Privacy Policy

Privacy and Cookie Notice

Last updated: 12 October 2026

This notice explains how Aurelia S.r.l. processes personal data when you visit aurelia.it, browse its pages or contact us by email or through our website contact form. It also describes cookies, external resources, and your rights under Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and applicable Italian data-protection legislation.

1. Data controller

Aurelia S.r.l.
Via Sant’Antioco 64, 56023 Cascina (Pisa), Italy
Italian VAT / tax identification number: 02525940504
Email: info@aurelia.it
Certified email (PEC): aureliasrl@pecdotcom.it

For questions about this notice or requests concerning your personal data, please contact us using either email address above.

2. Personal data we process

Depending on how you interact with this website, we process:

  • Technical and browsing data: IP address, request date and time, visited resources, browser and device characteristics, referral and error information, and other information recorded in server or security logs as part of delivering and protecting the website.
  • Contact and enquiry data: information you submit through the contact form or by email, such as your name, email address, organisation or affiliation (if provided), your message and any other information you choose to include.
  • Business correspondence: communications and supporting information exchanged when evaluating potential technical projects, partnerships, contracts, research collaborations or similar requests.
  • Information handled by third-party website features: data transmitted by your browser when externally hosted fonts or an embedded map are requested, as described in Section 7.

Please do not send sensitive personal data (for example, health or identification documents) through the general contact form unless we specifically request them using an appropriate secure channel.

3. Purposes and legal bases

  • Website delivery, technical operation and security: providing the requested pages, maintaining service availability, detecting abuse and diagnosing technical problems. Legal basis: our legitimate interest in operating and protecting the website (Article 6(1)(f) GDPR), and compliance with legal obligations where applicable (Article 6(1)(c)).
  • Responding to enquiries: receiving and replying to requests for information, quotations, missions, payload integration, collaborations and other projects. Legal basis: taking steps requested before entering into a contract, where applicable (Article 6(1)(b)); otherwise, our legitimate interest in handling genuine business or research enquiries (Article 6(1)(f)).
  • Managing subsequent relationships: preparing proposals, performing contracts, administering business relationships, meeting accounting obligations, and handling or defending legal claims if an enquiry leads to further engagement. Legal basis: contract, legal obligation or legitimate interest, as appropriate under Article 6(1)(b), (c) and (f) GDPR.
  • Delivering optional external website features: displaying external maps or online resources when these services are loaded. Any non-essential cookies or comparable tracking require consent where applicable under Italian rules. See Section 7.

We do not treat submission of a general business enquiry as consent to receive unrelated marketing messages.

4. Is providing information mandatory?

Browsing the website does not require you to supply your name or contact details. Fields marked as required in the contact form are necessary to process and reply to that enquiry; if you do not provide them, we may be unable to respond. Information in optional fields is provided voluntarily.

5. Who receives personal data?

Personal data may be accessed by authorised Aurelia personnel who need them for the purposes above. We also use technical providers to operate our website and communications, including:

  • Hostinger: the website’s hosting and related technical infrastructure, acting as a processor in respect of customer data under its applicable data processing agreement.
  • Email and IT service providers: providers used to transmit, store, back up and protect business correspondence and contact-form notification messages, to the extent relevant to the services configured by Aurelia.
  • External content providers: notably Google when Google-hosted fonts or embedded Google Maps are requested by your browser (see Section 7). Such third parties process information according to their own applicable arrangements and privacy notices.
  • Public authorities, advisers or professional service providers: when disclosure is required by law or is reasonably necessary for establishing, exercising or defending legal claims, subject to appropriate confidentiality and legal safeguards.

We do not publish contact-form submissions on the website.

6. How long we keep data

  • Routine enquiries: correspondence that does not lead to an ongoing relationship is generally kept for no more than 24 months after the last substantive communication, unless a longer period is reasonably necessary for a specific documented purpose or legal claim.
  • Contracts and legally required records: kept for the periods prescribed by applicable civil, tax and accounting laws, or longer when necessary to establish, exercise or defend legal claims.
  • Technical and security logs: kept for a limited period appropriate to website maintenance, security and incident investigation, in accordance with the hosting and security tools actually configured.
  • Data handled by external services: subject to their own policies where those providers act as independent controllers.

Information is deleted or anonymised when it is no longer needed for the relevant purpose, subject to applicable retention duties.

7. Cookies, external fonts and maps

Technical cookies

WordPress and the hosting infrastructure can use cookies or similar storage needed for login sessions, administration, security, site functionality or technical preferences. Such technologies are not intended for advertising profiling. Under applicable Italian rules, strictly necessary technical cookies do not require prior consent, but information about their use must be provided.

Contact form

The website uses WPForms Lite to receive enquiries. According to the plugin developer, this edition does not use its visitor-identification cookies for form submissions or collect the additional user IP/browser details available in paid entry-storage configurations. Form messages can nevertheless be transmitted to Aurelia by email and processed as correspondence.

Google Fonts

The website configuration includes fonts served through Google Fonts. When your browser retrieves these external resources, technical information such as your IP address, browser information and requested resource may be communicated to Google.

Google Maps

Interactive Google Maps content is integrated in parts of the website, including the contact information area. Loading an embedded Google map connects your browser to Google and can transmit technical data, including your IP address; Google may also use cookies or other storage mechanisms. For details, see Google’s Privacy Policy.

Other analytics or tracking

Where Aurelia introduces website analytics or additional third-party tracking services, this notice will be updated to identify their purposes, providers, data processed and retention arrangements. Any prior consent required for non-essential tracking will be obtained before such technologies are activated.

Controlling cookies

You can manage or delete cookies through your browser settings. Disabling strictly necessary cookies may limit website functionality. Where the site uses technologies requiring consent, the associated consent choice and its withdrawal mechanism must be made available to visitors.

8. Transfers outside the European Economic Area

Some external service providers, including Google and potentially providers involved in email or website services, may process personal data outside the European Economic Area. Where international transfers are carried out by or on behalf of Aurelia, we assess the applicable transfer mechanism, such as a European Commission adequacy decision or appropriate contractual safeguards (including the European Commission’s Standard Contractual Clauses, where applicable). You may request information about the relevant safeguards through the contact details in Section 1.

9. Security

We take organisational and technical measures appropriate to the nature of the data and the risks of processing, including access restrictions and the security controls provided by our website and communications infrastructure. No internet transmission or electronic storage system can be guaranteed to be completely free of risk.

10. Your data-protection rights

Subject to the conditions and limitations laid down by law, you may request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, and data portability where applicable. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing already carried out.

To exercise these rights, email info@aurelia.it or use the PEC address in Section 1. We normally respond within one month, subject to the extensions permitted by the GDPR.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or another competent supervisory authority under Article 77 GDPR.

11. External links

The website contains links to third-party websites, including social platforms and scientific or institutional resources. Following an external link takes you to a website that applies its own privacy and cookie rules. Aurelia does not control those independent websites.

12. Automated decisions

Ordinary browsing and contact-form enquiries are not used by Aurelia for decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals within the meaning of Article 22 GDPR.

13. Updates to this notice

We may revise this notice when our website, processing activities or legal requirements change. The latest version is published on this page together with its update date. Material changes will be communicated by additional means where required.