RITROVATOBack to the site

Privacy policy

Courtesy translation. Only the Italian version is legally binding.

Last updated: 1 November 2026

RITROVATO helps people find lost items in Ticino. To do this we process little data, only what is needed. Here we explain which data, why, for how long and what your rights are.

This policy applies under the Swiss Federal Act on Data Protection (FADP) and, for people using the service from the European Union, under the General Data Protection Regulation (GDPR).

1. Who is responsible

Data controller:
Pareto Services Sagl
Switzerland
Email: info@paretoservices.com

For any question about your data, write to info@paretoservices.com.

2. In short

3. What data we process and why

3.1 When you visit the site

Like any website, the server hosting the site automatically logs the IP address, date and time, the page requested, the browser and the operating system. This is needed to run the site and protect it from abuse.

The text you type in the search field (kind of item, area, period) is interpreted in your browser. The search text is not stored, unless you create an alert (section 3.2).

Legal basis under the GDPR: legitimate interest in a secure, working website (Art. 6(1)(f)).
Retention: 30 days, after which the data is deleted or anonymised.

3.2 If you lost something and create an alert

Data: email address, the general description you wrote, the recognised area, category and period, date the alert was confirmed.

We use it only to let you know when an item that could be yours is reported. The alert only starts after you confirm it through the link we send you. Every message contains a link to turn it off.

Legal basis under the GDPR: your consent (Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link or by writing to us.
Retention: as long as the alert is active, 6 months at most; then the alert expires and the data is deleted. An unconfirmed alert is deleted after 48 hours.

3.3 If you found something and report it

Public data: kind of item, place, date found, status ("Reported" or "Held") and, if applicable, the office holding it.

Non-public data: your contact (email or phone), which is never published. The details only the owner can know (for example colour, contents, distinguishing marks) you don't give to us: you keep them and compare them with the description from the person claiming the item.

Legal basis under the GDPR: performance of the service you requested (Art. 6(1)(b)) and legitimate interest in returning the item to its owner (Art. 6(1)(f)).
Retention: until the item is returned or handed in to the office, then a further 3 months for any disputes; 12 months at most.

3.4 If you ask to collect an item

Data: name, contact, your description of the item's hidden details, the declaration that the item is yours and, at the handover, the digital receipt (date, time, item, parties involved).

We pass them on to the finder or to the office holding the item, so they can check that the item is yours and arrange the return.

Legal basis under the GDPR: performance of the service you requested (Art. 6(1)(b)).
Retention: 24 months after the handover, as proof of the return; if the request doesn't go through, 3 months.

3.5 Lost property offices

For offices (municipalities, police, transport companies) we process the contact details of the people who manage the listings, as part of our cooperation.

3.6 If you write to us

We use your message and contact details only to reply to you. Retention: 12 months after the last reply.

4. Who receives the data

All other fonts and libraries are hosted together with the site. Only the PARETO@work brand typeface, at the bottom of the page, is loaded from Adobe Fonts: to do so your browser contacts Adobe's servers, which receive your IP address and the page visited. Adobe Fonts does not use cookies. No other external service receives data when you visit the site.

5. Data abroad

We process data in Switzerland and the European Economic Area, which mutually recognise an adequate level of protection.
The website is hosted by GitHub, Inc., based in the United States. The transfer is based on the EU-US and Swiss-US Data Privacy Framework or on standard contractual clauses. The same applies to Adobe Inc. (United States), which provides the PARETO@work brand typeface.

6. Cookies and browser storage

We don't use advertising, profiling or statistics cookies, and there is no cross-site tracking. That's why we don't ask you for cookie consent.

The site stores in your browser (local storage) only what it needs to work: the language you chose, whether you have already seen the invitation to the video tutorial, and a reminder of the alerts you created on that device (item and area; the email address is not stored in the browser). This data stays on your device and is not sent to us: the actual alert, with your email, is stored on our server (section 3.2). You can delete it in your browser settings.

7. Security

We use an encrypted connection (HTTPS). Access to the data is limited to those who need it for the service.

8. Your rights

You can ask us at any time:

Write to info@paretoservices.com. We reply within 30 days. We may ask you to prove that the data is yours, for example with a code sent to the alert's contact.

We don't make automated decisions about you: matching alerts against reported items only serves to send you a notification; ownership is checked by a person.

You also have the right to contact the supervisory authority:

9. Minors

People under 14 cannot create alerts or make collection requests on their own: a parent or guardian must do it.

10. Changes

If we change this policy, we publish the new version here with its date. If the change affects an active alert, we'll tell you in the next message.