Legal

Privacy Policy

Last updated: March 21, 2026

1. Data Controller

The data controller is SDB srl, Via Papini 5, 21038 Leggiuno (VA), Italy — P.IVA IT04109840126.
Contact: info@citationrate.com

2. What Data We Collect

We collect personal data in the following cases:

Contact form: first name, last name, email address, phone number, company name, role, website, industry, company size, service of interest, and any message provided.
Newsletter subscription: email address and confirmation of consent.
Browsing data: IP address, browser type, pages visited, time and date of visit, referring URL. This data is collected automatically via server logs and Google Analytics 4 (GA4).
Cookies: technical cookies necessary for the site to function, and analytical/marketing cookies subject to your consent (managed via Cookiebot).

3. Purposes and Legal Basis

Responding to contact requests — legal basis: pre-contractual measures / legitimate interest (Art. 6(1)(b)(f) GDPR).
Sending the newsletter and AI visibility insights — legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by clicking the unsubscribe link in any email.
Marketing communications (if consented to in the form) — legal basis: consent (Art. 6(1)(a) GDPR).
Profiled marketing (if consented to in the form) — legal basis: explicit consent (Art. 6(1)(a) GDPR).
Website analytics and performance — legal basis: legitimate interest / consent for non-essential cookies (Art. 6(1)(f) GDPR).
Legal obligations — legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).

4. Data Retention

Contact form data: retained for up to 5 years from the date of collection, or until you request deletion.
Newsletter data: retained until you unsubscribe or request deletion.
Analytics data: retained according to the retention settings of each platform (GA4 default: 14 months).
Server logs: retained for up to 12 months.

5. Third Parties and Data Processors

Your data may be shared with the following third parties acting as data processors:

Brevo (Sendinblue SAS) — email marketing and newsletter platform. EU-based. Privacy Policy.
Google LLC — Google Analytics 4, Google Tag Manager, Google Ads. Data may be transferred to the USA under Standard Contractual Clauses. Privacy Policy.
Usercentrics A/S (Cookiebot) — cookie consent management platform. Privacy Policy.
Aruba SpA — web hosting provider. Italian-based. Privacy Policy.

We do not sell your personal data to third parties.

6. International Transfers

Some of the third-party services listed above may transfer data outside the European Economic Area (EEA), in particular to the United States. These transfers are carried out in compliance with Chapter V of the GDPR, using Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your Rights

Under the GDPR, you have the following rights:

Right of access (Art. 15) — to obtain a copy of your personal data.
Right to rectification (Art. 16) — to correct inaccurate data.
Right to erasure (Art. 17) — to request deletion of your data ("right to be forgotten").
Right to restriction of processing (Art. 18).
Right to data portability (Art. 20).
Right to object (Art. 21) — including to direct marketing.
Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, write to info@citationrate.com or by post to SDB srl — Via Papini 5, 21038 Leggiuno (VA), Italy.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Cookies

This website uses cookies. For detailed information on the types of cookies used and how to manage your preferences, please refer to our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the last update is shown at the top of this page. We encourage you to review this page periodically.