Privacy Policy

Last updated: 10 October 2026

1. Data controller

GLEX AI S.R.L., Via Felice Cavallotti 15, 20122 Milano (MI), Italy, VAT number 13550840964 (the "Company"). Contact: blackseal.info@gmail.com, certified email (PEC): glexaisrl@pec.it.

2. Data we collect

• Data you provide: name, email address, company name and the content of your message, when you contact us through the contact form or by email.
• Technical data: IP address, browser type, date and time of access, collected automatically by our hosting provider in server logs for security and service delivery.
• Call bookings: if you book an introductory call, scheduling is handled by Calendly, which processes your data under its own privacy policy.

3. Purposes and legal basis

• Responding to your requests and taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Security and proper functioning of the website, based on our legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations, including tax and accounting obligations where a business relationship follows (Art. 6(1)(c) GDPR).

Providing your data through the contact form is optional, but without it we cannot respond to your request.

4. Cookies

This website does not use profiling, advertising or analytics cookies. Fonts are hosted locally and are not loaded from third-party servers.

5. Recipients and international transfers

Your data may be processed, as data processors, by our hosting provider (Vercel Inc.), our contact form service provider (FormSubmit) and our email service provider (Google). These providers may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission. Data may also be shared with professional advisors bound by confidentiality, and with public authorities where required by law. We do not sell personal data.

6. Retention

Contact requests are kept for up to 24 months after our last communication, unless a contractual relationship follows, in which case data is kept for the period required by law. Server logs are kept for the limited period set by our hosting provider.

7. Your rights

You may at any time request access to, rectification or erasure of your data, restriction of processing, data portability, and object to processing based on legitimate interest (Arts. 15 to 22 GDPR), by writing to the contacts above. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Automated decision-making

No decisions based solely on automated processing, including profiling, are made using data collected through this website.

9. Changes

We may update this policy. The current version is always published on this page, with the date of the last update.