DATA PROTECTIONPrivacy Policy
Privacy notice for the Kreluna Software website, demos and requests sent by email and through Lumi chat, under Article 13 of Regulation (EU) 2016/679.
1. Data controller and contact details
The data controller is Gadducci Andrea, owner of the business presented under the Kreluna Software brand. Registered office: Viale Dante Alighieri 3, 51016 Montecatini Terme (PT). P. IVA 02114130475 · REA PT-622714.
For information about data processing or to exercise your rights, write to info@kreluna.it.
2. Browsing and demos
Browsing this website involves processing technical data such as IP address, date and time, requested resource, browser and device information, and request outcomes, as necessary for the infrastructure's operation and security.
This website does not use Google Analytics or Google Tag Manager. Meta Pixel and Google Ads are loaded only after you give consent in the banner and are used to measure visits, contact requests and commercial interactions associated with campaigns; if you reject, advertising scripts are not activated. Google Ads receives the consent signals specified by Consent Mode v2. You can change your choice using the “Cookie preferences” button or by clearing the preference from your browser and reloading the website. Kreluna customer accounts and newsletter sign-ups are not active. Actual payment for the package listed on the Pricing page takes place exclusively through Stripe's external checkout.
The demos contain simulated forms, carts and bookings. Choices and form fields are handled in the browser: demo code does not send them to Kreluna or to the businesses represented, and does not save them to a database. Use only the suggested fictional data; do not enter personal information, health information or payment details.
Full application demos, such as the business software demo, store sample data and display preferences in your browser's local storage, on your device. They stay there, are not sent to Kreluna, and can be deleted by clearing the website's data from your browser. Other demos reset when you reload the page.
3. Email requests and Lumi chat
Email links open your email application and do not send messages automatically. “Lumi” chat, however, is a real contact channel: when you choose “Talk to an operator” and submit the form, your data is sent to Kreluna and saved in the private inbox.
Through Lumi, we receive your name, email address, message text, conversation date and time, and technical information needed for operation and security. Messages are read and managed by the data controller through a protected panel; replies are shown to the visitor in the same conversation.
Email links open your email application; they do not send messages automatically. If you write to us, we receive your email address, any name and contact details provided, message content and attachments.
This data is used to reply, understand your project and prepare a quote. Providing it is optional, but without sufficient information and contact details, we may be unable to handle your request. Do not send identity documents, health data, credentials or other unnecessary information.
The mailbox info@kreluna.it is managed through Aruba. Sending a contact message does not subscribe you to promotional communications.
4. Online payments
When you select “Pay online,” you are directed to Stripe Checkout. Kreluna does not receive or store full card details. Stripe processes the identity, contact, billing, tax, device and transaction data needed to handle payment, prevent fraud and meet applicable obligations.
Depending on the payment method selected, necessary data may also be processed by Klarna, Satispay, payment networks, or digital wallets. Any Klarna installment plan is subject to the provider's assessment and terms. See the Stripe privacy policy and the information shown for your selected payment method at checkout.
5. Purposes and legal bases
- Handling requests and quotes: pre-contractual steps requested by the data subject, Article 6.1.b GDPR. For business representatives, the legitimate interest in managing professional communications, Article 6.1.f.
- Website operation and security, abuse prevention and diagnosis of technical issues: the legitimate interest in keeping the service available and secure, Article 6.1.f.
- Handling payments and the contractual relationship: performance of the contract, Article 6.1.b; tax and accounting obligations: Article 6.1.c.
- Compliance with legal obligations: Article 6.1.c; protection of rights in the event of disputes: Article 6.1.f.
- Campaign measurement through Meta Pixel and Google Ads: consent, Article 6.1.a. These tools remain disabled until you select “Accept,” and consent can be withdrawn using the “Cookie preferences” button or by clearing the preference from your browser.
- Kreluna does not make decisions based solely on automated processing that produce legal or similarly significant effects on users.
6. Providers, recipients and transfers
In addition to the data controller, authorized persons and providers involved in delivering services may process data, limited to their respective activities. Data may be disclosed to authorities when required by law; it is not published by Kreluna.
- Payments — Stripe: manages checkout and enables available methods, which may include cards, wallets, Satispay and Klarna. Kreluna receives the payment outcome and transaction data needed to manage the order, without receiving full card details. Reference: Stripe privacy policy.
- Email — Aruba: provider of the mailbox used for requests. Technical processing of messages is separate from processing performed by Aruba for its own contractual purposes or legal obligations. References: Aruba service terms and Aruba privacy notice.
- Website delivery — Cloudflare Pages: hosts and delivers the website and may process technical data necessary for operation, security and content delivery. Reference: Cloudflare privacy policy.
- Campaign measurement — Meta Platforms and Google: after consent, Meta Pixel and the Google Ads tag may receive technical data and data about measured actions, such as page views, opening a contact channel or starting checkout. If you reject, advertising scripts are not loaded. References: Meta privacy policy and Google privacy policy.
The listed providers may also process data outside the European Economic Area under the safeguards described in their respective notices and applicable agreements. You can contact us for information about safeguards relating to processing that concerns you.
7. Retention
Choices made in demos do not form a customer database: they remain on your device and are not sent to Kreluna.
Correspondence about quotes is retained to handle the request and subsequent exchanges. The criteria are the status of negotiations, the offer's validity and the need to document agreements. If a contract is formed, necessary documents are subject to the relevant retention obligations; in a dispute, they may be retained to protect rights.
Lumi conversations are retained for as long as necessary to reply and document pre-contractual exchanges, then deleted when no longer useful, unless legal obligations or the protection of rights require otherwise. Visitors can remove the chat identifier from their device by clearing the website's data; they can also request deletion of the conversation by writing to info@kreluna.it.
Data relating to payments, invoices and the contractual relationship is retained for as long as necessary to manage the service and meet tax, accounting and rights-protection obligations.
Technical data from hosting and email services is processed for operation, security and any obligations of the relevant service. Retention varies by record type and provider terms: it does not necessarily end when the page is closed. For information about the period applicable to specific processing, write to info@kreluna.it.
Sample data saved by application demos in browser local storage remains on your device until you clear the website's data: Kreluna does not access it or set its retention period.
8. Your rights
Under the conditions set out in Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interests on grounds relating to your particular situation.
Send your request to info@kreluna.it. We will normally reply within one month; where the GDPR permits, this period may be extended, and we will explain why. Proportionate verification of your identity may be necessary.
You may lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority), without having to contact Kreluna first.
9. Updates and links
This notice concerns Kreluna Software. External services reached through links have their own privacy notices. Any new real submission forms, newsletters or other processing will require updated information and, where necessary, renewed consent before activation. Also see the Cookie Policy.
Last updated: September 19, 2026Kreluna Software · P. IVA 02114130475