Version 1.0 – in force from 13 October 2026
This is a translation provided for convenience. The Italian version is the only binding text and prevails in case of any discrepancy.
This notice, given under art. 13 of Regulation (EU) 2016/679 ("GDPR") and art. 122 of Italian Legislative Decree 196/2003, concerns visitors of the website www.datapdfengine.com. If you create an account, the platform privacy notice applies. The free forms website moduli.datapdfengine.com has its own notice.
1. Data controller
The service provider, trading as "DataPDFEngine".
Privacy contact: .
The other identification details are on the Legal notice page. We have not appointed a DPO, as it is not mandatory for our activity (art. 37 GDPR).
2. What data we process
2.1 Browsing data
When you visit the website, the servers that deliver it and the Cloudflare network receive, as for any website, the IP address, the date and time, the page requested, the referring site and the browser type.
- Purpose: showing you the website, protecting it from abuse and attacks, diagnosing errors.
- Legal basis: legitimate interest in the security and operation of the website (art. 6.1.f GDPR).
- Retention: for a limited period, with automatic rolling deletion, unless needed to investigate an incident.
2.2 Counting visits from campaigns
If you reach the website from a link with campaign parameters (utm_*) or from the free forms website, the website sends our servers the source, medium, campaign, content and the page visited. We add them to an aggregated daily counter: we do not record the IP address or any identifier, and the data cannot be linked to you. The IP address of the request is used only to limit its rate and is not stored in the counter.
- Purpose: knowing which campaigns and websites bring visits.
- Legal basis: legitimate interest (art. 6.1.f GDPR).
- Retention: the aggregated counters contain no personal data.
2.3 Visit statistics
We count visits with Cloudflare Web Analytics, in aggregate form: the script uses no cookies, stores nothing on your device and does not identify you. It records the page visited, the referring site, the browser and device type, the country (derived from the IP address, which is not stored) and loading times.
- Purpose: knowing how many people visit the website, which pages they read and how fast they load.
- Legal basis: legitimate interest (art. 6.1.f GDPR).
- Retention: according to Cloudflare's retention; the data is aggregated only.
2.4 Campaign parameters during the visit
During the visit the website keeps the campaign parameters you arrived with in the browser's session storage (sessionStorage, key dpe:attribution) and adds them to the "Sign up" and "Sign in" links to the platform. The data is deleted when the tab is closed. If you create an account, the parameters are linked to your account as described in the platform privacy notice.
2.5 Document verification
On the verification page your browser computes the SHA-256 fingerprint of the PDF and sends us only that: the file does not leave your device. If you ask to verify digital signatures of other providers, the file is sent to our servers, used only for the verification and not stored. The IP address is used to limit the rate of verifications.
- Legal basis: performing your request (art. 6.1.b) and legitimate interest in security (art. 6.1.f).
2.6 Contacts
If you write to us at or at another address shown on the website, we process your email address and what you write in order to reply.
- Legal basis: pre-contractual measures or legitimate interest in replying (art. 6.1.b and 6.1.f).
- Retention: for the time needed to handle the request and, if you become a customer, as set out in the platform privacy notice.
3. Cookies and local storage
The website does not use profiling cookies or advertising pixels, and does not load fonts from external services. The only external script is Cloudflare Web Analytics (§ 2.3), which uses no cookies or local storage. This is why we do not ask for any consent.
| Where | Name | Purpose | Duration |
|---|---|---|---|
| localStorage | theme |
remembers the light or dark theme you chose | until you delete it |
| sessionStorage | dpe:attribution |
campaign parameters of the visit (§ 2.4) | until the tab is closed |
| cookie | __cf_bm and other Cloudflare security cookies, if set |
protection from automated traffic | up to 30 minutes, according to Cloudflare |
You can delete this data from your browser settings at any time; the website keeps working.
Links to other websites lead to services with their own notices.
4. Who we share data with
The following process data on our behalf, as processors (art. 28 GDPR):
- Cloudflare: network, protection and delivery of the website;
- Oracle (Oracle Cloud Infrastructure, Milan region): servers that receive the visit counts and the verification requests;
- the provider that hosts and delivers the website's pages: Cloudflare, Inc. (Cloudflare Pages and delivery network), with the transfer safeguards set out below.
Cloudflare, Inc. may process data outside the European Economic Area. The transfer is covered by the EU-U.S. Data Privacy Framework certification and by the European Commission's Standard Contractual Clauses.
We do not sell or pass on data to third parties for marketing purposes.
5. Your rights
You can request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest (arts. 15-21 GDPR), by writing to . You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
6. Changes
The version in force is always on this page, with the date at the top.