Privacy Policy.

Lemnia s.r.l., data controller for this site.

Lemnia s.r.l., VAT [placeholder], registered office [placeholder], is the controller for personal data processed through lemnia-business.app. The Data Protection Officer can be contacted at dpo@lemnia.app.

This notice covers personal data collected through the website only — pilot request forms, technical-dossier requests, contact emails. It does not cover personal data processed inside a customer's Lemnia installation, which is the controller responsibility of the customer themselves, with Lemnia s.r.l. acting as data processor under a separate Data Processing Agreement.

What we collect, and why.

• Pilot request (Art. 6.1.b GDPR — pre-contractual measures)

  Name, work email, company name, sector, team size, contact preference. Used to schedule and prepare the 30-minute demo. Retained 24 months from the last contact, then deleted.

• Technical dossier request (Art. 6.1.b GDPR)

  Name, work email, role. Used to send the requested PDF. Retained 12 months, then deleted.

• Web analytics (Art. 6.1.a GDPR — explicit consent)

  Anonymised page-view counters via Vercel Analytics. No cookies set without consent. IPs truncated at ingestion. Retained 30 days.

• Technical session cookie (Art. 6.1.f GDPR — legitimate interest)

  First-party session cookie required for the site to function. No tracking. Lifetime: browser session.

Who else sees this data.

Hosting and CDN: Vercel Inc. (data processor) on EU-region infrastructure. DPA signed; EU SCC adopted for any residual transfer to the US.

Email correspondence: Microsoft 365 (Lemnia s.r.l. tenant, EU data residency).

Otherwise, no third party receives personal data collected through this site. No advertising network, no analytics aggregator, no CRM resale.

Default: none.

All processing related to this site happens in the EEA. Vercel's EU-region hosting is the default. Where residual processing on US infrastructure occurs (e.g. operational metadata), Vercel applies the EU Standard Contractual Clauses (Commission Decision 2021/914) and the Data Privacy Framework certification.

No transfer to other third countries occurs.

Art. 15-22 GDPR — access, rectification, erasure, portability, restriction, objection.

You can exercise any GDPR right by writing to dpo@lemnia.app. We reply within 30 days. If you believe processing of your data violates GDPR, you have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

Erasure (Art. 17): requesting erasure of pilot-request data removes the record from our CRM within 30 days, except for accounting records we are legally required to retain for the period set by Italian tax law.