How we process your personal data.

01Data controller

The Controller has not appointed a Data Protection Officer (DPO), as it is not required to do so under Article 37 GDPR.

02What data we process

Browsing data. The servers that host the site automatically record, like any web server, some technical data about the connection: IP address, date and time of the request, page requested, response code, browser type and operating system. These data are used only to make the site work and to keep it secure. We do not use them to identify users or to profile them.

Aggregate statistics. To know which pages are read, we count, on our own servers, the pages viewed each day and the domain of the site the visit comes from (for example a search engine or a social network). These counts contain no IP addresses or other data that would allow you to be identified, do not use cookies and are not shared with third parties.

Data you provide to us. If you write to us by e-mail or PEC, we process your e-mail address, your name and any other data you choose to include in the message.

The site contains no data collection forms and does not ask you to register.

03Purposes and legal bases

• Operation and security of the site (browsing data): the Controller's legitimate interest in providing a working site and in preventing abuse and cyber attacks (Article 6(1)(f) GDPR).
• Replying to your requests (data you provide to us): performance of pre-contractual measures taken at your request (Article 6(1)(b) GDPR) or, for general requests, the Controller's legitimate interest in replying (Article 6(1)(f) GDPR).
• Compliance with legal obligations and, where necessary, the establishment, exercise or defence of legal claims (Article 6(1)(c) and (f) GDPR).

We do not use your data for marketing purposes and do not subject them to automated decision-making or profiling.

04Cookies

This site does not use cookies, either technical or profiling cookies, and does not use third-party statistical analysis or tracking tools: the only statistics, described above, are aggregate counts calculated on our servers without cookies. The fonts are also hosted on our servers, so the page makes no requests to external services. For this reason we do not show you a cookie consent banner.

05Recipients of the data

The data are processed by authorised personnel of the Controller. They may also be accessed by the suppliers that support us, appointed as Processors under Article 28 GDPR:

• Aruba S.p.A., for website hosting, e-mail and PEC services.

The data may be disclosed to the competent authorities when required by law. We do not sell or transfer your data to third parties.

06Transfers outside the EU

The data are stored on servers located in the European Union. We do not transfer personal data to third countries. Should this happen in the future, we will do so only where the safeguards provided for by Articles 44 et seq. of the GDPR are in place, for example an adequacy decision or standard contractual clauses.

07How long we keep the data

• Browsing data: for the period set by the standard configuration of the hosting service, normally no longer than 12 months, unless they are needed to establish an offence.
• E-mail correspondence: for the time needed to handle your request. If a contractual relationship arises from it, for its entire duration and then for the periods required by law (generally 10 years for accounting and tax records).

08Your rights

At any time you can exercise the rights provided for by Articles 15–22 GDPR:

• to access your data and obtain a copy of them;
• to request their rectification or erasure;
• to request restriction of processing;
• to object to processing based on legitimate interest;
• to receive the data in a structured format and transmit them to another controller (portability), where applicable.

To exercise these rights, write to info@hyperionsrl.cloud or to the PEC address hyperionsrl@pecaruba.it. We will reply within one month of the request, as required by Article 12 GDPR.

If you believe that the processing of your data infringes the law, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

09Changes to this notice

We may update this notice, for example if the services offered by the site or the law change. The version in force is always published on this page, with the date of the last update shown at the top.