Privacy Policy
Privacy Policy
Last updated: February 16, 2026
This policy describes how AITAKY SRL processes personal data of users who visit the website www.aitaky.com (hereinafter, the "Site"), in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The data controller is:
AITAKY SRL
Via Germania, 7 int. 11 — 35010 Vigonza (PD), Italia
P.IVA / VAT IT05694750281
As of the current date, no Data Protection Officer (DPO) has been appointed, as the mandatory requirements under Art. 37 of the GDPR do not apply. For any requests regarding your personal data, you may contact the Controller directly at privacy@aitaky.com.
2. Types of data collected
2.1 Data voluntarily provided by the user
When you fill out the contact form on the Site, we collect the following data:
- Full name (required)
- Company (required)
- Job title (optional)
- Business email (required)
- Phone number (optional)
- Company size (optional)
- Systems in use (optional)
- Free-text message (optional)
When you fill out the partnership request form, we collect:
Name, company, type (software vendor / system integrator / IT consultant / other), software sold or supported, email, phone
2.2 Data collected automatically (browsing data)
During navigation on the Site, certain technical data is collected automatically:
- IP address (anonymized where possible)
- Browser type and operating system
- Pages visited, visit duration, referring page
- Date and time of access
- Cookie identifiers (see Cookie Policy section)
This data is collected through the following third-party tools:
- Google Analytics 4
- Meta Pixel (Facebook)
- LinkedIn Insight Tag
3. Purposes and legal basis for processing
| Purpose | Legal basis | Data processed |
|---|---|---|
| Responding to requests submitted via the contact form | Art. 6.1.b GDPR — Performance of pre-contractual measures at the request of the data subject | Name, company, email, phone, title, message |
| Managing partnership requests | Art. 6.1.b GDPR — Performance of pre-contractual measures | Name, company, type, software, email, phone |
| Statistical analysis of web traffic and Site improvement | Art. 6.1.a GDPR — Consent (via cookie banner) | Browsing data, analytics cookies |
| Remarketing and personalized advertising | Art. 6.1.a GDPR — Consent (via cookie banner) | Browsing data, profiling cookies |
| Sending commercial communications and newsletters | Art. 6.1.a GDPR — Explicit consent | |
| Compliance with legal obligations (tax, accounting) | Art. 6.1.c GDPR — Legal obligation | Data necessary for invoicing |
| Protection of the controller's rights (e.g., legal proceedings) | Art. 6.1.f GDPR — Legitimate interest | Data relevant to the dispute |
Consent for analytics and profiling cookies is collected via the cookie banner upon first visit to the Site. Consent for commercial communications is collected via a specific checkbox in the form, separate from consent for processing data to handle the request. Users may withdraw consent at any time.
4. Processing methods
Personal data is processed using electronic tools and, to a limited extent for archiving purposes, on paper. Processing is carried out using organizational and logical methods strictly related to the purposes indicated above, with the adoption of appropriate technical and organizational security measures to prevent data loss, unlawful or improper use, and unauthorized access, in accordance with the GDPR.
Providing data marked as required in the contact form is necessary to process the request. Failure to provide such data makes it impossible to process the request. Providing optional data is voluntary and failure to do so does not affect the ability to receive a response.
5. Data recipients
Personal data may be shared with the following categories of recipients:
5.1 Service providers (Data Processors under Art. 28 GDPR)
| Provider | Service | Country | Privacy policy |
|---|---|---|---|
| Google LLC | Google Analytics 4 — web traffic analysis | USA | Privacy policy |
| Meta Platforms Inc. | Meta Pixel — remarketing and conversion analysis | USA | Privacy policy |
| LinkedIn Corporation | LinkedIn Insight Tag — remarketing and conversion analysis | USA | Privacy policy |
| Amazon Web Services (AWS) | Site hosting | USA (EU Frankfurt region) | Privacy policy |
| Google LLC (Google Workspace) | Business email management | USA | Privacy policy |
5.2 Other recipients
- Legal and tax advisors, to the extent necessary for compliance with legal obligations
- Public authorities, where required by law
Personal data will not be disclosed or transferred to third parties for their own purposes without your explicit consent.
6. Data transfers outside the EU
Some of the service providers listed above (Google, Meta, LinkedIn, Amazon Web Services) are based in the United States. Data transfers to the USA take place on the basis of the EU-US Data Privacy Framework, to the extent that providers are certified under that framework, or on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission. Amazon Web Services uses the EU (Frankfurt) region as the primary data center for the Site; browsing data is therefore stored within the European Union, except where indicated sub-processors are involved.
For more information on transfers and safeguards, contact us at privacy@aitaky.com.
7. Data retention periods
| Data type | Retention period |
|---|---|
| Contact form data | 24 months from receipt of request, unless a contractual relationship is established |
| Partnership form data | 24 months from receipt of request |
| Browsing data (analytics) | Per the respective tool policies (Google Analytics: 14 months; Meta: 180 days; LinkedIn: 180 days) |
| Technical cookies | Session duration |
| Commercial communications data | Until consent is withdrawn |
| Data for legal obligations | Per applicable legal requirements (10 years for tax obligations) |
After the retention period, data will be deleted or irreversibly anonymized.
8. Data subject rights
Under Articles 15-22 of the GDPR, you have the right to:
- Access
- obtain confirmation of the existence of processing of your personal data and access your data
- Rectification
- obtain correction of inaccurate personal data or completion of incomplete data
- Erasure ("right to be forgotten")
- obtain deletion of your data in the cases provided by the GDPR
- Restriction of processing
- obtain restriction of processing in the cases provided by the GDPR
- Data portability
- receive your data in a structured, commonly used, machine-readable format and transmit it to another controller
- Objection
- object to processing of your data on grounds relating to your particular situation
- Withdrawal of consent
- withdraw consent at any time, without affecting the lawfulness of processing based on consent given prior to withdrawal
To exercise your rights, contact us at:
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):
- Website: www.garanteprivacy.it
- Email: garante@gpdp.it
9. Changes to this policy
The Controller reserves the right to modify this policy at any time by publishing the updated version on the Site. Changes take effect from the date of publication. We recommend periodically reviewing this page for the latest version.
10. How to contact us
For any questions about this policy or the processing of your personal data: