PRIVACY POLICY

1. Data Controller

The Data Controller is the entity that operates the xeiron.it website. The Controller's full identifying details (legal name, registered address, VAT number) will be added to this page as soon as they are finalized. For any request regarding personal data, you can write to privacy@xeiron.it.

2. Personal data we process

Through the xeiron.it website we process exclusively:

• Data provided voluntarily through the contact form: name, email, company (optional), subject and message.
• Technical browsing data, collected in aggregated and anonymous form through our traffic analytics tool (see the Cookies section).

The site does not require registration or account creation, and does not process payments or financial transactions.

3. Purposes and legal bases

• Responding to requests sent through the contact form, based on the consent given by the data subject when submitting the form (art. 6.1.a GDPR).
• Analyzing site traffic in aggregated and anonymous form to understand usage and improve the site, based on the Controller's legitimate interest (art. 6.1.f GDPR).

4. Data retention

Data collected through the contact form is retained for as long as necessary to handle the request and any resulting relationship, then deleted or anonymized, unless otherwise required by law. Traffic analytics data is aggregated and does not allow individual visitors to be identified.

5. Recipients and data processors

To operate the site we rely on the following providers, who process data as data processors or independent controllers as applicable:

• Vercel Inc. — hosting and cloud infrastructure for publishing the site.
• Vercel Web Analytics — a traffic analytics tool free of profiling cookies, built into the same hosting infrastructure.

Personal data is never sold, shared or disclosed to third parties for marketing purposes.

6. International data transfers

Some of the providers listed in section 5 may process data outside the European Economic Area. In that case, transfers rely on adequate safeguards under the GDPR, such as the European Commission's Standard Contractual Clauses.

7. Your rights

As a data subject you have the right to access your personal data, request its correction or deletion, restrict its processing, object to processing and request data portability, under articles 15-22 of the GDPR. To exercise these rights, write to privacy@xeiron.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Cookies

xeiron.it uses a single technical cookie (xr_lang), used to remember the language you selected or that was detected during your visit, stored for up to one year. We do not use profiling cookies or third-party advertising cookies. Our traffic analytics tool (Vercel Web Analytics) works without cookies and collects data in aggregated, anonymous form, without identifying individual visitors.

As this is strictly a technical cookie, using the site does not require the prior consent otherwise required for profiling cookies (art. 122 of the Italian Privacy Code).

9. Changes

This notice may be updated over time, for example following regulatory changes or changes to the services we use. The most recent version is always available on this page, with the update date shown above.

10. Contact

For any question about this notice or about how we handle your personal data, write to privacy@xeiron.it.