Privacy

Privacy Policy

Last updated: October 7, 2026

Data controller

The data controller is Alessio Scandura, owner of the sole proprietorship Astrai (VAT no. IT04732460409), based at Via del Prete 16, 47841 Cattolica (RN), Italy. For any request about the processing of your data, write to the email address at the bottom of this page.

Types of data collected

The site collects the following data, directly or through third-party providers:

  • Data you enter in the contact form: name, email, company and sector if you give them, message, and your newsletter consent with its date if you tick the box.
  • Data collected automatically with the form: the page language, the channel you came from (for example Instagram) and your IP address, used to limit automated submissions.
  • Server technical data: IP address, date and time of the request and requested page, recorded in the technical logs.
  • Browsing data collected through statistics cookies, only with your consent: see the Cookie Policy.

Whether providing data is required

Providing the form data is optional, but without your name, email and message we can't reply to you. Consent to the newsletter and to statistics cookies is free: if you don't give it, you can still use the site and write to us. We don't make automated decisions or profile you with your data.

Purposes and legal basis

  • Replying to your requests and, if you'd like, starting a collaboration: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
  • Sending you an automatic confirmation or welcome email after a form message: our legitimate interest (Art. 6(1)(f)). If you don't want any more, write to us.
  • Sending you the newsletter, only if you asked for it: your consent (Art. 6(1)(a)), which you can withdraw with the unsubscribe link in every email.
  • Protecting the site and the form from automated submissions and abuse: our legitimate interest (Art. 6(1)(f)).
  • Statistics on site usage with Google Analytics and Microsoft Clarity: your consent (Art. 6(1)(a)), which you can withdraw at any time.

Methods and place of processing

We process data with IT tools and security measures suitable to prevent unauthorized access, loss or alteration. Only the data controller accesses the data; the providers listed below process it solely for the functions of their service.

The site and the management system that holds the form data are hosted in Germany, within the European Union. Some providers may transfer data to the United States: in every case the transfer is covered by the EU-U.S. Data Privacy Framework, in which the providers participate, on the basis of the European Commission's adequacy decision.

Details of the services used

Contact form and management system (Astrai)

Form data is saved in Astrai's internal management system, which we use to follow up on requests and client relationships.

Data processed:
name, email, company, sector, message, language, source channel, newsletter consent
Place of processing:
Germany (Hetzner servers)

Hosting – Hetzner Online GmbH

Provider of the servers running the site and the management system; it processes data as a processor on our behalf.

Data processed:
all site and management system data, technical logs
Place of processing:
Germany
Provider's privacy policy:
hetzner.com

Email delivery – Resend

Service that sends the emails related to the form: the notice we receive for each message, automatic confirmation or welcome emails, and the newsletter. It processes data as a processor on our behalf.

Data processed:
email address, name, email content
Place of processing:
United States (Data Privacy Framework)
Provider's privacy policy:
resend.com

Statistics – Google Analytics 4 (Google Ireland Limited)

Measures visits to the site, only with your consent. Google processes data as a processor on our behalf; advertising features are turned off. Details in the Cookie Policy.

Data processed:
cookies and usage data (pages visited, device, approximate geographic area)
Place of processing:
Ireland and United States (Data Privacy Framework)
Provider's privacy policy:
policies.google.com

Statistics – Microsoft Clarity (Microsoft)

Records how pages are used and summarizes it in heatmaps, only with your consent and with form fields hidden. Microsoft processes data as an independent controller. Details in the Cookie Policy.

Data processed:
cookies and usage data (clicks, scrolling, mouse movement, pages viewed)
Place of processing:
United States (Data Privacy Framework)
Provider's privacy policy:
privacy.microsoft.com

Retention period

  • Form data: for as long as needed to handle the request and our relationship and, if we start working together, for the period required by tax and contract law. You can ask for deletion at any time.
  • Newsletter consent: kept for as long as you're subscribed; after you unsubscribe we keep only the record of the withdrawal.
  • IP address used to limit submissions: deleted automatically about a minute after the last submission.
  • Server technical logs: kept for a limited period and then deleted automatically.
  • Statistics data: as set out in the Cookie Policy.

Cookies

The site uses a technical cookie, required for it to work, and, only with your consent, Google Analytics and Microsoft Clarity statistics cookies. All details are in the Cookie Policy.

Your rights

At any time you can:

  • access your data and receive a copy;
  • ask for it to be corrected or deleted;
  • ask for processing to be restricted;
  • receive the data you gave us in a machine-readable format (portability);
  • object to processing based on our legitimate interest;
  • withdraw any consent you've given (newsletter, statistics cookies), without affecting the lawfulness of processing carried out before;
  • lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or the authority of your country.

How to exercise your rights

Write to the email address at the bottom of this page. We reply without undue delay and at the latest within one month of the request.

Further information

  • Data may be used to defend our rights in court or at the request of the competent authorities.
  • If you write to us directly by email, including from the site's "Write to us" links, we process the data you send under the same criteria as the contact form.
  • This policy may be updated, for example if the data collected or the providers change. The date of the last update is shown at the top of the page.

Alessio@astrai.biz