Privacy & Cookie Policy

Data controller

Aerodynamics S.r.l. — Viale Cassala 57, 20143 Milan, Italy · VAT IT10799400964 · REA MI-2558180 · Share capital €10,000 fully paid
Registered as an innovative startup in the Registro Imprese Innovative.
Contact for exercising your rights: info@aerodynamics.cloud or the contact form.

Categories of data processed

• Data submitted through forms (contact and job applications): full name, company, role, email, message content; for applications, also LinkedIn/portfolio and CV links.
• Technical submission data: IP address and user agent, recorded with each form submission for security and abuse prevention.
• Usage data (statistics): collected through Google Analytics 4 only with your explicit consent (see Cookie Policy): pages visited, referral source, device type, with anonymized IP.
• Infrastructure logs: generated by Firebase Hosting (Google) to serve the website.

Providing data through the forms is optional, but necessary to receive a reply. Browsing the site requires no data at all.

Purposes and legal bases

• Responding to contact requests (strategy session, demo): pre-contractual measures taken at the data subject's request — Art. 6.1.b GDPR.
• Recruiting: pre-contractual measures at the data subject's request — Art. 6.1.b GDPR.
• Website usage statistics: consent — Art. 6.1.a GDPR, revocable at any time.
• Security and abuse prevention (anti-bot filtering, technical logs): legitimate interest — Art. 6.1.f GDPR.

Methods, location and retention

Form data is transmitted encrypted (HTTPS) and stored on Google Cloud (Firestore), not publicly accessible, with access restricted to the controller's authorized personnel. The website is served through Firebase Hosting (Google Ireland Ltd / Google LLC). Any transfers outside the EU take place under the EU-US Data Privacy Framework adequacy decision and, where applicable, Standard Contractual Clauses.

Retention periods:

• Contact requests: up to 24 months from the last interaction, unless a contract follows.
• Job applications: up to 12 months from receipt, then deleted unless consent is renewed.
• Statistical data (GA4): retained by Google Analytics for the shortest configurable period; aggregated reports contain no identifying data.
• Consent records: stored with each form submission as proof under Art. 7 GDPR.

Third-party services

• Google Analytics 4 (Google Ireland Ltd) — statistics, active only after consent, with anonymized IP and no advertising features. Google's privacy policy · Opt-out add-on.
• Firebase Hosting, Cloud Functions and Firestore (Google) — serving the site and receiving form submissions. Firebase privacy and security.
• Visage Sense interactive demo — runs entirely in your browser: webcam images are never sent to our servers.
• Links to external sites (LinkedIn, Desideroo) are governed by their respective privacy policies once you leave this site.

Your rights

Under Articles 15-22 GDPR you may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw any consent given (for statistics: via the "Cookie preferences" link in the footer). Requests go to the controller's contacts above; we reply within 30 days. You may also lodge a complaint with the Italian Data Protection Authority (Garante) or your local supervisory authority.

Cookie Policy

This website uses no profiling cookies and sets no cookies before consent. On first visit, a banner lets you accept or reject statistics cookies with equal prominence; you can change your choice at any time via the "Cookie preferences" link in the footer, which also offers granular per-category control.

Statistics cookies (_ga, _ga_*) are set only after consent and are removed if consent is withdrawn.

Changes to this notice

Substantial changes will be published on this page with an updated version date; where changes affect consent-based processing, consent will be requested again.