Privacy & Cookie Policy

Data controller

Aerodynamics S.r.l. — Viale Cassala 57, 20143 Milan, Italy · VAT IT10799400964 · REA MI-2558180 · Share capital €10,000 fully paid
Registered as an innovative startup in the Registro Imprese Innovative.
Privacy contact: privacy@aerodynamics.cloud or the contact form.

Data Protection Officer (DPO): not appointed, as the conditions of Art. 37 GDPR do not apply.

Data processed

• Data submitted through forms (contact and job applications): identification and contact data, professional data, message content; for applications, the profile and CV references provided by the candidate.
• Technical browsing and connection data (for example IP address, browser and device type, date and time of requests), needed to operate and secure the website.
• Usage statistics, collected only with consent (see Cookie Policy) in pseudonymised form.
• Cookie choice data (choice expressed, date and time, notice version), kept as proof of consent.

Providing data through the forms is optional, but necessary to receive a reply. Anyone submitting third-party data warrants they are entitled to do so. The forms are not intended for people under 18.

Job applications. Please do not include special categories of data (Art. 9 GDPR, such as health data) in your CV unless strictly necessary. Under Art. 111-bis of Italian Legislative Decree 196/2003, no consent is required for spontaneously submitted CVs; this page serves as the privacy notice.

Purposes and legal bases

• Responding to contact and demo requests: pre-contractual measures at the data subject's request — Art. 6.1.b GDPR.
• Recruiting: pre-contractual measures at the data subject's request — Art. 6.1.b GDPR.
• Website usage statistics: consent — Art. 6.1.a GDPR, revocable at any time.
• Proof of consents collected: legal obligation — Art. 6.1.c GDPR, in connection with Art. 7.1.
• Website security and prevention of abuse and fraud: the controller's legitimate interest in protecting its systems and the data processed — Art. 6.1.f GDPR.
• Establishment, exercise or defence of legal claims: legitimate interest — Art. 6.1.f GDPR.

Recipients and transfers

Data is processed by the controller's authorised personnel and by technology service providers (hosting, cloud infrastructure, analytics) acting as processors under Art. 28 GDPR, bound by a written agreement. The current list of processors is available on request from the privacy contact. Data is not disseminated or sold to third parties for their own purposes.

Form data is stored in the European Union. Any transfers outside the EU by providers rely on an adequacy decision (including the EU-US Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission.

Security

The controller applies technical and organisational measures appropriate to the risk (Art. 32 GDPR), including encrypted communications and access control. For security reasons, the details of these measures are not made public.

Retention

• Contact requests: up to 24 months from the last interaction, unless a contract follows.
• Job applications: up to 12 months from receipt.
• Technical data attached to form submissions: for the same period as the form it belongs to.
• Statistical data: 2 months.
• Proof of consent: 24 months from each choice.

Longer periods may apply where required by law or needed to establish, exercise or defend legal claims, limited to the data necessary for that purpose. At the end of the period data is deleted or anonymised.

Your rights

Under Articles 15-22 GDPR you may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time without affecting prior lawful processing (Art. 7.3; for statistics: via the "Cookie preferences" link in the footer).

The controller notifies recipients of any rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort (Art. 19 GDPR). No automated decision-making, including profiling, producing legal or similarly significant effects is carried out (Art. 22 GDPR).

Send requests to the privacy contact. We reply within 1 month, extendable by 2 months for complex or numerous requests, with reasons given within the first month (Art. 12.3). Where we have reasonable doubts about the requester's identity, we may ask for additional information to confirm it (Art. 12.6). For manifestly unfounded or excessive requests, in particular repetitive ones, the controller may charge a reasonable fee or refuse to act (Art. 12.5).

Complaints: you may lodge a complaint with the supervisory authority of the Member State where you habitually reside, work or where the alleged infringement took place (Art. 77 GDPR); in Italy this is the Garante per la protezione dei dati personali, following the procedure on its complaint page.

Cookie Policy

This website uses no profiling cookies and no third-party tools before consent. On first visit a banner lets you accept or reject statistics cookies with equal prominence; closing it with the X counts as rejecting and the site stays fully usable. You can change your choice at any time via the "Cookie preferences" link in the footer.

Provider notice: Google's privacy policy · opt-out add-on. Statistics cookies are removed if consent is withdrawn. You can also manage or delete cookies in your browser settings.

Demo pages and links to external sites (for example LinkedIn or our product sites) are governed by their operators' notices, for which the controller is not responsible.

Changes to this notice

The controller may update this notice; the version in force is always the one published on this page, with its date. Where changes affect consent-based processing, consent will be requested again.