Privacy

This policy explains which personal data are processed when you visit aethcollective.com, why, on what legal basis, for how long, who receives them and what rights you have. It is given under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003), and includes the cookie policy.

1. Data controller

Villgrattner Schivari Benno, sole proprietorship trading as AETH. Collective, Bolzano (BZ), Italy. VAT no. IT03331120216, REA BZ-251202.

Email: info@aethcollective.com — certified email (PEC): benno.schivari@pec.it. No data protection officer has been appointed, as none is required for this activity; for any question about your data, write to the addresses above.

2. Data we process

• Technical data: when you open a page, your browser sends data such as IP address, date and time, requested page, browser type and operating system. These are needed to deliver the site and keep it secure.
• Data you send us: name, surname, email address and the content of your message, when you use the contact form or write to us by email.
• Spam protection: when you start filling in the contact form, Google reCAPTCHA is loaded and assesses, from data such as IP address, browser and interaction with the page, whether the message comes from a person.
• Usage data (only with your consent): pages viewed, approximate location, device and browser information and an online identifier, collected through Google Analytics.
• Marketing data (only with your consent): the fact that you visited the site and the pages viewed, linked to an online identifier and, if you use them, to your Facebook or Instagram account, collected through the Meta Pixel.

We do not process special categories of data (Art. 9 GDPR) and ask you not to include them in your messages.

3. Purposes and legal bases

• Delivering the site, its security and the prevention of abuse — legitimate interest (Art. 6(1)(f) GDPR) in a working and secure website.
• Protecting the contact form from spam and abuse with Google reCAPTCHA — legitimate interest (Art. 6(1)(f) GDPR) in receiving genuine enquiries; it is loaded only when you start using the form.
• Answering your requests and preparing quotes — steps taken at your request before entering into a contract (Art. 6(1)(b)) and, for general enquiries, our legitimate interest in replying (Art. 6(1)(f)).
• Recording your cookie choices — legal obligation to be able to demonstrate consent (Art. 6(1)(c) and Art. 7(1) GDPR).
• Statistics on the use of the site — your consent (Art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code).
• Measuring and targeting our advertising on Meta platforms — your consent (Art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code).
• Complying with legal obligations and defending our rights, where necessary (Art. 6(1)(c) and (f) GDPR).

Providing data through the contact form is optional, but without a name, an email address and a message we cannot reply. Refusing analytics or marketing cookies has no effect on your use of the site.

4. Cookies and similar technologies

Cookies are small text files that a website stores in your browser. This site uses one technical cookie of its own, which needs no consent, and — only if you accept them — analytics and marketing cookies set by Google and Meta. When you first visit, a banner lets you accept all, decline all or choose by category; declining is as easy as accepting, and closing the banner sets nothing but the technical cookie. Until you accept, Google Tag Manager, Google Analytics and the Meta Pixel are not loaded at all and no data is sent to Google or Meta for those purposes. The contact form’s spam protection (Google reCAPTCHA, a security measure that needs no consent) is loaded only when you start filling in the form.

Your choice is stored for 12 months, after which you are asked again; you are also asked again if the categories change. You can change or withdraw your choice at any time with the button at the end of this page; withdrawing deletes the Google and Meta cookies from your browser. You can also block or delete cookies in your browser settings.

Google and Meta may also read or set cookies on their own domains (for example facebook.com), as described in their policies: policies.google.com/privacy and facebook.com/privacy/policy.

5. Recipients and processors

Your data are not sold. They are processed by us and, on our behalf or as independent controllers, by the following providers:

• Vercel Inc. (USA) — hosting of the site and its server logs.
• Cloudflare, Inc. (USA) — domain name service and delivery of the videos; the video files are stored in the European Union.
• Resend, Inc. (USA) — delivery of the messages sent through the contact form.
• Google Ireland Limited — reCAPTCHA, spam protection of the contact form.
• Our email service providers — receiving and storing the emails you send us.
• Google Ireland Limited — Google Tag Manager and Google Analytics, with your consent.
• Meta Platforms Ireland Limited — Meta Pixel, with your consent. For the collection and transmission of data through the pixel, Meta and we are joint controllers (Art. 26 GDPR) under Meta's controller addendum; Meta is solely responsible for its further processing.
• Where required by law, public authorities; professionals such as our accountant, bound by confidentiality.

6. Transfers outside the European Union

Some of the providers above are based in the United States, or may transfer data there (Google LLC, Meta Platforms, Inc.). Such transfers take place on the basis of the European Commission's adequacy decision of 10 July 2023 for companies certified under the EU–US Data Privacy Framework, or otherwise of the standard contractual clauses adopted by the Commission (Art. 46 GDPR). You can request a copy of the safeguards by writing to us.

7. How long we keep data

• Technical logs: for the short periods set by the hosting and delivery providers for security purposes.
• Messages and contact data: as long as needed to handle your request and at most 24 months after the last exchange, unless a contract follows; in that case, for as long as the law requires us to keep contract and accounting records (10 years under Italian law).
• Cookie choices: 12 months.
• Google Analytics data: 14 months; cookies as shown in the table.
• Meta Pixel data: as shown in the table; Meta keeps data according to its own policy.

8. Your rights

Under Articles 15 to 22 GDPR you can ask us at any time for access to your data, their rectification or erasure, the restriction of processing and data portability, and you can object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting what happened before. To exercise your rights, write to info@aethcollective.com; we reply within one month.

You also have the right to lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it), or the authority of the EU country where you live or work.

9. Other information

• No automated decision-making that produces legal effects on you takes place. The marketing cookies are used to show advertising to groups of people on Meta platforms.
• The site is not directed at children under 14.
• Fonts are served from this site; no external font service is contacted.
• The link to Instagram is a plain link: no data is sent to Instagram unless you follow it, after which Instagram's own policy applies.
• We may update this policy when the site or the law changes; the date at the top shows the current version.