art. 6(1)(f) GDPR) | Same as the form data |
| Visit statistics | See the Cookie notice | Consent (Art. 6(1)(a) GDPR) | No longer than 14 months in Google Analytics |
| Measuring our campaigns on Facebook and Instagram | See the Cookie notice | Consent (Art. 6(1)(a) GDPR) | See the Cookie notice |
| Defending the company’s rights if a dispute arises | The data above that the purpose requires | Legitimate interest (Art. 6(1)(f) GDPR) | As long as the defence requires |
We do not use form data for marketing or newsletters. We do not take decisions based solely on automated processing that have legal effects on you (Art. 22 GDPR).
If your request leads to a business relationship, we will give you a separate notice for that relationship.
If you do not provide the data
Browsing data is needed to show you the site. In the form, name, email, type of request and message are required: without them we cannot reply. Company and phone number are optional. Consent to cookies is your free choice: if you refuse, you can still use the whole site.
Who receives the data
- Netlify, Inc. (United States), which hosts the site and runs the contact form, as our processor (Art. 28 GDPR). To filter spam, Netlify also passes messages through the Akismet anti-spam service.
- Microsoft Ireland Operations Limited (Ireland), which provides the company mailbox (Microsoft 365) where we receive messages, as our processor. Mailbox data is stored in Microsoft’s European data centres; Microsoft may process it outside Europe, for example for technical support, only with the safeguards in its terms (standard contractual clauses, Art. 46 GDPR).
- Google and Meta, only if you accept cookies. Their roles are explained in the Cookie notice.
- Our authorised staff, who have been instructed and are bound by confidentiality.
- Advisers (for example lawyers) and authorities, only where necessary or required by law.
The info@lastmile2you.com mailbox is also read by group staff working in the United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom (Art. 45 GDPR), so this access needs no additional safeguards.
We do not sell your data and we do not publish it.
Transfers outside the European Economic Area
Some providers are based in the United States (Netlify, Inc., Google LLC, Meta Platforms, Inc.) or may access data from there. In those cases the transfer relies on:
- the European Commission’s adequacy decision of 10/07/2023 on the EU–US Data Privacy Framework, where the provider is certified. You can check this on the official list;
- otherwise, the standard contractual clauses approved by the European Commission (Art. 46 GDPR).
You can ask us for a copy of the safeguards by writing to info@lastmile2you.com.
Your rights
Articles 15 to 22 GDPR give you the right to:
- access your data and receive a copy (Art. 15);
- have it corrected or completed (Art. 16);
- have it erased (Art. 17);
- restrict its processing (Art. 18);
- receive the data you gave us in a structured, machine-readable format (Art. 20);
- object to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21);
- not be subject to decisions based solely on automated processing (Art. 22).
You can withdraw your consent to cookies at any time through the “Cookie preferences” link at the foot of every page. Withdrawal does not make earlier processing unlawful (Art. 7(3) GDPR).
To exercise your rights, write to info@lastmile2you.com or to our certified email lastmilesolutions@legalmail.it. We reply within one month. For complex or numerous requests this can be extended to three months; if so, we will tell you within the first month (Art. 12(3) GDPR). We may ask you to confirm your identity.
Complaints
If you believe the processing of your data breaches the GDPR, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the supervisory authority of the EU country where you live, work or where the breach took place (Art. 77 GDPR). You can also go to court (Art. 79 GDPR).
Job applications and whistleblowing reports
Applications are sent through the form on the Careers page: the data collected, the purposes and the retention periods are described above (“Application data”). If we later ask you for further documents for an interview or for hiring, we give you a specific notice at that point.
Whistleblowing reports do not go through this site: they are sent through the dedicated platform described on the Whistleblowing page.
The links to our LinkedIn and Instagram profiles are plain links. When you open them, those services’ own privacy notices apply.
Changes
We may update this notice. The date of the last update is shown at the top of the page.