Privacy Policy

1. Data Controller

The Data Controller is:

BLENDX S.R.L.
Via della Balduina 96, 00136 Roma
P. IVA / C.F. 15299231009
Registered in the Rome Business Register under the special section for innovative startups.
Email: privacy@blendx.io

2. Types of data collected

Browsing data

The computer systems used to operate this website automatically collect certain data during normal use, such as IP addresses, browser type, operating system, pages visited, and access times.

Voluntarily provided data

We collect personal data you voluntarily provide through the following channels:

Contact form: name, email, company, message
Demo request: name, email, company, job role
Newsletter: email address

3. Purposes of processing

Personal data is processed for the following purposes:

Service delivery: responding to contact requests, managing demo requests, providing information about services.
Direct marketing: sending newsletters and marketing communications (only with explicit consent).
Statistical analysis: aggregated and anonymized analysis of website usage via Google Analytics.
Legal obligations: compliance with obligations under law, regulations, or European legislation.

4. Legal basis for processing

Consent (Art. 6.1.a GDPR): for sending newsletters and marketing communications.
Contractual performance (Art. 6.1.b GDPR): for responding to contact and demo requests.
Legitimate interest (Art. 6.1.f GDPR): for aggregated statistical analysis of website traffic.
Legal obligation (Art. 6.1.c GDPR): when processing is necessary to comply with a legal obligation.

5. Methods of processing

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are adopted to prevent loss, unlawful or improper use, and unauthorized access to data.

6. Data recipients

Personal data may be shared with the following third parties, acting as Data Processors:

CloudPepper (Odoo hosting): CRM management and storage of data collected through website forms.
Google LLC (Google Analytics, Google Tag Manager): statistical analysis of web traffic. Data is anonymized.
Cookiebot (Cybot A/S): cookie consent management.

Data is not sold or transferred to third parties for their own purposes.

7. Data transfer outside the EU

Some of our service providers (Google LLC) are based in the United States. Data transfers are governed by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection under the GDPR.

8. Data retention period

Contact and demo data: retained for 24 months from collection.
Newsletter data: retained until consent is withdrawn.
Browsing data: retained for 26 months (Google Analytics).

9. Data subject rights

Under Articles 15-22 of the GDPR, you have the right to:

Access — obtain confirmation of processing and access your data
Rectification — obtain correction of inaccurate data
Erasure — obtain erasure of your data ("right to be forgotten")
Restriction — obtain restriction of processing
Portability — receive your data in a structured, machine-readable format
Objection — object to processing on legitimate grounds
Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal

To exercise your rights, contact us at privacy@blendx.io.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

10. Cookie

This website uses technical, analytical, and profiling cookies. For detailed information about the cookies we use, please see our Cookie Policy.

11. Changes to this policy

The Data Controller reserves the right to make changes to this policy at any time, informing users on this page. Please check this page regularly.

12. Contact

For any questions regarding this policy or personal data processing:

BLENDX S.R.L.
Via della Balduina 96, 00136 Roma
Email: privacy@blendx.io