Privacy & Cookie Policy

1. Data Controller

The Data Controller for personal data collected through this website is:
Francesco De Sario (Athena AI)
Registered office: Bologna, Italy
VAT number: 03819481205
Contact email: francesco.desario@athena-aisolutions.com

2. Zero cookies, zero tracking

This site is engineered around the strictest interpretation of your privacy.
In line with the ePrivacy Directive and the guidance of the Italian Data Protection Authority (resolution no. 231 of 10 June 2021), this website uses no cookies — technical, analytical, or profiling — and runs no user tracking (no Google Analytics, no Facebook Pixel, no equivalent). Fonts are hosted on our own servers so your IP address is never transmitted to third-party providers such as Google Fonts.

As a result, we do not present a cookie consent banner. We simply do not collect cookies.

3. Categories of data and legal basis

We process personal data only when you voluntarily fill in and submit one of the contact forms on the site (for example on the Contact page or the assessment request).

• Data collected: name, email, message or notes on your company’s situation, and any additional data you voluntarily include in the body of the message.
• Purpose: responding to your inquiry, assessing your situation, and proposing an assessment or advisory engagement.
• Legal basis: execution of pre-contractual measures taken at your request (Article 6(1)(b) GDPR). Consent is expressed by ticking the appropriate box in the form.

4. Recipients and data processors

Your data will never be sold, exchanged, or disclosed to third parties. To operate the website and handle inbound requests, we rely on the following providers acting as data processors:

• Vercel Inc.: hosting of the website and infrastructure (including standard temporary technical logs for security).
• Formspree Inc.: intake and technical handling of messages submitted through the site’s forms.

5. Transfers outside the EU

Some of our processors (Vercel, Formspree) are headquartered in the United States. Transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission or by the processors’ certification under the EU-US Data Privacy Framework.

6. Retention period

Personal data submitted through the forms will be retained only for the time required to handle your request and, in any case, for a maximum of 24 months from the last active contact — unless a subsequent contract is concluded (in which case statutory retention applies) or you explicitly request early deletion.

7. Your rights (Articles 15–22 GDPR)

As a data subject, you have the right to:

• request access to your personal data;
• obtain rectification or erasure (“right to be forgotten”);
• request restriction of processing;
• object to processing;
• request data portability.

To exercise your rights, please contact the Data Controller at: francesco.desario@athena-aisolutions.com.

You also have the right to lodge a complaint with the competent supervisory authority — the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, garanteprivacy.it) — if you believe the processing breaches the GDPR.