This Privacy Policy has been drawn up in accordance with European Regulation No. 679 of 27 April 2016 on the protection of personal data. Unless it links to another notice or states otherwise, it applies whenever you visit or use www.vertalis.ai. The following information is provided pursuant to Art. 13 of Reg. 679/2016.
Art. 1 — Data controller
Your personal data will be processed by Vertalis S.r.l., registered office at Via Nicolò Tartaglia 1, 20154 Milan (MI), Italy, tax code and VAT number 14313550965, e-mail beatrice.bigoni@vertalis.ai.
Art. 2 — Data processed
The personal data processed belongs to visitors of the website. Specifically:
- Browsing data: IP addresses or domain names of the computers used to connect to the site, the URIs of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file returned, the numeric code indicating the status of the response (error, success, etc.) and other parameters relating to the user's operating system and computing environment.
- Ordinary and contact data provided by you when filling in the forms on the site to request a product demo, ask for more information about our services, receive commercial communications, or subscribe to the newsletter: first name, last name, phone number, e-mail.
Should it become necessary, while carrying out the activities you have requested, to process further data outside the categories above, the controller will inform you promptly.
Art. 3 — Purposes, legal basis and nature of provision
- To improve your browsing experience on the website, on the basis of the controller's legitimate interest, under Art. 6(1)(f) of Reg. 679/2016;
- To handle demo requests, requests for information about our services and newsletter sign-ups submitted through the forms on the site, on the basis of the explicit consent you give by ticking the relevant check-box, under Art. 6(1)(a);
- For marketing purposes, through commercial communications about the services and products offered, on the basis of the explicit consent you give by ticking the relevant check-box, under Art. 6(1)(a).
Providing data for requests submitted through the website is optional; without consent, however, we will not be able to fulfil those requests. Providing data for marketing purposes under point (c) above is entirely optional and does not affect delivery of the services requested. As for browsing data, if you do not wish to provide it, please do not browse or use the website.
Art. 4 — How data is processed
For the purposes above, data is processed both electronically and on paper. Data is entered in the books and registers required by law and, where necessary, sent to the tax authorities. All processing operations are carried out so as to safeguard the integrity, confidentiality and availability of personal data.
Should your data be transferred outside the European Economic Area for technical or statistical management purposes, this will take place in full compliance with Regulation (EU) 2016/679, towards third countries for which the European Commission has recognised specific adequacy guarantees, or where adequate safeguards have been provided through the Standard Contractual Clauses approved by the European Commission under Decision 2010/87/EU, stating the additional security measures adopted to protect the confidentiality of the data subject.
Pursuant to Art. 28 GDPR, the controller may appoint an external data processor, in particular for the storage, organisation, structuring, consultation, processing, selection, extraction, comparison, interconnection, communication, use, blocking, dissemination, erasure and destruction of the personal data collected and recorded by the controller.
Art. 5 — Cookies and site tracking
In compliance with EU Directive 2009/136/EC of 25 November 2009, the controller informs you that the site uses cookies or similar tools to improve the service and offer useful features, which may include cookies from commercial partners stored by your computer or device when you visit the site. Cookies are small text files transferred to your device through your web browser so that the controller can recognise your browser and monitor site visitors. Most browsers accept cookies automatically, but you can change these settings to accept, reject or delete cookies: if you do, certain features may not work as expected. The cookies used do not read information held on your computer or device. Full details are in our Cookie Policy.
Art. 6 — Retention period
Data covered by this Privacy Policy is retained for 3 years from the date it is provided or collected.
Art. 7 — Recipients and data transfers
- Any party granted access to such data by law or regulation;
- Our staff and collaborators;
- Parties managing our IT systems;
- Parties appointed by the controller as external data processors;
- Any natural or legal person, public or private, where the disclosure is necessary or functional to establishing and managing the relationship, in the ways and for the purposes set out above.
Art. 8 — Your rights as a data subject
In addition to the right to lodge a complaint with a supervisory authority, you have the following rights under Regulation No. 679/2016:
Art. 15 — Right of access. To obtain confirmation from the controller as to whether personal data concerning you is being processed and, if so, access to that data and to information about the processing.
Art. 16 — Right to rectification. To obtain, without undue delay, the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, to have incomplete data completed, including by providing a supplementary statement.
Art. 17 — Right to erasure (right to be forgotten). To obtain the erasure of personal data concerning you without undue delay; the controller is obliged to erase it without undue delay.
Art. 18 — Right to restriction of processing, where one of the following applies:
- you contest the accuracy of the data, for the period needed by the controller to verify it;
- the processing is unlawful and you oppose erasure, requesting instead that its use be restricted;
- the controller no longer needs the data, but you require it to establish, exercise or defend legal claims;
- you have objected to processing under Art. 21(1), pending verification of whether the controller's legitimate grounds override yours.
Art. 20 — Right to data portability. To receive personal data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another controller without hindrance, including — where technically feasible — having it transmitted directly from one controller to another.
Art. 21 — Right to object. To object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you under Art. 6(1)(e) or (f), including profiling based on those provisions.
Art. 22 — Automated decision-making. Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
These rights may be exercised by written request sent to beatrice.bigoni@vertalis.ai. A response may take up to thirty days; for your own protection, we may need to verify your identity before acting on the request.
Last updated: 25 May 2026