Website privacy

Version 1.0 – October 2026. This is a translation: in case of any discrepancy, the Italian version prevails.

1. Data controller

Credit Report S.r.l. (single-member company), VAT no. 01359810114, registered office at Piazza della Repubblica 24, 57122 Livorno (LI), Italy, operational office at Via Cisa Sud 168/A, 19037 Santo Stefano di Magra (SP), Italy. Email info@creditreport.it, PEC (certified email) creditreport@pec.it. Data Protection Officer (DPO): Avv. Paolo Mascitelli, p.mascitelli@creditreport.it.

This notice concerns the data processed through the website www.creditreport.it. Credit Report's activities are covered by specific notices: debt collection and business information and private investigations.

2. Browsing

The website does not use cookies or any analytics or tracking tools (see the Cookie Policy). The server hosting the website, run by Aruba S.p.A. in Italy, logs the technical data of requests (IP address, date and time, page requested) for security and for the proper operation of the service, on the basis of the controller's legitimate interest (Art. 6(1)(f) GDPR). This data is not used to identify or profile users. It is kept by Aruba for the period set by the hosting service for security purposes; Credit Report does not extract or keep it, unless it is needed to investigate a security incident.

3. "Have you received a letter from us?" form

The data and documents sent with this form are used to answer the request and to manage the case it refers to. The debt collection privacy notice applies.

The form is sent by email to our office together with the declaration ticked by the requester and the date, time and IP address of the submission, which we keep as proof of the request. Attached documents are not kept on the website server.

4. Contact form for businesses

• Data: first name, surname, company, email, telephone and message, as well as the date, time and IP address of the submission.
• Purpose and legal basis: answering the request and providing the information requested before any contract (Art. 6(1)(b) GDPR).
• Recipients: the Credit Report staff in charge and the providers of hosting and email services, appointed as processors. The data is not disclosed or transferred outside the European Union.
• Retention: for the time needed to handle the request; if no contractual relationship follows, for no more than 12 months from the last contact.
• Providing the data is optional, but without the mandatory data we cannot reply.

5. Security of the forms

The website does not keep databases or copies of the forms. To prevent abuse we keep a technical log of submissions that contains no names, email addresses or texts, only the date, type of form, outcome and the IP address in encrypted form. The log is kept for 12 months and then deleted automatically.

6. Rights

For the data in the contact form for businesses, the data subject may request access, correction, erasure, restriction of processing and data portability, and may object to processing (Arts. 15–22 GDPR), by writing to info@creditreport.it or creditreport@pec.it. For data relating to a collection case, the rules of the debt collection privacy notice apply.

The data subject always has the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).