Privacy Policy

1. Data controller

ELAI S.R.L. — Via Zara, 62 — Salerno, Italy. VAT number / Tax code 06313210657.

For information on privacy and to exercise your rights: info@el-ai.com.

PEC: el-ai@pec.it.

2. What data we process

• Navigation and safety: IP address, technical information transmitted by the browser and data from requests to the site, also used to limit repeated mailings and abuse.
• Contacts: name, email, telephone if provided, message, language and page from which the request is sent.
• Appointments: name, email, telephone number and notes, date and time requested and booking status.
• Purchases, when the store is available: data provided at checkout, products, amounts, order status and transaction and download references.
• Administrative area: account data, protected credentials and session information of authorized users.
• Preferences: language, blog view, possible cart and cookie choices, as described in the Cookie Policy.

In the free fields, enter only information useful for the request. Avoid health data, identity documents or other particularly sensitive information unless expressly necessary.

3. Purpose and legal bases

The data in the forms are used to respond, prepare a quote and organize the requested appointment. The basis is the execution of the pre-contractual measures requested by the interested party; for non-contractual information requests, the legitimate interest in managing correspondence.

If you purchase a product or request a service, the data necessary for order management, payment, digital delivery and assistance are processed to execute the contract. Accounting and tax obligations are based on applicable legal obligations.

Access control and the prevention of spam, fraud and abuse respond to the legitimate interest in protecting the site, systems and users. The same applies to the establishment or defense of a right, when necessary.

Any optional tracking tools require consent in the cases provided for by law. Sending a contact request does not constitute consent to receive advertising. The Cookie Policy describes the technical preferences and available controls.

4. Provision of data

You can consult the pages without filling out the forms. To receive a response you need at least your name and email; to book you must also indicate the date and time. If the mandatory fields are missing it is not possible to manage the request. Telephone and notes are optional when the form does not indicate them as mandatory.

The data requested for a purchase is necessary to manage it. Refusing optional cookies does not prevent access to the essential functions of the site.

5. Conservation

For contacts and appointments, the retention criterion is the time necessary to manage the request and its follow-up. If a contractual relationship arises, the execution, assistance and documentation requirements of that relationship also apply.

For tax and accounting documents, the terms established by law apply. The data necessary for a dispute may be retained for its management and for the terms of protection of applicable rights. The preservation of technical data depends on the needs of operation and accident verification; that of the accounts by the duration of the activation and any subsequent security needs.

The durations of cookies and local memories are in the Cookie Policy. Some browser memories do not expire automatically: you can delete them from your device settings. You can ask the owner for information on the storage of data relating to your specific request.

6. Recipients and external services

The site uses a VPS from the provider Contabo located in Europe. The infrastructure hosts the site services; for information on the data center and on the storage of backup copies you can contact the owner.

The data is managed by the owner and authorized persons for the activities of their respective competence. Hosting, IT maintenance and communications providers, consultants for administrative obligations and authorities may be involved in the cases provided for by law.

When external services are used for appointment confirmations or payments, they receive the information necessary for the requested function. They operate as data controllers or independent data controllers based on the role actually performed. You can ask the owner for details on the recipients involved in your case.

7. International Transfers

Links, maps, calendars and other external content may involve communications with the relevant provider, including the IP address. Consult the service information before using it.

Any use of providers processing data outside the European Economic Area requires a basis for transfer under the GDPR, such as an adequacy decision or appropriate safeguards. To find out about applicable countries, suppliers and guarantees, and obtain a copy of the relevant guarantees, contact the owner.

8. Rights and complaints

In the cases and within the limits established by the GDPR you can request access and copy of the data, rectification, cancellation, limitation of processing and portability. You can object to processing based on legitimate interest for reasons related to your situation, and at any time to direct marketing.

When the processing is based on consent, you can revoke it without prejudice to what was done lawfully before the revocation. For cookies use the commands described in the Cookie Policy; for other data, write to the owner, indicating the request and the information needed to identify it.

Feedback is usually expected within a month. In case of particular complexity, the deadline can be extended by another two months, informing you within the first month. Identity verification commensurate with the request may be requested.

You can file a complaint at Guarantor for the protection of personal data or to the competent supervisory authority, and resort to other forms of protection provided by law.

9. Automated decisions and updates

The contact and booking functions do not provide decisions based exclusively on automated processing that produces legal or similarly significant effects on the person. Checks against repeated mailings serve the security of the service.

This information may change when services or treatments change. The date at the top identifies the revision of the contents. The main references are articles 12–22 of Regulation (EU) 2016/679 (GDPR).