ELKA
Privacy policy
How ELKA processes the personal data of those who visit its websites and write to us.
Last updated: 13 November 2026 · version 1
Data controller
The data controller for personal data collected through this website is ELKA S.r.l., Via Brughiere, 60, 28017 San Maurizio d’Opaglio (NO), Italy, VAT no. and tax code 02503230035, company register (REA) NO-240385, share capital €15,000.00.
Privacy contact: info@elkasrl.com, tel. +39 0322 967832, certified email (PEC) elkas.r.l@pec.it.
This notice applies to www.elkadesign.us and to ELKA's Italian website, both run by the same controller.
What data we process
- Browsing data: IP address, date and time, page requested, browser and operating system, logged automatically by the servers hosting the site to run and protect it.
- Data you give us through the forms (contact, catalogue requests, spare parts, Atelier, 3D configurator, job applications): first name, last name, email, phone, company, profile, country, message and any other data you write.
- Reserved area: email, first name, last name, company, role, country, password (stored only in encrypted form, never in plain text), sign-up date and downloaded files.
- Newsletter: first name, last name, email and, if provided, phone and company, only if you tick the newsletter box.
- Cookies and similar technologies: see the cookie policy.
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering requests sent through the forms (contact, spare parts, Atelier, configurator) and sending the catalogues you request | Pre-contractual steps or contract, at your request (Art. 6(1)(b)) |
| Assessing job applications | Pre-contractual steps at your request (Art. 6(1)(b)). Please do not send special categories of data (health, opinions…) unless strictly necessary |
| Running the reserved area (sign-in, 3D model downloads) and knowing which files are downloaded to follow professionals' projects | Contract (Art. 6(1)(b)) and ELKA's legitimate interest (Art. 6(1)(f)) |
| Sending the newsletter (Nautical Notes and ELKA news) | Consent, which you can withdraw at any time (Art. 6(1)(a)) |
| Visit statistics with Google Analytics 4 | Consent given in the cookie banner (Art. 6(1)(a)) |
| Measuring and improving advertising campaigns with Meta Pixel and Conversions API | Consent given in the cookie banner (Art. 6(1)(a)) |
| Anonymous, aggregated statistics with Vercel Web Analytics, without cookies | Legitimate interest (Art. 6(1)(f)) |
| Site security and abuse prevention (limits on form submissions, technical logs) | Legitimate interest (Art. 6(1)(f)) |
| Keeping proof of your cookie choices (consent log, without IP address or email) | Obligation to demonstrate consent (Arts. 6(1)(c) and 7(1)) |
| Complying with the law and defending ELKA's rights | Legal obligation and legitimate interest (Art. 6(1)(c) and (f)) |
Who receives the data
Data is processed by authorised ELKA staff and by the providers that help us run the site, appointed as data processors:
- Vercel Inc. (USA): hosting of the site and its functions (servers in the EU, Frankfurt region), file storage (Vercel Blob), anonymous statistics (Web Analytics).
- Resend (Plus Five Five, Inc., USA): sending the emails generated by the forms to ELKA.
- ActiveCampaign, LLC (USA): newsletter management, only for those who asked for it.
- Google Ireland Ltd / Google LLC: Google Tag Manager, Google Analytics 4 (with your consent), YouTube (videos loaded only when you click).
- Meta Platforms Ireland Ltd: Meta Pixel and Conversions API (with your consent).
- Vimeo.com, Inc. (USA): videos loaded only when you click.
Data may also be disclosed to advisers and authorities where required by law. We do not sell your data.
Transfers outside the European Union
Some providers are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework for certified providers and otherwise on the Standard Contractual Clauses approved by the European Commission.
As of 13 November 2026, all the US providers listed above are certified and active on the official Data Privacy Framework List (dataprivacyframework.gov): Vercel Inc., Resend (Plus Five Five, Inc.), ActiveCampaign, LLC, Google LLC, Meta Platforms, Inc. and Vimeo.com, Inc.
How long we keep data
We keep data for these periods:
- Form requests: 24 months from the last contact, unless a business relationship is ongoing.
- Job applications: 12 months.
- Reserved area accounts: until you ask us to delete them, or after 24 months without sign-ins; download log: 24 months.
- Newsletter: until you withdraw your consent (link at the bottom of every email).
- Cookie consent log: 24 months from your choice. The choice saved in your browser lasts 6 months.
- Google Analytics 4: 14 months. Meta: according to Meta's rules.
- Server technical logs: for the period set by the hosting provider (Vercel).
Your rights
You can ask at any time to access, correct or delete your data, restrict its processing, receive it in a portable format, object to processing based on legitimate interest and withdraw your consent, without affecting processing already carried out (Arts. 15-22 GDPR). Write to info@elkasrl.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of the country where you live or work. If you live in a US state with its own privacy law, you can also exercise the rights it gives you by writing to the same address.
Mandatory and optional data
Fields marked as required in the forms are needed to answer your request: without them we cannot do so. The others are optional. Consent to the newsletter and to non-essential cookies is always optional and does not affect your use of the site.
Changes
We may update this notice. The version in force is always on this page, with the date of the last update.