Privacy Policy
This policy explains which personal data FormaItalia B.V. receives through this website: when you browse it, write to us, fill in our questionnaire, pay an invoice or become a client. It sets out why, on what basis, who else receives the data, how long it is kept and your rights.
Last updated: 12 October 2026
Who is responsible for your data
The controller of your personal data is FormaItalia B.V., Via Roma 78, 20121 Milano MI, Italy. You can reach us at info@company-formation-in-italy.com or on +39 02 999 8888, Monday to Friday, 09:00 to 18:00, Milan time. Write to the same address with any question about this policy. What this site stores on your device, and how the consent banner works, is explained in our Cookie Policy.
What we collect, why, and on what legal basis
Each way you can reach us, the data it involves and the legal basis we rely on, in plain words.
What FormaItalia B.V. collects through this site and in client work, and the legal basis for each.
| Activity | Data | Legal basis |
|---|---|---|
| Visiting the site | Your IP address, browser, the page asked for and the time of the request. Cloudflare delivers and protects the site. There are no accounts and no logins. | Our legitimate interests in delivering the site and keeping it secure |
| Analytics, only after you accept | Pages viewed, clicks and scrolling, device and browser data, an analytics identifier. Google Analytics measures how pages are used, Microsoft Clarity records clicks, scrolling and sessions, and Ahrefs Web Analytics counts visits without cookies. None of them loads before you accept analytics; see our Cookie Policy. | Your consent, which you can withdraw at any time with the Cookie settings button |
| Writing to us: the contact form, the home page enquiry form, a request about a ready-made company, or an email to info@company-formation-in-italy.com | Your name and email, your phone or company where you give them, the subject you choose, your message and, for a ready-made company, its reference. With every form, the context described in the next section, and a Cloudflare Turnstile security check. | Steps you ask us to take before a contract; our legitimate interests for the context and the security check |
| The onboarding questionnaire | Your contact details, country of residence and preferred language; the planned company (its form, name ideas, activity, planned capital, the number of shareholders and directors, whether a company will hold shares, whether a director will live in Italy); the services you tick; your timeline; your confirmation that the funds are of lawful origin; your message. No files are uploaded. | Steps you ask us to take before a contract |
| Paying an invoice | Invoice number, payer name, email, amount, currency and payment method. Card details are typed on Stripe's page, never on this site; a crypto payment is made on the NOWPayments invoice page. The payment terms are in our Terms of Service. | Performing our contract with you; our legal duty to keep accounting records |
| The map on our contact page | Google receives your connection data (such as your IP address and browser) only after you press the button that loads the map. | Your consent, given by pressing the button |
| Working for you as a client | Engagement records, correspondence, invoices, and the identity and ownership documents a formation, a filing or a bank application needs. | Performing our contract with you; our legal obligations, such as keeping accounting records and identifying clients where anti-money-laundering law applies to us |
Data we receive from others
Some data does not come from you directly. Cloudflare derives an approximate location and your network from your connection (see the next section). Stripe or NOWPayments tell us whether an invoice was paid. A client gives us the details of the people a company involves: co-founders, shareholders, directors and beneficial owners. In client work we also read public registers, such as the Registro delle Imprese (the Italian Register of Companies).
What is required, and what is not
Fields marked as required are the ones we need to reply or to act on your request; without them we cannot answer. Analytics is optional, and refusing it changes nothing in how the site works for you. No decision with a legal or similarly significant effect on you is made by automated means alone. The security check only decides whether a submission is sent, and if the check cannot load, the submission still reaches us, marked for a person to review.
Context sent with every form
With every form on this site (the contact form, the home page enquiry form, a request about a ready-made company, the onboarding questionnaire and the invoice payment form) we receive, beside what you typed, the technical context of your visit:
- your IP address;
- an approximate, city-level location derived from the IP address by the network, never your device's own position;
- the network: your internet provider or network operator;
- your browser, its version and your operating system;
- the language your browser asks for;
- the referring page: the page or search you came from;
- your path through the site: the pages viewed before sending, and your visit number;
- the time spent on the page, and your local time;
- your device type, screen size and window (viewport) size;
- whether cookies are present, your consent choice, and the analytics id (the Google Analytics client identifier) if you accepted analytics.
We collect this context on the basis of our legitimate interests: answering your enquiry well and telling real enquiries from spam.
The contents of your cookies are never sent, only whether cookies are present.
