Privacy Policy
Generazione Ai S.r.l. processes your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003. This notice explains how we collect, use and protect your information.
Last revision · May 2025Base Notice
Art. 13 GDPR (EU) 2016/679 · D.Lgs. 196/2003, Communications requested by the user
Data Controller
- Controller
- Generazione Ai S.r.l.
- Registered office
- Piazza dei Martiri, in Vico S. Maria a Cappella Vecchia 8, Bldg. B – Stair B – Int. 17, 80121 Naples (NA), Italy
- VAT / Tax ID
- IT10314191213
- hello@generazioneai.it
- Tel.
- +39 081 18 08 65 79
- DPO
- Not appointed (not mandatory given company size). For privacy matters: hello@generazioneai.it
Purposes and legal basis of processing
Personal data provided by the data subject will be processed exclusively for the following purposes:
| Purpose | Legal basis (art. 6 GDPR) | Retention |
|---|---|---|
| Response to contact, information and quotation requests | Art. 6(1)(b) – pre-contractual measures upon request | 12 months from end of contact |
| Performance of contractual obligations | Art. 6(1)(b) – contract execution | 10 years from end of relationship (tax/civil obligations) |
| Compliance with legal obligations (invoicing, accounting) | Art. 6(1)(c) – legal obligation | 10 years (art. 2220 Italian Civil Code) |
| Legitimate interest of the Controller (IT security, fraud prevention) | Art. 6(1)(f) – legitimate interest | 24 months |
Data processed
The Controller will process the following categories of data:
- Identification data
- first name, last name, job title/role
- Contact data
- email address, phone number
- Represented company data
- company name, VAT, sector (if applicable)
- Content of communications
- messages sent by the data subject
- Technical navigation data
- IP address, technical cookies, access logs
No special categories of data (art. 9 GDPR) nor data relating to criminal convictions (art. 10 GDPR) are collected.
Data recipients
Data may be communicated to:
- Employees and collaborators of the Controller, authorised to process the data
- Providers of IT, hosting and cloud services (e.g. email providers, CRM) acting as processors under art. 28 GDPR
- Legal, tax and accounting consultants strictly as necessary
- Public and judicial authorities, in cases provided by law
Data is not sold to third parties nor transferred for their own commercial purposes.
Transfer to third countries
Data is processed mainly within the European Union. Where cloud services with servers in third countries are used (e.g. USA), transfer occurs only to entities providing adequate safeguards under arts. 44-49 GDPR (standard contractual clauses, adequacy decisions).
Rights of the data subject
The data subject has the right, under arts. 15-22 GDPR, to:
- Access
- to data concerning them (art. 15)
- Rectification
- of inaccurate data (art. 16)
- Erasure
- except for retention obligations (art. 17)
- Restriction
- of processing (art. 18)
- Portability
- of data (art. 20)
- Objection
- to processing based on legitimate interest (art. 21)
- Consent withdrawal
- where given, without retroactive effect (art. 7(3))
- Complaint to the Authority
- Italian Data Protection Authority (www.garanteprivacy.it)
Requests can be sent to hello@generazioneai.it. The Controller will reply within 30 days, extendable by a further 60 days in particularly complex cases.
Nature of data provision and consequences of refusal
Providing data for the purposes in section 2 is voluntary but necessary to act on the user's request. Failure to provide data makes it impossible to deliver the requested service or information.
Automated decision-making
No automated decision-making, including profiling under art. 22 GDPR, is carried out within the purposes described in this notice.
Extended Notice
Direct Marketing, Newsletter and Profiling, supplements Part A
Additional purposes and legal bases
With the explicit and separate consent of the data subject (art. 6(1)(a) GDPR), data may be processed for the following additional purposes:
| Cons. | Purpose | Description | Retention |
|---|---|---|---|
| B1 | Direct Marketing (traditional channels) | Sending commercial communications, offers, promotions and updates on products and services via email, phone and/or postal mail. | Until consent withdrawal, max 24 months |
| B2 | Newsletter & digital communications | Periodic newsletter, updates on events, webinars, educational resources and industry news via email or digital messaging. | Until consent withdrawal, max 24 months |
| B3 | Commercial profiling | Analysis of preferences, browsing behaviour and interaction with communications to personalise offers and improve message relevance. | 12 months from last interaction |
Processing methods for marketing and profiling
- Processing takes place using electronic and non-electronic tools, in a secure and confidential manner.
- For newsletter activities an email marketing platform is used (e.g. Mailchimp, Brevo or equivalent) configured as a processor under art. 28 GDPR.
- Profiling is performed in aggregated and/or individual form based on behavioural data (email opens, clicks, site navigation), without automated decisions producing significant legal effects.
- No profiling data is transferred to third parties for their own advertising purposes.
Cookies and tracking technologies
The website generazioneai.it uses technical cookies (necessary for operation) and, subject to consent, analytical and profiling cookies. For details refer to the Cookie Policy available on the site. Consent to profiling cookies is independent of this form.
Specific marketing rights
The data subject has the right to:
- Object at any time to processing for direct marketing purposes (art. 21(2) GDPR), including by withdrawing individual purposes without affecting the others.
- Unsubscribe from the newsletter via the unsubscribe link present in every communication.
- Request deletion of the behavioural profile built through profiling.
- Request the list of data processed for profiling purposes.
To exercise these rights: hello@generazioneai.it, reply guaranteed within 30 days.
Withdrawal of consent
Consent to purposes B1, B2 and B3 can be freely withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal (art. 7(3) GDPR). Withdrawal can be exercised by:
- Sending an email to hello@generazioneai.it with subject "Marketing consent withdrawal"
- Newsletter
- Clicking the unsubscribe link at the bottom of every email/newsletter received
- Phone
- Calling +39 081 18 08 65 79
Updates to this notice
The Controller reserves the right to update this notice. In case of substantial changes, the data subject will be informed via email and/or by notice on the website. The date of the last revision is indicated at the bottom of the document.