1. Controller
The controller of the personal data described in this notice is Gabriele Galluzzo, operating under the name Wyvern Automation. Privacy requests can be sent to gabriele@galluzzomarketing.com.
2. Scope of this notice
This notice applies to the Wyvern Automation website and to discovery-call requests submitted through the Tally form embedded on it. It does not govern third-party websites reached through external links.
3. Personal data processed
Website and technical data
When the website is requested, the hosting and content-delivery infrastructure may process the IP address, browser and device information, requested page, date and time, referring page, and technical or security logs. The browser language is read locally to select the initial language. If you use the language switch, your choice is stored locally in your browser so it can be respected on future visits. This preference is not sent to Wyvern Automation and is not used for tracking.
Discovery-call request and correspondence data
When you submit the Tally form, the data may include your name, contact details, company or business information, answers provided in the form, and subsequent correspondence. The exact data depends on the fields displayed in the form. Please do not submit health data, identification documents, financial credentials, or other special-category personal data.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Deliver the website, maintain security, diagnose errors, and prevent abuse. | Technical and log data. | Legitimate interests under Article 6(1)(f) GDPR in operating a secure and reliable website. |
| Assess and respond to a discovery-call request and, where appropriate, arrange a consultation. | Contact, form-response, and correspondence data. | Steps taken at your request before entering a contract under Article 6(1)(b) GDPR. |
| Comply with tax, accounting, regulatory, or other legal duties. | Data required by the applicable obligation. | Legal obligation under Article 6(1)(c) GDPR. |
| Establish, exercise, or defend legal claims. | Relevant correspondence and transaction records. | Legitimate interests under Article 6(1)(f) GDPR. |
The website does not currently use first-party analytics, advertising pixels, or profiling for automated marketing.
5. Tally form
The embedded form is provided by Tally BV, August Van Lokerenstraat 71, 9050 Ghent, Belgium, enterprise number 0776.979.007. Wyvern Automation determines which information the form requests and why it is collected, while Tally processes form responses on its behalf.
Loading or using the embedded form sends technical information to Tally. Tally states that form data is encrypted in transit and at rest and stored in Europe. Tally may process limited account, usage, and security data under its own responsibilities as described in its privacy notice.
See Tally's Privacy Notice, GDPR information, and Data Processing Agreement.
6. Recipients and service providers
Personal data is disclosed only where necessary to:
- website hosting, security, and content-delivery providers;
- Tally and its authorised subprocessors for collecting and storing form responses;
- email, calendar, and communications providers used to respond and hold the meeting;
- professional advisers, public authorities, courts, or law-enforcement bodies where required by law or necessary to protect legal rights.
These recipients process data under their own legal responsibilities or under contractual instructions, as applicable. Personal data is not sold.
7. International transfers
Tally is established in Belgium and states that form-response data is stored in Europe. Some of Tally's or Wyvern Automation's supporting providers may operate outside the European Economic Area. Where a transfer outside the EEA occurs, it must rely on an adequacy decision, the European Commission's Standard Contractual Clauses, or another safeguard permitted by Articles 46-49 GDPR. A copy or description of applicable safeguards may be requested using the privacy contact above.
8. Retention
- Consultation requests and related correspondence: normally up to 24 months after the last meaningful contact, unless a shorter period is sufficient or a longer period is needed for a contract or legal claim.
- Client and accounting records: for the periods required by tax, accounting, and civil law, which may be up to 10 years where Italian law applies.
- Technical and security logs: for the short period configured by the hosting or security provider and only as long as needed for security, troubleshooting, or legal obligations.
- Tally responses: according to the Wyvern Automation account settings and applicable legal requirements. Tally states that responses deleted by the form owner are permanently removed from its backups within 90 days.
Data may be retained longer when necessary to investigate abuse, comply with a legal hold, or establish, exercise, or defend a legal claim.
9. Your GDPR rights
Subject to the conditions and limitations in the GDPR, you may request:
- access to your personal data and a copy of it;
- correction of inaccurate or incomplete data;
- erasure of personal data;
- restriction of processing;
- data portability where processing is based on contract or consent and carried out automatically;
- objection to processing based on legitimate interests;
- withdrawal of consent at any time where consent is the legal basis, without affecting earlier lawful processing.
Requests can be sent to the privacy contact above. Identity may need to be verified, and requests will normally be answered within one month.
10. Right to complain
You may lodge a complaint with the supervisory authority in the EU Member State where you live, work, or believe an infringement occurred. In Italy, the authority is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome.
11. Whether providing data is required
You are not legally required to submit the discovery-call form. However, fields marked as required are necessary to assess your request and respond. Without them, Wyvern Automation may be unable to consider or arrange a consultation.
12. Automated decisions and minors
Wyvern Automation does not use the data covered by this notice to make decisions based solely on automated processing that produce legal or similarly significant effects. The website and services are intended for business users and are not directed to children.
13. Security and updates
Reasonable technical and organisational measures are used to protect personal data, including limiting access and using service providers with contractual security commitments. No internet service can guarantee absolute security.
This notice may be updated when the website, providers, or legal requirements change. The current version and its update date will remain available on this page.