Privacy Policy
Information under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") · Last updated: [06/11/2026]
1. Data controller
Demantoide Servizi S.r.l.,Via Giovanni Battista Pergolesi n. 8,, Milan, Italy, VAT no. 12523800964. Contact: wenxuan.liao@demantoide-it.com. We have not appointed a Data Protection Officer as it is not required for our activities.
2. What data we process, why, and on what legal basis
a) Browsing the site
Technical data (IP address, browser type, pages requested, date and time) processed by our hosting provider to deliver the site and protect it from abuse. Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).
b) Contact form and email enquiries
Name, email, company, role, service of interest, region and message, to answer your enquiry and, if you ask, prepare a quote. Legal basis: pre-contractual steps at your request (Art. 6(1)(b)) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Fields marked * are needed to reply; the others are optional.
c) Job applications (Careers page)
If you send us your CV, we process it to assess your application. Legal basis: pre-contractual steps at your request (Art. 6(1)(b)). Please do not include special-category data (e.g. health) that is not needed.
d) Statistics and marketing via cookies
Only with your consent: aggregate usage statistics (Google Analytics 4) and measurement of LinkedIn campaigns . Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003). Details in the Cookie Policy.
e) Consent log
Date and time, policy version, cookie choices and language, without IP address, to prove that consent was validly collected. Legal basis: legal obligation (Arts. 6(1)(c) and 7(1) GDPR).
3. Who receives the data
Data is processed by our authorised staff and by the following providers, acting as processors (Art. 28 GDPR) or as independent controllers:
Framer B.V. (the Netherlands) – website hosting and contact form; uses Amazon Web Services.
Cloudflare, Inc. – cookie banner files and consent log.
Google Ireland Limited – Google Analytics 4, only with consent.
LinkedIn Ireland Unlimited Company – LinkedIn Insight Tag, only with consent.
wenxuan.liao@demantoide-it.com– receiving and handling email.
Advisers (e.g. accountant, lawyer), only where needed.
We do not sell or publish your data.
4. Transfers outside the EU
Some providers (e.g. Google, Cloudflare, LinkedIn, Amazon Web Services) may process data in the United States. Transfers rely on the EU-US Data Privacy Framework adequacy decision (10 July 2023) for certified recipients, or on the European Commission's Standard Contractual Clauses.
5. How long we keep data
Form and email enquiries: [24 months] from the last contact, unless a contract follows (then as required by law, e.g. 10 years for tax records).
Job applications: [12 months] from receipt.
Google Analytics 4 statistics: 2 months.
Consent log: [24 months].
Hosting technical logs: per the provider's policy, usually days or weeks.
6. Your rights
You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR). You can withdraw cookie consent at any time via the "Cookie settings" link. Write to [privacy@…]. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
7. Automated decisions
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
8. Changes
We may update this notice. The date of the last update is shown at the top.
Privacy Policy
Information under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") · Last updated: [06/11/2026]
1. Data controller
Demantoide Servizi S.r.l.,Via Giovanni Battista Pergolesi n. 8,, Milan, Italy, VAT no. 12523800964. Contact: wenxuan.liao@demantoide-it.com. We have not appointed a Data Protection Officer as it is not required for our activities.
2. What data we process, why, and on what legal basis
a) Browsing the site
Technical data (IP address, browser type, pages requested, date and time) processed by our hosting provider to deliver the site and protect it from abuse. Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).
b) Contact form and email enquiries
Name, email, company, role, service of interest, region and message, to answer your enquiry and, if you ask, prepare a quote. Legal basis: pre-contractual steps at your request (Art. 6(1)(b)) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Fields marked * are needed to reply; the others are optional.
c) Job applications (Careers page)
If you send us your CV, we process it to assess your application. Legal basis: pre-contractual steps at your request (Art. 6(1)(b)). Please do not include special-category data (e.g. health) that is not needed.
d) Statistics and marketing via cookies
Only with your consent: aggregate usage statistics (Google Analytics 4) and measurement of LinkedIn campaigns . Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003). Details in the Cookie Policy.
e) Consent log
Date and time, policy version, cookie choices and language, without IP address, to prove that consent was validly collected. Legal basis: legal obligation (Arts. 6(1)(c) and 7(1) GDPR).
3. Who receives the data
Data is processed by our authorised staff and by the following providers, acting as processors (Art. 28 GDPR) or as independent controllers:
Framer B.V. (the Netherlands) – website hosting and contact form; uses Amazon Web Services.
Cloudflare, Inc. – cookie banner files and consent log.
Google Ireland Limited – Google Analytics 4, only with consent.
LinkedIn Ireland Unlimited Company – LinkedIn Insight Tag, only with consent.
wenxuan.liao@demantoide-it.com– receiving and handling email.
Advisers (e.g. accountant, lawyer), only where needed.
We do not sell or publish your data.
4. Transfers outside the EU
Some providers (e.g. Google, Cloudflare, LinkedIn, Amazon Web Services) may process data in the United States. Transfers rely on the EU-US Data Privacy Framework adequacy decision (10 July 2023) for certified recipients, or on the European Commission's Standard Contractual Clauses.
5. How long we keep data
Form and email enquiries: [24 months] from the last contact, unless a contract follows (then as required by law, e.g. 10 years for tax records).
Job applications: [12 months] from receipt.
Google Analytics 4 statistics: 2 months.
Consent log: [24 months].
Hosting technical logs: per the provider's policy, usually days or weeks.
6. Your rights
You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR). You can withdraw cookie consent at any time via the "Cookie settings" link. Write to [privacy@…]. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
7. Automated decisions
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
8. Changes
We may update this notice. The date of the last update is shown at the top.