Privacy notice on data processing — business contacts

This page explains how I process your data and your business's data if I have contacted you, or your company, to propose a professional service or a collaboration.

Last updated: 4 October 2026

Who processes the data

Riccardo Rocchi, self-employed professional, VAT number IT18343201002, trading under the Rayer Group brand, based at Via San Francesco d’Assisi 100, 00035 Olevano Romano (RM).
Contact email: info@rayergroup.com

What data I process and where it comes from

I process your business's contact details: name, address, phone number, any business email, opening hours, public social media profile. I collect them from public sources: Google Maps, company websites, public social and professional profiles (for example LinkedIn), or an existing professional relationship.

If I have written to you because of your role in a company, I also process your name, role, company, published business email address or link to your public professional profile, the text and date of the messages, and any reply.

For each contact I keep a record of the source and the date of collection, so that I can tell you exactly where I got your contact details if you ask me.

Why I process it

To offer you a professional service (for example building the website for your business, or consultancy) or a conversation to understand whether it could be useful to you.

When I write to you because of your role in a company, I write and send the messages myself, one at a time, and I never send you more than two messages.

On what legal basis

Legitimate interest (Art. 6.1.f GDPR): commercial promotion to businesses, at their business contact details or public professional profile. I have carried out and documented a balancing test between my interest and your rights: you can ask me for it.

Who I share it with

No one. I do not transfer or sell data to third parties. I use technical providers as data processors (storage, hosting, automation), some with servers outside the European Union, on the basis of appropriate contractual safeguards.

How long I keep it

24 months from the last contact, then I delete them. If you ask me not to contact you any more, I keep only the data needed to avoid contacting you again.

About the images of your business

If I have prepared a preview of the website for you, I used images and distinctive signs already published by your business, solely to show you the result.

• The preview is not public and is not indexed by search engines.
• If you decide not to go ahead, I delete the page and the images from the website within 30 days.
• I do not use those images for any other purpose and I do not publish them elsewhere without your written consent.
• I do not use photographs that depict people.

When you open the preview, the service that hosts it records your IP address and browser type for one day, solely to deliver the page to you and protect it from abuse. The page shows a Google Maps map: to load it, Google receives your IP address and your browser data and may use cookies in accordance with its own privacy notice. Apart from that, the page does not use cookies or measurement tools.

Your rights

You can ask me at any time for access to, rectification, erasure, restriction and portability of your data. You can also object to the processing (Art. 21 GDPR): just reply to the message I sent you or write to info@rayergroup.com. I delete your data from my records, remove the page and the images from the website, and never contact you again.

You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) — www.gpdp.it

Automated decisions

I do not make decisions based solely on automated processing, nor do I carry out profiling, that produce legal or similarly significant effects on you.

Data Protection Officer (DPO)

No DPO has been appointed: the processing does not fall within the mandatory cases set out in Art. 37.1 GDPR.

This notice concerns business contacts with businesses and companies. For the processing of the data of people browsing the website, see the Privacy Policy and the Cookie Policy.