Privacy Policy

Privacy and Cookies Policy

Who we are

Our website address is: https:/aethic.ai/. This website and all products and services branded aethic.ai are owned by aethic.ai S.r.l., Registered Office: Viale Virgilio, 20, 74121, Taranto (TA) • VAT/Tax Code: 03399140734.

This disclosure:

Is intended for the website www.aethic.ai (hereinafter the “Site”), and not for other websites that may be consulted by the user via links;
Is an integral part of the Site and the services we offer;
Is made pursuant to Article 13 of the Regulation to those who interact with the web services of the Site.

Your personal data will be processed in accordance with the legislative provisions of the Regulation and the Privacy Code and the confidentiality obligations therein.

Therefore, the processing of your personal data will be based on the principles of fairness, lawfulness, transparency, limitation of purposes and storage, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability referred to in Article 5 of the Regulation.

Controller

The “Data Controller” is aethicai, a trademark owned by aethic.ai Srl, as identified above.

Purposes of processing and legal bases

The data you provide will be processed for the following purposes:

To enable navigation of the Site and the provision of requested services (e.g., contact request, “demo” or quote request, newsletter subscription, request for information or enrollment in training courses, request for documentation or permission to download it from the Site, reporting abuse, accessing the reserved area);
To respond to specific requests addressed to the Data Controller;
To comply with any obligations provided by current laws, regulations, or EU legislation, or to meet requests from authorities;
For statistical purposes, without it being possible to identify you;
To carry out direct marketing via email for products and services similar to those requested by you (including: demos, downloadable materials or documentation on the Site), unless you expressly refuse to receive such communications, which you can express when requesting services or on subsequent occasions by writing to: [email protected].

The legal basis for the processing of data for the purposes mentioned above points a. and b. is Article 6(1)(b) of the Regulation (processing necessary for the performance of a contract or for pre-contractual measures), as the processing is necessary for the provision of services or for responding to requests from the data subject. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services or respond to your requests.

For the purpose mentioned in point c., the processing is lawful under Article 6(1)(c) of the Regulation (processing necessary to comply with a legal obligation to which the data controller is subject).

For the purpose mentioned in point d., the processing can be freely carried out as it is not performed on personal data.

The processing of your Personal Data for the purpose described in point e. represents a legitimate processing under the current applicable legislation on the protection of personal data, which does not require your consent pursuant to Article 6(1)(f) of the Regulation (legitimate interest of the controller). You may object to the processing of your Personal Data for this purpose both when requesting products and services available on the Site and on subsequent occasions by contacting the Controller directly.

Processing methods

Processing is carried out using electronic and automated means. The data requested will be appropriate to the above purposes, processed in a manner relevant to them, and limited to them. Specific security measures are adopted to prevent data loss, unlawful or incorrect use, and unauthorized access. No automated decision-making processes, including profiling, as referred to in Articles 22(1) and 22(4) of EU Regulation 2016/679, are carried out within the processing.

Categories of data processed

Following navigation of the Site, please be informed that personal data may be processed, which may consist of an identifier such as name, an identification number, an online identifier, or one or more characteristic elements of your physical, physiological, psychological, economic, cultural, or social identity suitable for making the data subject identified or identifiable (hereinafter referred to as “Personal Data” only).

The Personal Data processed through the Site are as follows

Navigation Data

The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and computer environment. This data is used solely to obtain anonymous statistical information about the use of the site and to check its correct functioning, to enable the proper provision of services, for security reasons, and to ascertain liability in case of hypothetical computer crimes to the detriment of the Site or third parties; and is usually deleted after twelve months.

Data voluntarily provided by the user

In using certain Site services, there may be processing of Personal Data of third parties sent to the Controller by you. In relation to such cases, you act as an independent data controller, assuming all legal obligations and responsibilities. In this regard, you provide the broadest indemnity with respect to any disputes, claims, requests for compensation for damages from processing, etc. that may be received by the Controller from third parties whose Personal Data has been processed through your use of the Site’s functions in violation of applicable Personal Data protection laws. In any case, if you provide or otherwise process Personal Data of third parties in using the Site, you guarantee from now on – assuming all related responsibilities – that this particular processing is based on a suitable legal basis under Article 6 of the Regulation that legitimizes the processing of the data in question.

Cookies

No use is made of cookies during the navigation of the site for the transmission of personal information, nor are any persistent cookies of any kind used, i.e., systems for tracking users’ browsing behavior. The site uses technical cookies (navigation and session) and includes within it some services provided by third parties that generate cookies stored on the user’s PC. The use of session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable secure and efficient exploration of the site. The session cookies used on this site avoid the use of other potentially prejudicial computer techniques for the confidentiality of users’ browsing and do not allow the acquisition of identifying personal data of the user. The site uses third-party cookies for monitoring access to the site: Google Analytics. You can refuse your consent to accept cookies on your device by acting on the settings of the program used by you for browsing the Internet. Disabling cookies does not prevent navigation of the site.

Recipients or categories of recipients

Your Personal Data may be shared, for the purposes mentioned above, with:

Subjects who typically act as data processors, namely: i) individuals, companies, or professional firms that provide administrative and legal assistance and consultancy to the Controller in administrative and legal matters related to the provision of services; ii) subjects with whom it is necessary to interact for the provision of services (such as hosting providers, entities providing system administration assistance); iii) or subjects delegated to perform technical maintenance activities (including maintenance of network equipment and electronic communication networks, maintenance of computer applications and online service management software);
Subjects, entities, or authorities to whom it is mandatory to communicate your Personal Data pursuant to legal provisions or orders of authorities or, in case of abuse reports, to investigate complaints and identify the source of messages received from users;
Persons authorized by the Controller to process Personal Data necessary to perform activities strictly related to the provision of services, who have undertaken to maintain confidentiality or have an adequate legal obligation of confidentiality (e.g., employees of the Controller);
Commercial partners only if you have given specific consent in this regard. The identity of the subjects to whom the data are communicated may be requested at any time from the Data Controller (and/or from the Data Processor if appointed).

Transfer of personal data

The Controller does not intend to transfer your Personal Data outside the European Economic Area.

Retention

The data processed for the purposes of this notice will be kept by the Controller for at least the period of validity of the requested service (purposes referred to in points a. and b. above) or, in cases where this is provided for, within the statutory deadlines (purposes referred to in point c. above) or until your opposition to the processing (purposes referred to in point e. above) and until the time allowed by Italian law for the protection of its interests (art. 2946 c.c. and following) has elapsed, after which the data will be anonymized or encrypted.

Rights of the data subject

You may contact the Data Controller to assert your rights, as provided for in Articles 15 to 22 of EU Regulation 2016/679, which are set out below:

Right to request access to personal data from the data controller (Art. 15);
Right to request the correction of such data from the data controller (Art. 16);
Right to request the deletion of such data from the data controller (Art. 17);
Right to request the limitation of the processing concerning them from the data controller (Art. 18);
Right to data portability (Art. 20);
Right to object to their processing (Art. 21);
Right in relation to automated decision-making processes (Art. 22). The data subject also has the right to lodge a complaint with a supervisory authority.

If the Data Controller intends to further process personal data for a purpose other than that for which it was collected, before such further processing, the Data Subject will be provided with information regarding that different purpose and any further information necessary to ensure fair and transparent processing.