Privacy notice.

Lemnia s.r.l., data controller for this site.

Lemnia s.r.l., VAT [placeholder], registered office [placeholder], is the controller for personal data processed through lemnia-business.app. The Data Protection Officer can be contacted at dpo@lemnia.app.

This notice covers the personal data collected through the website: pilot request forms, technical-dossier requests and contact emails. It does not cover the personal data processed inside a customer's Lemnia installation, for which the controller is the customer, with Lemnia s.r.l. acting as data processor under a separate Data Processing Agreement.

What is collected, and why.

• Pilot request (Art. 6.1.b GDPR, pre-contractual measures)

  Name, work email, company name, sector, team size and contact preference. Used to schedule and prepare the 30-minute demonstration. Retained 24 months from the last contact, then deleted.

• Technical dossier request (Art. 6.1.b GDPR)

  Name, work email and role. Used to send the requested PDF. Retained 12 months, then deleted.

• Technical session cookie (Art. 6.1.f GDPR, legitimate interest)

  A first-party session cookie required for the site to function, with no tracking. Lifetime: browser session.

• Web analytics — NONE

  lemnia-business.app does not use any third-party analytics or speed-insights SDK. No Vercel Analytics, no Google Analytics, no Plausible, no Matomo, no Posthog. The site has zero outbound telemetry by policy.

Who else sees this data.

Hosting and CDN: Vercel Inc. (data processor) on EU-region infrastructure. A DPA is signed, and the EU SCC are adopted for any residual transfer to the US.

Email correspondence: Microsoft 365 (Lemnia s.r.l. tenant, EU data residency).

Otherwise, no third party receives personal data collected through this site. There is no advertising network, no analytics aggregator and no CRM resale.

By default, none.

All processing related to this site happens in the EEA, with Vercel's EU-region hosting as the default. Where residual processing on US infrastructure occurs (for example operational metadata), Vercel applies the EU Standard Contractual Clauses (Commission Decision 2021/914) and the Data Privacy Framework certification.

No transfer to other third countries occurs.

Art. 15-22 GDPR: access, rectification, erasure, portability, restriction, objection.

The data subject may exercise any GDPR right by writing to dpo@lemnia.app, with a reply within 30 days. Where processing of the data is believed to violate GDPR, the right remains to lodge a complaint with the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

Erasure (Art. 17): a request for erasure of pilot-request data removes the record from the Lemnia s.r.l. CRM within 30 days, except for the accounting records that Italian tax law requires to be retained for the period it sets.