Privacy Policy

What Data is collected, and why

This Website collects Cookies and Usage Data, by itself or through third parties, to deliver the Service, to measure traffic in aggregate, to answer enquiries sent through the contact form, to comply with legal obligations, and to protect its rights against malicious or fraudulent activity. What each service collects and on what legal basis is set out in “Detailed information on the processing of Personal Data” below.

Usage Data is collected automatically when you use this Website. Everything else is provided by you. Data marked as required in the contact form is needed to answer you; without it the enquiry cannot be handled. Any use of Cookies or other tracking tools is described in the Cookie Policy.

You are responsible for any third-party Personal Data you publish or share through this Website, and confirm that you have that third party's consent to provide it.

How and where the Data is processed

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data. Processing is carried out with computers and IT tools, following procedures strictly related to the purposes indicated. Besides the Owner, the Data may be accessible to the third-party providers listed below, appointed as Data Processors where required. The updated list of these parties may be requested from the Owner at any time.

The place of processing for each service is named in its entry below. Where a service processes Data outside the EU/EEA, the safeguard relied on is described in “Transfers of Data outside the EU/EEA”.

Retention time

Personal Data is kept only for as long as the purpose it was collected for requires: data collected to answer an enquiry until that exchange is concluded, and data collected for the Owner's legitimate interests for as long as those purposes need. The Owner may keep Data longer where you have consented and not withdrawn that consent, or where a legal obligation or an order from an authority requires it. Once the retention period expires the Data is deleted, and the rights of access, erasure, rectification and portability can no longer be enforced over it.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Analytics

  Matomo Analytics (Self-hosted)
  This Website uses a self-hosted, cookieless installation of Matomo Analytics to analyze and improve user experience. No cookies are stored on users' devices. IP addresses are anonymized, and data is processed in a privacy-friendly manner in accordance with GDPR.
  Personal Data processed: anonymized IP address, usage data, including anonymous interaction events (calls-to-action clicked, contact form started and submitted, case study navigation).
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly, aggregate traffic measurement). Matomo is cookieless and honours the browser's "Do Not Track" signal.
  Place of processing: European Union (the Website owner's own server).
  More info: Privacy Policy ↗.

• Forms submission

  This Website uses Web3Forms to handle contact form submissions and deliver messages to the Owner. The service processes the data entered in the form to send it as an email to the Owner. No cookies are used for this purpose.
  Personal Data processed: name, email address, message content, and selected area of support.
  Legal basis: Art. 6(1)(b) GDPR (steps taken at the User's request prior to a possible engagement) and Art. 6(1)(f) (legitimate interest in responding to enquiries).
  Place of processing: United States – Privacy Policy ↗. See "Transfers of Data outside the EU/EEA" below.

• Displaying content from external platforms

  This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

  YouTube video widget (Privacy Enhanced Mode) (Google LLC)

  YouTube is a video content visualization service provided by Google LLC that allows this Website to incorporate content of this kind on its pages. This widget is set up in a way that ensures that YouTube won't store information and cookies about Users on this Website unless they play the video.
  Personal Data processed: Trackers; Universally unique identifier (UUID); Usage Data.
  Legal basis: Art. 6(1)(a) GDPR (consent), obtained via the cookie banner before the embed loads.
  Place of processing: Ireland – Privacy Policy ↗

  Google Maps widget (Google LLC)

  Google Maps is a maps visualization service provided by Google LLC that allows this Website to incorporate content of this kind on its pages. This widget is loaded only after you give consent and click to load it; until then Google receives no data.
  Personal Data processed: Trackers; Usage Data; IP address; device and browser information.
  Legal basis: Art. 6(1)(a) GDPR (consent), obtained via the cookie banner before the map loads.
  Place of processing: Ireland / United States – Privacy Policy ↗. See "Transfers of Data outside the EU/EEA" below.

• Hosting and backend infrastructure

  This Website is hosted by Netsons S.r.l. (Italy). The host processes server log data, including IP addresses, as necessary to deliver the Website and to keep it operating and secure.
  Personal Data processed: IP address; Usage Data.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating and securing the Website).
  Place of processing: European Union (Italy).

Transfers of Data outside the EU/EEA

When you use the contact form, the data you submit is processed by Web3Forms in the United States. When you choose to load a Google Maps embed, Google (Ireland / United States) also receives data such as your IP address. The European Commission has not issued a general adequacy decision covering all transfers to the United States, and at the time of writing the Owner has not been able to confirm that Web3Forms is certified under the EU-US Data Privacy Framework or that it offers Standard Contractual Clauses.

These transfers therefore rely on the derogations in Art. 49 GDPR:

• for the contact form, Art. 49(1)(b) GDPR (the transfer is necessary to take steps at your request prior to a possible engagement) and, in the alternative, Art. 49(1)(a) (your explicit consent, given by submitting the form);
• for the Google Maps embed, Art. 49(1)(a) GDPR (your explicit consent, given via the cookie banner before the embed loads).

These transfers are occasional and limited to what is necessary for the purpose described. You can request more information from the Owner using the contact details in this document, and you can withdraw consent for the embeds at any time via "Privacy Choices" in the footer.

The rights of Users

You have the right to:

• Withdraw your consent at any time, where processing is based on consent.
• Object to processing of your Data carried out on a legal basis other than consent, by giving a ground related to your particular situation. Where Data is processed for direct marketing, you can object at any time without giving a reason.
• Access your Data: learn whether it is being processed, obtain disclosure about the processing, and obtain a copy.
• Verify and seek rectification of inaccurate Data.
• Restrict the processing of your Data in certain circumstances, in which case it will only be stored.
• Have your Personal Data deleted or otherwise removed, in certain circumstances.
• Receive your Data and have it transferred to another controller in a structured, commonly used, machine-readable format, where processing is automated and based on consent or on a contract.
• Lodge a complaint with a supervisory authority. The authority competent for the Owner is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany (lda.bayern.de ↗). You may also contact the supervisory authority of your habitual residence, place of work, or the place of the alleged infringement.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

Additional information

Legal action

Personal Data may be used by the Owner for legal purposes in Court or in the stages leading to possible legal action arising from improper use of this Website. The Owner may also be required to disclose Personal Data at the request of public authorities.

How “Do Not Track” requests are handled

The self-hosted Matomo analytics on this Website honours the browser's “Do Not Track” (DNT) signal: when DNT is enabled, no analytics data is collected. To determine whether any third-party services honour “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Owner may change this privacy policy at any time by publishing the new version on this page; the date of the last change is shown at the top and bottom of the document. Where a change affects processing carried out on the basis of your consent, the Owner will collect new consent where required.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Website) and the details about the path followed within the Website with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User's browser.

Tracker

Tracker indicates any technology - e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by accessing or storing information on the User’s device.

Legal information

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to this Website, if not stated otherwise within this document.