YecoAI

Privacy Policy

Privacy Policy

This notice explains how YecoAI di Marco Nasi ("we," "our," or "us") collects, uses, and protects personal data when you use www.yecoai.com and related services, pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

1. Data Controller

Controller: YecoAI di Marco Nasi, Sole proprietorship (Ditta individuale), VAT / Codice Fiscale 04219920040, Via Vecchia di Frabosa 10, 12084 Mondovì (CN), Italy.

Email: [email protected] · PEC: [email protected]. No Data Protection Officer (DPO) is currently appointed under Art. 37 GDPR.

2. Data We Collect

  • Contact form — full name, company email, and message content when you submit the contact form on this website
  • Email / PEC communications — email address and message content when you write to us
  • Analytics (only with cookie-banner consent) — Google Analytics (GA4): anonymized usage such as pages viewed, time on site, and country-level location
  • Technical logs — IP address, user agent, and security-related events as needed for website security and abuse prevention

We do not intentionally collect special categories of data (Art. 9 GDPR) via this website. Please do not submit sensitive data in free-text fields.

  • Respond to inquiries and support (contact form, email, PEC) — Art. 6(1)(b) pre-contractual steps / performance of a contract, or Art. 6(1)(f) legitimate interest in answering business requests
  • Deliver purchased services and account administration — Art. 6(1)(b)
  • Analytics cookies (Google Analytics) — Art. 6(1)(a) consent via the cookie banner
  • Website security, spam prevention, essential functionality — Art. 6(1)(f) legitimate interest
  • Legal obligations (tax, accounting, authority requests) — Art. 6(1)(c)
  • Research updates / newsletter (if you subscribe) — Art. 6(1)(a) consent; you may withdraw anytime

4. Data Retention

  • Contact form and email communications — up to 2 years from last interaction (earlier deletion on request, unless a longer legal retention applies)
  • Google Analytics — 14 months (GA4 property setting); user-level data anonymized thereafter per Google settings
  • Cookie consent records — localStorage up to 6 months, then the banner renews
  • Contract / billing records — as required by Italian tax law (typically 10 years)

After expiry: securely deleted or anonymized. Earlier deletion on request where legally allowed.

5. Cookies and Tracking

See the Cookie Policy for the cookie table. Categories: Necessary (always on); Analytics (Google Analytics, only after Accept analytics).

6. Your Rights

Under Arts. 15–22 GDPR you may: access; rectify; erase; restrict processing (Art. 18); object (Art. 21); data portability (Art. 20); withdraw consent at any time (Art. 7(3)) without affecting prior lawful processing. Exercise: [email protected] — Subject: "Legal - Privacy Request". We respond within one month (extendable under Art. 12(3)).

Complaint: Garante per la protezione dei dati personali — www.garanteprivacy.it — Piazza Venezia 11, 00187 Rome, Italy (Art. 77 GDPR).

7. Recipients and Processors

Personal data may be processed on our behalf by providers acting as processors under Art. 28 GDPR, including: website hosting and CMS infrastructure; email delivery; Google Ireland Ltd / Google LLC for Google Analytics (after consent). A current list of processors is available on request at [email protected]. We do not sell, rent, or share personal data for third-party marketing.

8. International Transfers

Google Analytics may process data outside the EEA (primarily the United States). Where required, transfers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. A copy of the relevant safeguards is available on request.

9. Automated Decision-Making and Profiling

No automated decision-making or profiling producing legal or similarly significant effects under Art. 22 GDPR. Analytics provide aggregated reports only.

10. AI Systems & Data Processing

Some products may use AI to process support tickets, queries, or context to deliver the requested service. We do not train shared AI models on personal data without a lawful basis (typically explicit consent or another Art. 6 basis disclosed in the product terms). Humans may review AI outputs for QA/compliance under confidentiality. See AI Transparency.

11. Data Security

Appropriate technical and organizational measures are in place. No Internet transmission is 100% secure.

12. Contact

[email protected] — Subject: "Legal - Privacy" · YecoAI di Marco Nasi — VAT 04219920040 — PEC: [email protected]