1. Data Controller
The data controller is TPS Production S.r.l., registered office at Via Nomentana 352, 00141 Rome (RM), Italy, VAT/Tax code IT 07475881004. For any request regarding the processing of your personal data, please write to info@tpsproduction.com.
2. Scope, data and purposes
This notice applies only to the corporate website. The website is static, does not require registration, has no application database and does not process health data. Do not enter clinical, health or patient data in the form or in emails. Contact data submitted through the form (name, email address, subject and message) is processed to respond to your request and, where relevant, to assess or manage a business relationship. TPS platforms and their clinical data are governed by separate documentation and agreements with the healthcare organisations using them.
3. Legal basis and provision of data
For requests aimed at establishing a business relationship, the legal basis is taking steps at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR). For other requests, and to prevent abuse and automated submissions through the form, the legal basis is TPS's legitimate interest in responding to and managing contacts and protecting its systems (Art. 6(1)(f) GDPR), while respecting data-subject rights. Providing data is optional, but we cannot reply without contact details. The form checkbox only confirms that you have read this notice; it is not consent.
4. Form operation and browsing data
The form sends data to TPS through AWS Lambda and Amazon SES, hosted in the AWS eu-south-1 region, so that we can receive and manage your request. To protect the form from automated submissions and abuse, we use Cloudflare Turnstile, which processes browser and connection technical data strictly necessary for anti-bot verification; Turnstile does not access message contents. Delivering content through Amazon CloudFront also entails the technical processing of connection data necessary to deliver and secure the website, such as IP address, user agent and HTTP request. The website does not use analytics, pixels, marketing or profiling tools.
5. Recipients and transfers
Submitted data may be processed by authorised TPS personnel, the provider of the company mailbox and, where required, suppliers appointed as processors. Amazon Web Services provides the technical infrastructure for the form (Lambda and SES) and CloudFront distribution; Cloudflare provides the Turnstile anti-bot service. AWS and Cloudflare may involve transfers of data outside the European Economic Area; where applicable, these transfers are governed by the safeguards in Chapter V GDPR, including standard contractual clauses. To obtain information about the safeguards used, please contact info@tpsproduction.com. Data is not sold or disclosed.
6. Retention Period
Data submitted through the form is retained in the company mailbox for the time needed to handle the request and thereafter for up to 24 months, unless a longer period is required by law or to establish, exercise or defend legal claims. Technical security data is retained only for the time strictly necessary for the relevant purposes and in accordance with the retention policies of the involved providers.
7. Your Rights
As a data subject, you have the right, within the limits and conditions set out in Articles 15-22 of the GDPR, to request access to your data, its rectification or erasure, restriction of processing, data portability, and to object to processing. You can exercise these rights by writing to info@tpsproduction.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) if you believe the processing violates applicable law.
8. Cookies, technical tools and automated decisions
The website uses the first-party technical cookies NEXT_LOCALE and locale, each with a maximum duration of 12 months, solely to remember the language selected by the user. It does not use analytics, pixels, marketing cookies or other identifiers to track users; these technical cookies do not require consent. Cloudflare Turnstile is used solely as a technical anti-abuse measure for the form and does not involve automated decision-making producing legal or similarly significant effects on the user. If tracking tools for additional purposes are introduced, they will be configured in advance and this notice will be updated.
9. Changes to This Policy
This notice may be updated for legal, technical or organisational changes. The updated version will be published at this address with its last-updated date.