Privacy notice — Contact forms

Code BET-GDPR-CF-001 · Version 3.0 · 01/10/2026

Download the PDF

This privacy notice (Art. 13 GDPR) explains how we process the data of people who write to us through the contact forms and the “Become a partner” form on the Blue Eagle Technology websites. Browsing the websites is covered by notice BET-GDPR-WEB-001; newsletters are covered by notice BET-GDPR-NL-001.

1. Who processes your data

Data controller: Blue Eagle Technology S.r.l., Via Micanzi 9, 25133 Brescia (BS), Italy, VAT number IT 03345770980, REA BS-526344, which publishes the websites under its own name and under the brands Eagle Networks, ARXDOME, EagleSafe, EagleMercury, 7dCloud, 7dBackup and EagleHosting.
Privacy contact: privacy@blueeagle.it

Data Protection Officer (DPO) of Blue Eagle Technology S.r.l.:
email dpo@eu-gdpr.it

2. Which forms this applies to

Form	Where to find it	What it is for
Contact / Information request	eagle.network/contatti/ blueeagle.technology/contact/ arxdome.com/contatti/ In Italian, English, Spanish and Romanian	Asking for information, a quote, a presentation, a demo or a trial of the services, or consulting, certification or security support, for your own company or for one of your clients, or proposing a collaboration
Become a partner	eagle.network/partner/diventa-partner/ In Italian, English, Spanish and Romanian	Applying as a partner (for example reseller, MSP, MSSP or system integrator) to offer the services to your own clients

The contact buttons on the websites eaglesafe.com, eaglemercury.com, 7dcloud.com and 7dbackup.com lead to the contact form of eagle.network: these websites do not collect data with forms of their own.

3. What data we process

Contact forms

The fields may vary from site to site. Depending on the form, we ask you for:

• Contact details: first and last name, email address, company or organisation, country, role in the company (optional), telephone (optional, but mandatory if you ask to be contacted by telephone).
• Contact preferences: whether you prefer to be contacted by email or by telephone and, for telephone, the time slot (morning, afternoon, no preference).
• Content of the request: who the request is for (your company or one of your clients), the reason (for example information, quote, presentation, demo or trial, collaboration), the service or areas of interest (for example NIS2 compliance and regulations, ISO 27001 and 22301 certifications, privacy and GDPR, SOC and monitoring, penetration testing, security incident, network security, cloud, training, systems support), the type of support you are looking for and the message you write.
• Information about your organisation, optional: sector, number of employees (in ranges), whether it falls within the scope of the NIS2 directive (essential or important entity), certifications already obtained, any deadlines or audits already scheduled.
• Service details, all optional and different for each service: for example number of users, devices or sites, directories and systems in use, firewalls and endpoints in use, what to protect and the volume of data, servers or workloads to move to the cloud, preferred data center area, telephone number portability, CRM to integrate, number of websites and email mailboxes.
• If the request is for one of your clients: only the sector and the size (in employee ranges) of the client company, both optional. We do not ask you for the name or any other data that would allow the client to be identified, and we ask you not to enter them.

“Become a partner” form

The form is only available on eagle.network (eagle.network/partner/diventa-partner/, in four languages) and, in addition to the data added automatically, it collects exactly the following data:

Section	Data	Completion
The company	Company name, VAT number, country, website, number of employees (in ranges)	Mandatory
	City	Optional
The business	Type of business (IT reseller, MSP, MSSP, system integrator, software house, consultant or professional firm, telco operator or ISP, other with optional specification); number of active clients (in ranges)	Mandatory
	Client sectors, services already offered, vendors you work with, technicians in the team (in ranges)	Optional
What you are interested in	Services to offer (at least one); collaboration model (resale, white label where available, to be assessed together)	Mandatory
	Timing; how you got to know us	Optional
The contact person	First name, last name, role in the company, business email address, telephone	Mandatory
	Message	Optional

The other websites do not have a partner form: anyone who wants to become an ARXDOME partner can state it as the reason in the contact form of arxdome.com.

Data added automatically with every submission

• Request data: website, language, the page from which you submit the form, date and time; referring site and campaign parameters (UTM), if present in the link.
• Technical security data: IP address, user agent and form completion time, used only to recognise automated submissions and abuse.

We do not ask you for special categories of data (Art. 9 GDPR, for example health data) or judicial data, or for data of other people: we ask you not to enter them in the text fields and in the message. If you report a security incident to us, describe only the situation in general terms in the form: we will then collect the details by telephone or through secure channels.

4. Why we process them and on what legal basis

For each purpose, the legal basis:

• Replying to your request for information, quote, presentation, demo, trial or support, contacting you again by the means and in the time slot you prefer, and immediately sending you a confirmation email with a summary — Pre-contractual measures taken at your request (Art. 6.1.b GDPR). If you write on behalf of a company, the processing of your data as contact person is based on our legitimate interest in replying to the company you represent (Art. 6.1.f GDPR).
• Assessing the partner application and contacting you for a first meeting — Pre-contractual measures taken at your request (Art. 6.1.b GDPR) and legitimate interest in assessing the collaboration with the company you represent (Art. 6.1.f GDPR).
• Understanding, in aggregate form, which websites and campaigns the requests come from — Legitimate interest in assessing the effectiveness of our websites (Art. 6.1.f GDPR). We use only aggregated data, without profiling.
• Protecting the forms from automated submissions and abuse — Legitimate interest in the security of the websites (Art. 6.1.f GDPR) and obligation to adopt appropriate security measures (Art. 32 GDPR).
• Defending our rights in the event of disputes — Legitimate interest (Art. 6.1.f GDPR).

