Privacy Policy
This notice describes how the personal data of users visiting the website caiolab.com (hereinafter the "Site") is processed, pursuant to Regulation (EU) 2016/679 ("GDPR") and applicable Italian legislation.
1. Data Controller
The Data Controller is Tec Trade di FC (sole proprietorship, owner of the CAIO Lab brand), VAT no. IT01741190332, with a Business Unit at Via Manfredi 37/A, 29121 Piacenza (PC), Italy.
Email: ask@caiolab.it · Certified email (PEC): tectrade@pec.it
Data protection contact (DPO): dpo@caiolab.com
2. Categories of data processed
- Browsing data. The IT systems and software procedures used to operate the Site acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (IP addresses, browser type, device parameters, request times).
- Statistical data (cookies), subject to consent. The Site may use Google Analytics in anonymised form (masked IP) to measure visits. Details in the Cookie Policy.
- Marketing data (pixels), subject to consent. The Site may use marketing pixels (Meta Pixel, LinkedIn Insight Tag) to measure the effectiveness of advertising campaigns. Details in the Cookie Policy.
- Data provided voluntarily by email. Optionally sending emails to the addresses listed on the Site entails the acquisition of the sender's address and of the data contained in the message, which are processed solely to reply.
- Content submitted to the Prisma composer. The Site's home page allows users to describe their goal in natural language; the text entered is used to compose the page. When the remote composition service is active, the text is transmitted to a language model to generate the composition; otherwise, processing takes place entirely in the browser. Users are asked not to enter personal, confidential or sensitive data.
3. Purposes and legal bases
- Operation and security of the Site (browsing data, technical cookies) — legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
- Usage statistics (Google Analytics) — consent of the data subject (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
- Measurement of marketing campaigns (pixels) — consent of the data subject (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
- Replying to requests (email, Prisma composer) — performance of pre-contractual measures at the data subject's request and legitimate interest in providing the requested service.
4. Recipients and processors
Data may be processed by suppliers acting as processors, including:
- SiteGround Spain S.L. — hosting of the Site.
- Google Ireland Ltd. — Google Analytics (subject to consent) and Google Fonts (loading of typefaces).
- Meta Platforms Ireland Ltd. and LinkedIn Ireland Unlimited Company — marketing pixels (subject to consent).
- Anthropic PBC — processing of requests submitted to the Prisma composer through the Claude model, when the remote service is active.
5. Transfers outside the EU
Some suppliers (in particular Google, Meta, LinkedIn and Anthropic) are based or have servers in the United States. Any transfers of data outside the European Union take place in compliance with Articles 44 et seq. of the GDPR, on the basis of appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission and/or participation in the Data Privacy Framework.
6. Retention period
Browsing data is retained for the time technically necessary and in any case within the limits set by the law. Emails are retained for the time needed to handle the request and any resulting relationship. Data collected through Google Analytics and marketing pixels is retained according to the settings of the respective services and their privacy notices. Texts submitted to the Prisma composer are not linked to an identity and are retained for the time needed to provide and improve the service.
7. Rights of the data subject
The data subject may at any time exercise the rights set out in Articles 15-22 of the GDPR: access, rectification, erasure, restriction, portability, objection to processing and withdrawal of consent (without affecting the lawfulness of processing carried out before withdrawal). Requests may be sent to ask@caiolab.it.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).
8. Changes to this notice
The Data Controller reserves the right to amend or update this notice. Changes will be published on this page together with the date of the last update.