Privacy & Cookie Policy

Data controller

Aerodynamics S.r.l. — Viale Cassala 57, 20143 Milan, Italy · VAT IT10799400964 · REA MI-2558180 · Share capital €10,000 fully paid
Registered as an innovative startup in the Registro Imprese Innovative.
Privacy contact: privacy [at] aerodynamics [dot] cloud or the contact form.

Data Protection Officer (DPO): not appointed, as the conditions of Art. 37 GDPR do not apply. For any matter concerning personal data, write to the privacy contact above.

Categories of data processed

• Data submitted through forms (contact and job applications): full name, company, role, email, message content; for applications, also LinkedIn/portfolio and CV links.
• Technical submission data: the browser user agent, recorded with the form; the IP address is not stored with the form, only in pseudonymised form (a hash with a key that changes daily) to limit the number of submissions and prevent abuse.
• Usage data (statistics): collected through Google Analytics 4 only with your explicit consent (see Cookie Policy): pages visited, referral source, device type, with anonymized IP.
• Cookie consent log: for every choice made in the banner we record a random consent identifier (also stored in your browser), the choice expressed (accept, reject, closing with the X, custom preferences), date and time, notice version, language, page and browser user agent. We do not record the IP address.
• Infrastructure logs: generated by Firebase Hosting (Google) to serve the website.

Providing data through the forms is optional, but necessary to receive a reply. Browsing the site requires no data at all.

Job applications and special categories of data. CVs may contain special categories of data (Art. 9 GDPR, such as health data or membership of protected categories): please do not include them unless strictly necessary for the application. Under Art. 111-bis of Italian Legislative Decree 196/2003, no consent is required for processing the data contained in spontaneously submitted CVs; this page serves as the privacy notice.

Purposes and legal bases

• Responding to contact requests (strategy session, demo): pre-contractual measures taken at the data subject's request — Art. 6.1.b GDPR.
• Recruiting: pre-contractual measures at the data subject's request — Art. 6.1.b GDPR.
• Website usage statistics: consent — Art. 6.1.a GDPR, revocable at any time.
• Proof of consent to statistics cookies: compliance with a legal obligation — Art. 6.1.c GDPR, in connection with Art. 7.1 (the controller must be able to demonstrate consent).
• Security and abuse prevention (anti-bot filtering, technical logs): legitimate interest — Art. 6.1.f GDPR.

Methods, location and retention

Form data is transmitted encrypted (HTTPS) and stored on Google Cloud (Firestore), not publicly accessible, with access restricted to the controller's authorized personnel. The website is served through Firebase Hosting (Google Ireland Ltd / Google LLC). Any transfers outside the EU take place under the EU-US Data Privacy Framework adequacy decision and, where applicable, Standard Contractual Clauses.

Retention periods:

• Contact requests: up to 24 months from the last interaction, unless a contract follows.
• Job applications: up to 12 months from receipt, then deleted unless consent is renewed.
• Technical submission data: the user agent is kept and deleted with the form (24 months for contacts, 12 for applications); the IP hash used to limit submissions is deleted after 24 hours.
• Statistical data (GA4): 2 months, the shortest period configurable in Google Analytics 4; aggregated reports contain no identifying data.
• Acknowledgement of this notice: recorded with each form submission, together with the notice version read.
• Statistics cookie choice: stored in the user's browser (12 months if accepted, 6 if rejected); the server-side consent log is kept for 24 months from the recording of each choice.

Third-party services

• Google Analytics 4 (Google Ireland Ltd) — statistics, active only after consent, with anonymized IP and no advertising features. Google's privacy policy · Opt-out add-on.
• Firebase Hosting, Cloud Functions and Firestore (Google) — serving the site and receiving form submissions. Firebase privacy and security.
• Visage Sense interactive demo — runs entirely in your browser: webcam images are never sent to our servers.
• Links to external sites (LinkedIn, Desideroo) are governed by their respective privacy policies once you leave this site.

Your rights

Under Articles 15-22 GDPR you may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw any consent given, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7.3; for statistics: via the "Cookie preferences" link in the footer).

The controller notifies each recipient to whom the data has been disclosed of any rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort (Art. 19 GDPR).

Automated decision-making: no automated decision-making, including profiling, producing legal or similarly significant effects is carried out on data collected through this site (Art. 22 GDPR).

Send requests to the privacy contact above. We reply within 1 month of receipt; for complex or numerous requests this may be extended by 2 further months, in which case we inform you, with reasons, within the first month (Art. 12.3 GDPR).

Complaints: you may lodge a complaint with the supervisory authority of the Member State where you habitually reside, work or where the alleged infringement took place (Art. 77 GDPR); in Italy this is the Garante per la protezione dei dati personali, following the procedure on its complaint page.

Cookie Policy

This website uses no profiling cookies and sets no cookies before consent. On first visit, a banner lets you accept or reject statistics cookies with equal prominence. Closing the banner with the X counts as rejecting: the site stays fully usable and no statistics cookie is set. Every choice is recorded in the consent log; you can change your choice at any time via the "Cookie preferences" link in the footer, which also offers granular per-category control.

Statistics cookies (_ga, _ga_*) are set only after consent and are removed if consent is withdrawn.

Changes to this notice

Substantial changes will be published on this page with an updated version date; where changes affect consent-based processing, consent will be requested again.