If the request leads to a supply or partnership contract, from that moment your data is processed in accordance with the notice we give you with the contract.

We do not use the data from the forms to send you newsletters or promotional communications. Newsletters are received only by subscribing with the dedicated form and confirming the subscription; notice BET-GDPR-NL-001 applies to them.

The data is not used for profiling and is neither transferred nor sold to third parties. There are no decisions based solely on automated processing (Art. 22 GDPR).

5. Provision of data

Filling in the forms is optional. The mandatory fields are indicated in the form and are needed to reply to the request or assess the application: without them we cannot follow up. The optional fields serve only to prepare a better reply.

The box with which you confirm that you have read this notice is mandatory, but it is not a request for consent: it only serves to confirm that you have been able to read how we process your data.

6. Who can see your data

• Blue Eagle Technology staff authorised to handle commercial and technical requests and system maintenance, bound by confidentiality. The archive of requests can be accessed only with personal credentials.
• Providers acting as data processors (Art. 28 GDPR): the data is hosted on servers in data centers in the European Union and managed by Blue Eagle Technology technicians; for sending emails we use a specialised external provider.
• Blue Eagle Technology partners: we do not disclose your data or your requests to our partners.
• Authorities, only where required by law.

Outside these cases, the data is not disclosed to other parties for their own purposes.

7. Transfers outside the European Union

The data centers hosting our websites and the requests received are located in the European Union.

Only the sending of the emails generated by the forms (the notification of the request, the confirmation email and our replies) may involve a transfer of data to the United States. For this service Blue Eagle Technology uses data processors (Art. 28 GDPR) who may process in the United States email address, name, content of the emails and technical data relating to the delivery of the messages. All processors that process data in the United States are certified under the EU-U.S. Data Privacy Framework, and the transfer is based on the related adequacy decision of the European Commission (Implementing Decision (EU) 2023/1795 of 10 July 2023, Art. 45 GDPR). Should that decision cease to apply, the transfer will take place on the basis of the standard contractual clauses adopted by the European Commission (Art. 46 GDPR), already signed between Blue Eagle Technology and each processor, solely for the period necessary to migrate the service to another provider. You can obtain a copy by writing to the controller (privacy@blueeagle.it) or to the DPO (dpo@eu-gdpr.it).

The updated list of data processors is kept at the registered office of Blue Eagle Technology and can be consulted on request addressed to the controller or the DPO. To limit the data transferred, emails do not contain credentials in clear text, attachments with personal data or lists of people.

8. How long we keep the data

Data	Retention
Information requests not followed by a contract	12 months from the last contact, then deleted.
Partner applications not followed by an agreement	12 months from the last contact, then deleted.
Requests and applications followed by a contract or a partnership agreement	They become part of the documentation of the relationship and are kept for the duration of the relationship and for the periods required by law, in accordance with the contractual notice.
Emails generated by the forms in the company mailbox	Same periods as the request they refer to: 12 months from the last contact.
Technical security data (IP address, user agent, form completion time)	45 days.
Submissions recognised as spam or automated	12 months, then deleted.
Technical sending logs at the mail provider	45 days from sending.
Aggregated data on the origin of requests	Kept only in anonymous form, with no link to the person.
Backup copies	Daily backup, kept on a rotating basis for 10 days.
Deletion request	The data is deleted without undue delay and in any case within one month of the request, except for data we must keep by law or to defend our rights.

9. How we protect the data

Encrypted connection (HTTPS) for all forms; controls against automated submissions without third-party tools and without cookies; verification of the submitted data on the server as well; archive of requests accessible only to authorised staff with personal credentials; no data saved in your browser; emails without tracking; daily backups.

10. Your rights

You can request at any time:

• access to your data and a copy (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• portability of the data you have provided, for processing based on pre-contractual measures (Art. 20);
• to object to processing based on legitimate interest (Art. 21).

How to proceed: write to the controller (privacy@blueeagle.it) or to the DPO (dpo@eu-gdpr.it). We will reply within one month of receipt, a period that may be extended by two months in complex cases (Art. 12.3 GDPR).

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority) (www.garanteprivacy.it) or with the supervisory authority of the EU State where you live or work (Art. 77 GDPR).

11. Cookies and tracking

The form pages do not use cookies or tracking tools and do not save data in your browser. The website and the campaign parameters you come from are read from the page link and sent with the form, without cookies. For the rest of each website, the relevant cookie policy applies.

The confirmation email and the emails with which we reply to you contain no tracking pixels or tracked links.

12. Changes and translations

This notice may be updated. The version in force and subsequent changes are published at blueeagle.technology/privacy and linked from every form. The text is drafted in Italian: the versions in other languages are courtesy translations and, in case of differences, only the Italian version prevails. Date of last update: 01 October 2026.