HermesFlows
BlogITSign inBook a call

Privacy Policy

Last updated: May 2026

1. Data Controller

IveMind Società Cooperativa Sociale
Via Werner von Siemens 23, 39100 Bolzano (BZ), Italy
VAT: IT03138990217
Email: [email protected]
Certified mail (PEC): [email protected]

2. Data Collected

We collect only the data strictly necessary to respond to your requests and to deliver our services:

  • First and last name
  • Email address
  • Message / request
  • Technical browsing data (essential cookies, IP address, user-agent)

3. Purpose of Processing

Your data is used exclusively to:

  • Respond to your information requests
  • Provide quotes and commercial proposals
  • Comply with legal obligations
  • Improve the user experience of the site and platform

4. Legal Basis

Processing is based on:

  • Your explicit consent (for analytics/marketing cookies)
  • Pre-contractual measures (for information requests and quotes)
  • Legitimate interest (for site security and abuse prevention)

5. Data Retention

Personal data is kept for as long as necessary to deliver the requested services and in any case for no more than 24 months from the last interaction, unless required by law. Browsing data collected via analytics is retained according to the provider's policy (see third-party providers section).

6. Data Sharing

Your data is never sold or transferred to third parties for marketing purposes. It may be shared only with:

  • Essential service providers (hosting, transactional email, analytics)
  • Competent authorities, when required by law

Third-party providers

We use the following third-party services:

Amazon Web Services (AWS) — Amazon Web Services EMEA SARL (Luxembourg) — infrastructure: Amazon Web Services, Inc. (USA)
  • Purpose of Processing: Application hosting, database, data processing
  • Data Collected: Platform data, browsing data
  • Legal Basis: Standard Contractual Clauses (SCC) for any extra-EU transfer. EU data center (Frankfurt, eu-central-1)
  • Privacy Policy: https://aws.amazon.com/privacy/
Amazon Simple Email Service (SES) — Amazon Web Services EMEA SARL (Luxembourg)
  • Purpose of Processing: Transactional email delivery (contact form, notifications)
  • Data Collected: Sender email address, message content
  • Legal Basis: Standard Contractual Clauses (SCC) for any extra-EU transfer. EU data center (Frankfurt)
  • Privacy Policy: https://aws.amazon.com/privacy/
Google Analytics 4 — Google Ireland Limited (Ireland) — infrastructure: Google LLC (USA)
  • Purpose of Processing: Aggregated statistical analysis of website traffic (loaded only after consent)
  • Data Collected: Pages visited, time on page, device, approximate location (city/region), anonymous client identifier
  • Legal Basis: Consent (art. 6.1.a GDPR). Standard Contractual Clauses (SCC) for extra-EU transfer. Google Consent Mode v2 enabled.
  • Privacy Policy: https://policies.google.com/privacy

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request rectification or erasure
  • Object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, contact us at: [email protected]

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Cookie Policy

We use the following cookie categories:

Essential cookies (necessary)

  • cookie-consent: stores your cookie preference (365 days)

Analytics cookies (with consent)

We use Google Analytics 4 to collect aggregated data about site usage. These cookies are installed only if you accept via the banner. Google Consent Mode v2 ensures that, without consent, no persistent identifier is stored.

  • _ga: anonymous client identifier for Google Analytics (2 years)
  • _ga_*: keeps session state (2 years)

You can manage your cookie preferences at any time by clicking "Cookie Settings" in the site footer.

9. Security

We adopt appropriate security measures to protect your data against unauthorized access, alteration, disclosure or destruction. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256), hosted on EU servers (AWS Frankfurt) with multi-tenant isolation.

10. Automated Decisions

We do not perform any fully automated decision-making nor profiling activity producing legal effects on your personal data.

11. Policy Changes

We reserve the right to modify this privacy policy. Changes will be published on this page with the new update date.

12. Contacts

For questions about the privacy policy or data processing:
Email: [email protected]
Mail: IveMind SCS, Via Werner von Siemens 23, 39100 Bolzano (BZ), Italy