The remembered path through the site (your first visit, your visit number and the earlier pages) is stored on your device only after you accept analytics. Without that consent, the context covers only the page you send from.
We keep this context with the enquiry email it arrives in, and for as long as we keep that email. You can object to it, or ask us to delete it, by writing to info@company-formation-in-italy.com.
Who receives your data
The providers and professionals who receive personal data from us, what each does, what it receives and when.
Who receives personal data from FormaItalia B.V., for what purpose and when.
| Recipient | What it does for us | What it receives | When |
|---|---|---|---|
| Cloudflare | Hosts and protects the site, runs our form handling, the Turnstile security check and the counter that limits repeated submissions, holds a copy of a submission that could not be delivered, and forwards email sent to info@company-formation-in-italy.com | Connection data, every submission with its context, and email sent to our address | Every visit, submission and email |
| Resend | Sends each form notification to our mailbox | The submission and its context | Every submission |
| The email provider of our mailbox | Stores the email that reaches info@company-formation-in-italy.com | Form notifications and the emails you send us | Every submission and email |
| Google Analytics measures how the site is used; Google Maps shows the map on our contact page | Analytics data; connection data for the map | Analytics only after you accept; the map only after you press it | |
| Microsoft | Microsoft Clarity records clicks, scrolling and sessions | Analytics data and session recordings | Only after you accept analytics |
| Ahrefs | Ahrefs Web Analytics counts visits without cookies | Page address, referring page and browser data | Only after you accept analytics |
| Stripe | Processes card payments of our invoices | Name, email, invoice number, amount, and the card details you type on Stripe's page | Only when you pay an invoice by card |
| NOWPayments | Processes crypto payments of our invoices | Invoice number, amount, and what you enter on its invoice page | Only when you pay an invoice in crypto |
| Professionals and authorities in client work | The notary who receives a deed, the registers and authorities a filing reaches, the bank you apply to, and the professionals we coordinate: an authorised società fiduciaria (fiduciary company), an enrolled consulente del lavoro (labour consultant) and an authorised tax intermediary | What the task needs | Only in client work, for that task |
We do not sell your data, we send no newsletter and we pass nothing to a messenger service.
The providers above act on our instructions, except for the part of the processing their own terms make them responsible for, such as a payment processor's handling of the payment itself.
Transfers outside the European Economic Area
Some of these providers are based in, or use services in, countries outside the European Economic Area, such as the United States. Where personal data leaves the European Economic Area, it is covered by an adequacy decision of the European Commission (for a certified US recipient, the EU-US Data Privacy Framework) or by the Commission's standard contractual clauses in the provider's data processing terms. You can ask for a copy of the safeguard that applies by writing to info@company-formation-in-italy.com.
How long we keep it
We keep personal data only as long as the purpose it was collected for needs it, or as long as the law requires:
- Enquiries that lead to no engagement (form notifications and emails): until your question is answered and any follow-up is closed.
- The context sent with every form: with the enquiry email it arrives in, for as long as that email.
- The onboarding questionnaire: as an enquiry while we discuss it; once you engage us, with the client records.
- The submission counter and a held, undelivered submission: they expire automatically after the short period our form handling sets.
- Analytics data: for the retention period set in each analytics service.
- Payment records: for the period the law sets for our accounting records.
- Client records: for the engagement, then for the periods the law sets for accounting records and, where anti-money-laundering law applies to us, for client identification records.
- Your consent choice: stored on your device, not by us; its lifetime is in the Cookie Policy.
Whatever the period, you can ask us to delete your data at any time, and we delete it unless the law requires us to keep it.
Your rights, complaints and changes to this policy
Your rights
You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict how it is used, to object to its use (including use based on our legitimate interests) and to receive the data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time with the Cookie settings button; withdrawing it does not affect what was done before.
How to use your rights
Write to info@company-formation-in-italy.com, preferably from the email address we know you by. We may ask you to confirm who you are before we act, so that your data never goes to someone else. Please do not use our forms for a request about your data: they attach the technical context of your visit to whatever is sent.
Complaints
If you think we have handled your data wrongly, you can complain to the Garante per la protezione dei dati personali (the Italian data protection authority), or to the data protection authority of the EU country where you live, where you work or where the issue arose. You are also welcome to write to us first, so that we can put it right.
Changes to this policy
We update this policy when the tools this site uses or our services change, and the date under the title moves each time. The version on this page is the one that applies.