This policy explains how Synaptix.AI S.R.L. processes the personal data of visitors to this website, under Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 and, as regards artificial intelligence, Regulation (EU) 2024/1689 (the AI Act).

1. Data controller

The data controller is Synaptix.AI S.R.L. For any request concerning personal data, write to [email protected].

2. Data processed

While you browse, the site collects a minimal set of data:

• the page visited and the referring page;
• the date and time of the visit;
• approximate geographic location (country, region, city), derived from the IP address by the network infrastructure provider;
• clicks on outbound links, as counts.

The IP address is not stored: it is used in transit by the infrastructure provider to determine the geographic area only, and the resulting data is kept in aggregate form. No name, surname, contact details or other identifying data are collected, other than what you choose to send us at the email address below.

3. Purposes and legal bases

• Aggregate usage statistics — to understand which content is read and improve the site. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Security and availability — to keep the service running and prevent abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Replying to messages sent by email — to follow up on enquiries. Legal basis: pre-contractual measures or legitimate interest (Art. 6(1)(b) and 6(1)(f) GDPR).

4. Cookies

The public website uses no profiling, advertising or third-party cookies, and no persistent identifiers that would recognise visitors across visits. A technical session cookie is used solely to authenticate access to the private administration area, which is not available to visitors. For this reason no consent banner is shown.

5. Retention

Statistical data is retained in aggregate form for as long as necessary for the purposes above and in any case no longer than 24 months, after which it is deleted or irreversibly anonymised. Messages received by email are kept for as long as needed to handle the request and to meet legal obligations.

6. Recipients and transfers

Data is processed by authorised personnel and by the technical providers that host and deliver the site, appointed as processors under Art. 28 GDPR. Some of these providers may process data outside the European Economic Area; where this happens, the transfer relies on adequacy decisions or on standard contractual clauses approved by the European Commission. Data is never sold or otherwise disclosed to third parties.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to access your data and to obtain its rectification, erasure, restriction of processing and portability, as well as to object to processing based on legitimate interest. Requests can be made at [email protected] and are answered within one month. You may also lodge a complaint with your supervisory authority.

8. Automated decision-making

The site carries out no profiling and no automated decision-making producing legal effects or similarly significantly affecting individuals, within the meaning of Art. 22 GDPR.

9. Artificial intelligence and transparency (AI Act)

Synaptix.AI develops systems based on artificial intelligence. With reference to Regulation (EU) 2024/1689, the following applies.

• No AI systems operate on this website. These pages are static: no artificial intelligence system interacts with visitors, analyses their behaviour or infers characteristics about them.
• Transparency obligation. In products where an AI system is intended to interact with people, users are clearly and intelligibly informed that they are interacting with an artificial intelligence system, in accordance with Art. 50 of the Regulation.
• Synthetic content. Content generated or manipulated by our systems is identifiable as such.
• Prohibited practices. We do not employ the practices prohibited by Art. 5 of the Regulation, including manipulative techniques or exploitation of vulnerabilities, social scoring, emotion recognition in the workplace and in education, and biometric categorisation of sensitive data.
• Biometric data. No biometric data and no special categories of data under Art. 9 GDPR are processed through this website.
• Human oversight and data governance. Development follows principles of human oversight, quality and traceability of training data, technical documentation and risk management across the lifecycle, according to the risk level applicable to each system.

10. Changes

This policy may be updated to reflect changes in law or in the services offered. The date of the latest revision is shown at the top of the page.