Privacy Policy

Privacy notice

Notice under Articles 12, 13 and 14 of Regulation (EU) 2016/679 and applicable ePrivacy rules for users browsing BALIOS and sending contact or interest requests.

BALIOS is a software product and informational website owned by Aumatex srls. The website presents a product under development and collects expressions of interest.

1. Data controller

Aumatex srls, Via Umberto Biancamano 25, 00185 Roma (RM), Italia, P.IVA IT15617831001, PEC aumatex@pec.it.

Privacy contact for any request: info@aumatex.it.

No Data Protection Officer has been appointed, as the current processing does not fall within the mandatory cases under Article 37 GDPR.

2. Personal data processed

Browsing and technical log data: IP address, request date and time, requested URL, user agent, referrer, language and technical information generated while accessing the website.
Data voluntarily provided: name, email, company or organisation, phone number, role, facility size and message content sent through the interest form or by email.
Consent data: choices expressed through the cookie banner, notice version, consent date and expiry, stored in the user's browser.
Optional tool data: analytics metrics or interactions with external services are processed only if the relevant tool is enabled and within the limits of the user's consent.

3. Purposes and legal bases

Website delivery, security, CDN, DNS, cache and abuse prevention: the controller's legitimate interest in website operation and security.
Replying to contact, interest or early access evaluation requests: pre-contractual steps requested by the data subject.
Cookie consent and preference management: compliance with privacy/ePrivacy obligations and legitimate interest in recording the choice.
Administrative, tax, accounting obligations or authority requests: legal obligation.
Non-essential analytics, if enabled: freely given, specific, informed and revocable consent.

4. Processing, security and hosting

The website is delivered through Cloudflare and Vercel infrastructure. These services may process technical logs and network data needed for security, caching, availability and troubleshooting. The website does not load non-technical tools before consent.

When the interest form is enabled for submission, data is sent to Aumatex through a transactional email service, planned on Resend, without automated marketing purposes and without selling data to third parties.

5. Retention

Form or email requests: up to 12 months from the last contact, unless a contractual relationship starts or further legal obligations apply.
Cloudflare and Vercel technical logs: for the technical retention periods applied by the providers and limited to security, debugging and infrastructure operation.
Cookie preferences: 180 days from the choice, unless relevant tool changes or earlier withdrawal occur.
Analytics data, if enabled: according to the service settings and within the limits of the consent given.

6. Providers and transfers

Aumatex uses technical providers for DNS, CDN, hosting, security, transactional email and domain management. Relevant providers may include Cloudflare, Vercel, Resend, Aumatex email providers and domain registrars. Where they process personal data on behalf of Aumatex, they act as processors under Article 28 GDPR.

Some providers may be based or have infrastructure outside the European Economic Area. In such cases, transfers rely on adequacy decisions, the Data Privacy Framework, Standard Contractual Clauses or other safeguards under Articles 44 et seq. GDPR.

7. Data subject rights

You may exercise your rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent by writing to info@aumatex.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it.

8. Updates

This notice may be updated following legal, technical or organisational changes. The applicable version is the one published on this page.