Privacy Policy

The data controller is Klevis Kapxhiu, trading as KPX Group (“we”).

• Email: klevis@kpx-group.com

Use this email for any question about your data or to exercise your rights (see section 8).

When you write to us (contact form, email, or a message on social media): your name, your email address and/or phone number, and the content of your message. We use it to reply to you, discuss your project and prepare a quote.

Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR) and our legitimate interest in managing business enquiries (Art. 6(1)(f)).

When you request a KPX Cad licence (form at /kpx-cad/richiesta): your name, practice or company, email, phone, the computer code shown by the program, the chosen duration and any notes. We use them to contact you, confirm the request and create the key for that computer. Legal basis: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR).

Technical data: when you visit this website, our hosting and network providers process your IP address and basic request details in server logs. This is needed to deliver the site and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f)).

Anonymous visit statistics: we count visits to see which pages are used and where visitors come from (for example Instagram or Google). For each page view we store only the page, the date and time, the site or link tag that brought you here, the language, and whether it was a phone or a computer. We do not store your IP address, we do not use cookies or anything saved on your device, and we cannot tell who you are. Legal basis: legitimate interest in understanding how our site is used (Art. 6(1)(f)).

If you become a client: we also process the data needed to carry out the agreement and to issue invoices and keep accounting records as the law requires (Art. 6(1)(b) and 6(1)(c)).

Providing your details through the form is voluntary, but without them we cannot reply to you.

• We do not use advertising or tracking technologies.
• We do not use third-party analytics services such as Google Analytics.
• We do not build profiles about visitors or make automated decisions about them.
• We do not sell your data.

This website does not set cookies for visitors and does not load third-party analytics, advertising or social-media trackers, so there is no cookie banner. Our own anonymous visit count (section 2) works without cookies. After a KPX Cad licence request, your browser keeps the request’s duration, code and email in its local storage (not a cookie), only to show you it was sent when you come back; the “Invia un’altra richiesta” button removes them. Our private team area uses strictly necessary cookies to keep team members signed in; these do not affect visitors.

The site links to our Instagram profile. If you follow the link, Instagram’s own privacy policy applies.

• Enquiries that do not lead to a project: up to 24 months from our last contact, then deleted.
• If we work together: for the duration of the agreement, and afterwards for as long as the law requires (for example accounting records).
• Server logs: kept by our providers for a short period under their own policies.

Only members of our team can see the details you send us. We use these service providers to run the site:

• Supabase — database where enquiries are stored (data centre in Frankfurt, Germany).
• Vercel — website hosting (servers in Frankfurt, Germany).
• Cloudflare — DNS, network protection and email forwarding.
• Google (Gmail) and Brevo — receiving and sending our emails.

They process data on our behalf and only for these purposes. We do not sell or rent your data to anyone.

Some of these providers are companies based in the United States. Where data is transferred outside the EU, it relies on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission’s Standard Contractual Clauses.

You have the right to:

• access the data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw any consent you gave, at any time.

To exercise any of these rights, or to ask us to delete your enquiry, write to klevis@kpx-group.com. We will reply within one month. You also have the right to lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali.

This website is not aimed at children. In Italy, a person under 14 needs a parent’s or guardian’s consent to give personal data online. If you believe a child has sent us their data, contact us and we will delete it.

We may update this policy. The date at the top shows the latest version.