Skip to main content
Tissquad

Privacy Policy

Last updated: 13 October 2026

What has changed since version 2.3. The address for exercising the rights is privacy@tissquad.com. The retention of the data of those who wrote to us without becoming clients, of the data used for marketing to clients and of the logs is stated with a criterion instead of in months.

PrintSquad SRL ("Tissquad"), with registered office at Centro Direzionale Isola G/8 SNC, 80143 Napoli and operational site at Via Boscofangone SNC, Zona ASI, Lotto C/8B, 80035 Nola (NA), VAT 09384841210, as controller, informs the user pursuant to Articles 13-14 of EU Regulation 2016/679 (GDPR) and D.Lgs. 196/2003 (the Italian Privacy Code), as amended.

1. Controller

Controller: PrintSquad SRL (VAT 09384841210). Privacy email: privacy@tissquad.com. The website tissquad.com is operated by PrintSquad SRL, which works in the e-commerce logistics sector.

2. Types of data collected

Data provided voluntarily: first name, last name, email, phone, company, website, role, industry, e-commerce volumes, platform, accepted payment methods, current logistics partner, urgency, free-text notes, consent timestamp, IP address at the time of consent. Data collected automatically: IP address, browser, operating system, pages visited, visit duration, referrer, cookies, interaction data (clicks, scrolling, calculator events), advertising campaign parameters in the page address (UTM, gclid, gbraid, wbraid, fbclid, ttclid, msclkid), which we store in our own cookies and link to the contact request only with consent to marketing cookies.

3. Legal basis for processing

For each purpose we rely on the most appropriate legal basis under Article 6 GDPR: (a) Answering quote or contact requests: Article 6(1)(b), pre-contractual measures at the request of the data subject. (b) Performance of the logistics services contract: Article 6(1)(b). (c) Legal and tax obligations: Article 6(1)(c), legal obligation (Article 2220 of the Italian Civil Code, D.P.R. 600/1973 on tax assessment). (d) Marketing communications by email: Article 6(1)(a), explicit consent + Article 130 of D.Lgs. 196/2003. (e) Profiling, lead scoring, aggregate analytics: Article 6(1)(f), legitimate interest of the controller, with opt-out available. (f) Cookies and other analytics and marketing tools: Article 6(1)(a) + Article 122 of D.Lgs. 196/2003, consent (see Cookie Policy).

4. Purposes of processing

Necessary (no consent): handling requests, providing logistics services, tax obligations, IT security. Based on consent (explicit opt-in): promotional communications by email, analytics/marketing cookies. Based on legitimate interest (opt-out available): improving our services through aggregate analysis, lead scoring for sales qualification.

5. Retention period

Unconverted lead: we delete the data in due course, at the controller's discretion, when the request can no longer lead to a business relationship. Active client: contract duration + 10 years for tax purposes (Article 2220 of the Italian Civil Code), billing data only. Client marketing data: as long as the marketing consent remains active. Marketing consent withdrawn: from the withdrawal, the data is no longer used for marketing and is kept only for the other purposes, for the periods stated here. Browsing data and cookies: variable (see Cookie Policy), max 24 months. Access and security logs: for the time needed to monitor the security of the systems and to reconstruct any incidents.

6. Recipients of the data

The data may be disclosed to these recipients. • Website hosting provider (US-DPF). • Provider of the CRM that receives contact requests (US, SCC module 2). • Resend, Inc., sending the emails about contact requests (US, SCC). • Google Ireland Ltd. (US-DPF), Analytics, Ads. • Provider of the cloud services for email and documents (SCC or DPF). • Meta Platforms Ireland (US-DPF), Pixel. • TikTok For Business (EU/SG, SCC + TIA), Pixel. • A company of our group based in Italy, for IT and administrative services, including email and documents. • Provider of the electronic signature of contracts. For clients of the logistics service, also the providers of the warehouse software, the shipping platform and the cloud servers, based in the European Union. In addition: consultants, accountants, lawyers (bound by confidentiality), judicial authorities on request, logistics partners (carriers) to perform the contract.

7. Transfers outside the EU

Some of these providers are based in the United States or operate servers outside the European Union. To ensure an adequate level of protection under Articles 44-49 GDPR we use: the EU-US Data Privacy Framework (DPF) for certified providers; the provider's binding corporate rules (BCR) for the electronic signature; Standard Contractual Clauses (SCC) module 2 for the others; a Transfer Impact Assessment (TIA) for higher-risk transfers (TikTok). On request to privacy@tissquad.com we provide a copy of the safeguards applied.

8. Rights of the data subject

Under Articles 15-22 GDPR, the user has the right to: • Access (Article 15): confirmation of the processing and a copy of the data. • Rectification (Article 16): correct inaccurate data or complete it. • Erasure (Article 17): the "right to be forgotten" (with limits due to legal obligations). • Restriction (Article 18): temporarily block the processing. • Portability (Article 20): receive the data in a structured format (JSON/CSV). • Objection (Article 21): object to processing based on legitimate interest. • Withdrawal of consent (Article 7(3)): at any time, without prejudice to processing carried out before. • Complaint to the supervisory authority: Garante Privacy, the Italian Data Protection Authority (garanteprivacy.it). To exercise these rights: privacy@tissquad.com. We reply within one month of receiving the request. If the request is complex or we receive many requests, this period may be extended by two months, in which case we inform the user within the first month and explain why.

9. Security

Among the measures in place, data in transit is encrypted with TLS and access to the systems is limited to authorized staff. In the event of a personal data breach, we notify the Garante within 72 hours, as required by Article 33 GDPR.

10. Cookies

The site uses technical cookies and, only with the user's consent, cookies and other analytics and marketing tools. Consent is given or refused in the banner that appears on the first visit and can be changed at any time from the "Cookie preferences" link at the bottom of every page. The Cookie Policy lists the cookies with their duration and purpose and describes the other data the site stores in the browser.

11. Profiling and automated decisions

We use an automated lead scoring system to: classify the level of interest, calculate an estimated commercial value. The system does NOT produce automated decisions with significant legal effects on the data subject (Article 22 GDPR does not apply). Every final commercial decision is made by a human operator. The data subject can request information about the logic, object to profiling or ask for human intervention by writing to privacy@tissquad.com.

12. Changes to this policy

We may change this policy to adapt it to regulatory, organizational or technical changes. If a change is substantial, for example a new purpose or a different way of exercising the rights, we flag it at the top of this page, with the date and what has changed.

13. Contact

Controller: PrintSquad SRL. Privacy email: privacy@tissquad.com. Postal address: PrintSquad SRL, Centro Direzionale Isola G/8 SNC, 80143 Napoli (NA), Italy. Supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia, 11, 00187 Roma, garanteprivacy.it.

14. Data Protection Officer (DPO)

PrintSquad SRL has not appointed a Data Protection Officer (DPO) under Article 37 GDPR, since the mandatory conditions set by the law are not met. For any request concerning the protection of personal data and to exercise the rights of the data subject, you can contact the controller at privacy@tissquad.com.