Home · Privacy and cookies

Transparency

Privacy and cookies

A note on the scope of this notice. This is an English translation of the Italian privacy notice, provided for convenience. It describes the processing of data carried out through this site (no data-collection forms, no analytics cookies active by default, contact only via email/PEC). It does not cover the processing linked to SOTHIS's actual insurance intermediation activity, personnel selection, or the handling of whistleblowing reports, which are the subject of the dedicated notices listed below (available in Italian only). In the event of any discrepancy between this translation and the Italian original, the Italian version prevails.

Other privacy notices published by SOTHIS (Italian only)

Privacy notice — Clients, policyholders, insured persons, beneficiaries and injured parties
Insurance intermediation activity, quoting, policy and claims management (GDPR art. 13-14)

Privacy notice — Job candidates
Spontaneous applications and selection processes for employment, collaboration or intermediation roles (GDPR art. 13)

Privacy notice — Handling of whistleblowing reports
Data processing under the Whistleblowing Procedure (Legislative Decree 24/2023)

1. Data controller

The data controller is SOTHIS S.r.l., with registered office at Via della Giuliana 37, 00195 Rome, Italy, tax code and VAT no. 18562671000, REA RM-1792501.

For any request regarding the processing of personal data, the data controller can be contacted at:

SOTHIS has outsourced the role of Data Protection Officer (DPO) to K Partners S.r.l., with registered office at Piazza della Repubblica 32, 20124 Milan, Italy, VAT and tax code 01594080432. The DPO can be contacted for any matter relating to the processing of personal data and the exercise of data subject rights at: email dpo@sothisinsurance.it — PEC (certified email) amministrazione@pec.kpartners.it.

2. What data this site collects, and why

This site is an informational showcase: it contains no quote-request forms, restricted areas or payment tools. The data processed through the site is therefore limited to:

2.1 Browsing data

In the course of normal operation, the computer systems behind this site acquire certain data whose transmission is implicit in the use of internet communication protocols (e.g. IP address, browser type, pages requested, time of the request). This data is used solely to derive anonymous statistical information on the use of the site and to check that it functions correctly, and is deleted immediately after processing or kept for the minimum technical time necessary. Legal basis: the data controller's legitimate interest in the security and correct functioning of the site (art. 6.1.f GDPR).

2.2 Data provided voluntarily

By writing to info@sothisinsurance.it (directly, or via the "mailto" links on the site), the user voluntarily provides their email address and any other personal data included in the message (e.g. name, company name, RUI registration number if the request concerns joining the distribution network). This data is used exclusively to reply to the request and for any related activities, including pre-contractual ones. Legal basis: performance of pre-contractual measures taken at the data subject's request (art. 6.1.b GDPR).

3. How data is processed

Processing is carried out using IT and/or telematic tools, with organisational and logical methods strictly related to the purposes indicated, and in any case in a way that guarantees the security and confidentiality of the data.

4. Disclosure and recipients of the data

The personal data collected through the site may be processed, to the extent strictly necessary to pursue the purposes indicated above and to ensure the site's correct operation, by third-party suppliers who provide technical and infrastructural services on behalf of the Data Controller. These parties are appointed, where the relevant conditions apply, as Data Processors under art. 28 of the GDPR.

In particular:

Personal data is not disseminated, sold, transferred or disclosed to third parties for commercial or marketing purposes, except with the data subject's specific consent where required by applicable law.

5. Transfers of data outside the EU

The hosting provider (IONOS) is based in Germany, within the European Economic Area: at present, no systematic transfers of personal data outside the EEA are therefore envisaged. Should a technical supplier involve a transfer outside the EU in future, this section will be updated with the relevant legal basis (e.g. standard contractual clauses).

6. Retention period

7. Data subject rights

As a data subject, you have the right to request from the data controller, where applicable, access to your personal data, its rectification or erasure, restriction of processing, data portability, and the right to object to processing (arts. 15-22 GDPR). Requests can be sent to info@sothisinsurance.it.

You also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Cookies and local storage technologies

This site uses exclusively technical cookies/equivalent technologies, necessary for basic functioning, for which prior consent is not required under applicable law:

Analytics or marketing cookies: as of today, the site does not install any analytics cookies (e.g. Google Analytics) nor any third-party profiling/marketing cookies. The cookie banner nonetheless includes an "Accept all" option, provisioned for possible future use of analytics tools: if and when such tools are actually activated, this section will need to be updated with the precise list of cookies, their purpose, duration and third-party provider, before activation.

You can manage or delete cookies through your browser settings; deleting the local storage related to the banner will cause the banner to reappear on your next visit.

9. Minors

This site is not directed at minors under 16, and the data controller does not knowingly collect personal data of minors through the site.

10. Changes to this notice

The data controller may update or amend, in whole or in part, this notice, including as a result of changes in applicable law. Changes will be published on this page, indicating the date of the last update.

Last updated: 30 August 2026.