Privacy notice
What data we collect when you write to Addyx, why we process it and how you can have it deleted.
This page explains, without unnecessary formalities, what happens to the personal data that passes through addyx.it. It covers the forms on the Contact page, the Beta sign-up and ordinary browsing.
Data controller
The data controller is Addyx S.r.l., registered office at Via Mincio 12, 65015 Montesilvano (PE), Italy, plant at Via Erasmo Piaggio 77/E, 66100 Chieti (CH), Italy. VAT no. 02318800683. For anything concerning your data you can write to info@addyx.it or, by certified mail, to addyx@pec.addyx.it.
No Data Protection Officer (DPO) has been appointed: requests are handled directly by the controller at the addresses above.
What data we collect
This site has no private areas and no profiling. Personal data reaches us only from those who choose to fill in a form:
- Clients form — full name, email, company, area of interest, the text of your message and any technical attachment you choose to upload.
- Work with Us form — full name, email, application type, position, introduction and CV. A CV may contain special category data (for example health information or protected-category status): please include it only where you consider it genuinely relevant to your application.
- Beta sign-up for the AI Composite Design Platform — name, company, email and role.
- Technical browsing data — IP address, browser type, pages requested, logged automatically by the servers hosting the site for security and diagnostics.
Why we process them
Each processing operation has a specific purpose and legal basis (art. 6 GDPR):
- Replying to your commercial or technical enquiry — legal basis: steps taken at your request prior to entering into a contract (art. 6.1.b). Without this data we cannot reply.
- Assessing your application — legal basis: pre-contractual steps (art. 6.1.b). For any special category data contained in the CV, the basis is art. 9.2.b (employment law obligations).
- Signing you up to the Beta and sending you programme updates — legal basis: your consent, which you can withdraw at any time by writing to us.
- Keeping the site secure and working — legal basis: our legitimate interest in preventing abuse and malfunctions (art. 6.1.f).
Where the data goes
When you submit the Clients or Work with Us form, the data you entered is recorded as a row in a Google spreadsheet accessible only to Addyx staff in charge. Any attachment (technical drawing or CV) is uploaded to a restricted Google Drive folder and linked from that row. Attachments are not kept on the website's servers: they pass through our server only for the time needed to upload them, and the site holds no archive from which they could be extracted.
Beta sign-up data goes into a tab of the same spreadsheet, with the same access restrictions.
How long we keep them
- Commercial and technical enquiries: 24 months from the last contact, unless the enquiry leads to a contract, in which case statutory terms apply (10 years for accounting records).
- Applications and CVs: 12 months from receipt, after which the spreadsheet row and the file on Drive are deleted. You can ask for earlier deletion at any time.
- Beta sign-ups: until consent is withdrawn or the programme closes.
- Technical logs: as long as our hosting providers retain them, typically days or weeks.
Who else sees them
Your data is never sold or transferred for third-party marketing. Besides authorised Addyx staff, it is processed by the technical suppliers that make the service possible, appointed as processors under art. 28 GDPR:
- Vercel — hosting for the site and for the function that receives the forms.
- Google — the spreadsheet where enquiries, applications and Beta sign-ups are recorded, and the Drive folder where attachments are stored.
Transfers outside the European Union
Some of the suppliers listed above are based in the United States or may rely on infrastructure outside the EU. Where this happens, transfers take place under the Standard Contractual Clauses approved by the European Commission and, where applicable, the supplier's certification under the EU-US Data Privacy Framework.
Your rights
At any time you can ask to access your data, have it corrected or erased, restrict or object to its processing, receive it in a machine-readable format (portability) and withdraw consent already given — withdrawal does not affect the lawfulness of processing carried out before it. Just write to info@addyx.it: we reply within one month.
If you believe the processing infringes the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country of residence.
Changes to this notice
If we change the way we process data we will update this page and the date below. We invite you to check back from time to time.
Last updated: 24 August 2026