How we handle personal data.

1. Who we are

This website (thyxelar.com and thyxelar.io) is operated by Thyxelar S.r.l.s., a single-member Italian limited liability company with registered office at Via Angelo Cenci 4, Rimini, Italy. Italian VAT and Tax Code: 04887380402. Certified email (PEC): thyxelar@pec.it.

Thyxelar S.r.l.s. is the Data Controller of any personal data processed through this website, within the meaning of Article 4(7) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter "GDPR").

2. Scope of this policy

This policy describes the processing of personal data of visitors to the websites thyxelar.com and thyxelar.io. It does not cover personal data processed in the context of commercial relationships, contractual negotiations, or other activities carried out outside the websites, which are governed by separate information notices provided at the time of collection.

3. Data we process

3.1 Browsing data

The information systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This category includes: IP addresses, browser type and version, operating system, URLs of pages visited, timestamps of requests, and request methods. Such data are processed exclusively for anonymous statistical purposes and to ensure correct functioning of the service, and are not associated with identified users.

3.2 Data provided voluntarily by the user

The optional, explicit, and voluntary sending of electronic mail to the addresses indicated on the website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

4. Legal basis and purposes

Personal data are processed on the following legal bases, pursuant to Article 6 GDPR:

• Legitimate interest (Article 6(1)(f)) for browsing data, security monitoring, and prevention of abuse of the service.
• Pre-contractual measures and performance of a contract (Article 6(1)(b)) for data sent voluntarily by email to respond to enquiries, partnerships, pilots, or acquisition interest.
• Legal obligation (Article 6(1)(c)) where processing is required to comply with Italian and European law.

5. Retention periods

Browsing data are retained for the time strictly necessary to achieve the purposes for which they are collected and in any case no longer than seven days, except in the event of ascertainment of computer crimes to the detriment of the website.

Personal data sent voluntarily by email are retained for the time necessary to handle the request and, where a commercial or institutional relationship is established, for the duration of such relationship plus the retention periods required by applicable Italian law.

6. Cookies and similar technologies

This website does not use cookies, neither technical nor profiling, and does not use similar tracking technologies (local storage, session storage, fingerprinting, pixels). No consent banner is therefore displayed, in line with the principle of data minimisation under Article 5 GDPR.

7. Third parties and recipients

Personal data may be processed by the following categories of recipients, acting as data processors or autonomous controllers in their respective roles:

• Cloudflare, Inc. (United States), which provides content delivery and security services for the website domains and may process browsing data (including IP addresses) as a technical necessity to deliver the service. Transfers outside the European Economic Area are protected by Standard Contractual Clauses pursuant to Articles 46 and 49 GDPR.
• mailbox.org / Heinlein Hosting GmbH (Germany), which provides the email service used to receive messages sent to the published address.

No personal data are transferred to any other third party, nor are they used for profiling, automated decision-making, or marketing purposes.

8. Your rights

Under Articles 15 to 22 GDPR, you have the right to: access your personal data; obtain their rectification or erasure; restrict or object to processing; receive your data in a structured, commonly used, and machine-readable format (data portability); and withdraw any consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), should you consider that the processing of your personal data infringes applicable law.

9. How to exercise your rights

Requests concerning the exercise of your rights may be sent to the Data Controller using the contact details below. Thyxelar S.r.l.s. will respond without undue delay and in any case within one month of receipt of the request, as required by Article 12 GDPR.

10. Changes to this policy

This policy may be updated to reflect changes in the service, the legal framework, or the processing activities. The date at the top of this page indicates the version in force. Users are invited to consult this page periodically.