Last updated: 2026-10-15

This Privacy Policy describes how TN Solutions (data controller) processes the personal data of website users pursuant to Article 13 of EU Regulation 2016/679 (GDPR).

Data controller and DPO

Data controller: @TNSOLUTIONS.IT S.r.l., tax code 11001110961, Viale Svezia 3, 20066 Melzo (MI), email info@tnsolutions.it, represented by its legal representative pro tempore (TN Solutions).

Data Protection Officer (DPO): appointed under Article 37 GDPR, reachable at dpo@tnsolutions.it.

Categories of data, purposes and legal basis

In accordance with EU Regulation 2016/679 (GDPR), we process the following categories of personal data:

Contact data (name, email, phone, message content) submitted through the website forms: processed to respond to requests (Art. 6(1)(b) GDPR — pre-contractual measures) and, where applicable, to fulfil legal obligations (Art. 6(1)(c) GDPR).
Browsing data (IP address, technical logs) collected automatically by the systems that operate the website: processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the security and proper functioning of the service.
Newsletter data (email address): processed only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time via the unsubscribe link in each message.
Conversations with the virtual assistant: see the dedicated section below.
Customer Area data (login credentials, username, password in encrypted form, access and activity logs): processed with your consent and for the performance of the contractual relationship (Art. 6(1)(b) GDPR), as well as on the basis of our legitimate interest in IT security (Art. 6(1)(f) GDPR), for customer authentication, the provision of reserved services, system security and access tracking.

Providing data is optional, but failure to provide the data marked as required in the forms makes it impossible to respond to your request. For information on cookies, please see the Cookie Policy.

Regardless of the original purpose, the Controller may process personal data to establish, exercise or defend its rights in legal proceedings, on the basis of its legitimate interest (Art. 6(1)(f) GDPR), for as long as necessary and in any case no longer than the applicable limitation periods.

Data retention

Personal data is kept only for the time necessary to achieve the purposes for which it was collected: data relating to enquiries is kept for the time needed to handle the request and for any subsequent contractual relationship; newsletter data until consent is withdrawn; technical logs for the limited periods required for security purposes; Customer Area data for the duration of the relationship.

Processing methods and security measures

Processing is carried out with manual, electronic and telematic tools, using logic strictly related to the stated purposes and in a way that ensures the security and confidentiality of the data.

The Controller adopts appropriate technical and organisational measures under Article 32 GDPR, including access control, encryption of data in transit, periodic backups, segregation of environments, monitoring of security events and training of authorised personnel.

Recipients and transfers

Data is processed by the Controller's authorised personnel, instructed under Article 29 GDPR, and may be disclosed to:

hosting, cloud and data centre service providers;
providers of maintenance and technical support for information systems;
providers of electronic communication platforms;
consultants, professionals and auditing firms, within the scope of their engagements;
judicial and public authorities, in the cases provided for by law.

Parties processing data on behalf of the Controller are appointed as data processors under Article 28 GDPR.

Data is not disseminated or sold to third parties.

Data is ordinarily processed and stored within the European Economic Area. Where transfers to third countries become necessary, they take place only with appropriate safeguards under Chapter V GDPR, in particular: an adequacy decision of the European Commission, where applicable, or standard contractual clauses adopted by the European Commission under Article 46(2)(c) GDPR, supplemented where necessary by additional measures.

Virtual assistant (chatbot)

The website offers a virtual assistant based on an artificial intelligence model (HectorOS), used to answer general questions about TN Solutions and its services. Conversations are recorded and stored to allow a human operator to take over the conversation when requested and to improve the service, in compliance with the GDPR and the EU AI Act. The assistant never claims to be a human being and does not replace a binding quote or contract: for those, please contact us directly. You may request deletion of a conversation through our contact form.

Artificial intelligence and the EU AI Act

TN Solutions uses artificial intelligence systems in compliance with EU Regulation 2024/1689 (AI Act), and in particular with the transparency obligations of Article 50:

whenever you interact with an AI system (such as the virtual assistant), this is clearly disclosed: the assistant always presents itself as such and never claims to be a human being;
the AI systems used on this website fall within limited-risk use cases (conversational assistance and content support) and are not used for automated decisions producing legal effects, profiling, or evaluation of natural persons;
every AI system operates under human oversight: a human operator can review conversations, take over a chat on request, and verifies the outputs of the systems used.

AI-assisted content with human supervision

In a spirit of transparency, we inform you that some parts of this website (such as texts, translations and editorial content) are developed with the support of artificial intelligence tools. All AI-assisted content is reviewed, verified and approved by a human operator of TN Solutions before publication, who remains responsible for its accuracy. If you find an error, please report it through our contact form.

Automated decision-making and profiling

The Controller does not use automated decision-making processes that produce legal effects or similarly significantly affect data subjects within the meaning of Article 22 GDPR.

Any profiling connected with marketing cookies is described in the Cookie Policy and is based exclusively on the data subject's consent.

Minors

The Site is not intended for persons under 18. The Controller does not knowingly collect personal data of persons under 18 for information society services based on consent (Art. 8 GDPR and Art. 2-quinquies of Italian Legislative Decree 196/2003). Should such data be detected, it will be deleted without delay.

Your rights

Within the limits and under the conditions laid down in Articles 15-22 GDPR, the data subject has the right to:

access their personal data and obtain information about the processing;
obtain the rectification of inaccurate data and the completion of incomplete data;
obtain the erasure of data in the cases provided for;
obtain the restriction of processing;
receive the data in a structured, commonly used and machine-readable format and transmit it to another controller (portability);
object at any time to processing based on legitimate interest, on grounds relating to their particular situation, and in any case and without needing to give reasons to processing for direct marketing purposes;
not be subject to a decision based solely on automated processing;
withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali).

You may exercise the rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) through our contact form or by written request sent to the Controller at the postal address of its registered office or at info@tnsolutions.it.

Links to third-party websites and social platforms

The Site may contain links to websites and social platforms operated by third parties, over which the Controller has no control. The Controller is not responsible for the content, cookies or data protection practices of those websites. Users are invited to read the respective privacy policies before providing any personal data.

Updates to this policy

This policy may be updated to reflect regulatory or service changes: the date of the latest revision is shown at the top of the page.

Technology partners