Privacy notice

The data we collect

Our forms require your name and email address to handle your enquiry. Company, mobile number and message are optional. Please do not include special categories of data, such as health information, or unnecessary information about other people.

We also record the selected area of expertise, service, project or topic, any related success story, the source page, language, submission date and any campaign parameters in the link you used. We retain your privacy and marketing choices, the text displayed and a reference to the notice version.

For operation and security, IP addresses, technical browser information, access logs and account identifiers may be processed when access is managed by the hosting platform. The form protection system temporarily uses cryptographic hashes of email addresses and IP addresses to limit repeated submissions.

For the Decision Models guide, name, business email and company are required. We record the requested resource, registration and download times, and request and download counts. The download does not subscribe you to marketing communications.

Why we use data and the legal basis

Handling enquiries: we use your data to respond, understand your needs, arrange a conversation and, if requested, prepare a proposal. The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR) or, for other professional enquiries, our legitimate interest in managing correspondence and business relationships (Article 6(1)(f)).

Marketing communications: only if you tick the separate optional box may we contact you by email or mobile phone about relevant ICAREX services, initiatives and content. The legal basis is consent (Article 6(1)(a)). You may withdraw it at any time by emailing info@icarex.ai, without affecting the lawfulness of earlier processing. Marketing consent is not required to submit an enquiry.

Operation, security and legal protection: we process technical data to keep the website operational, prevent abuse and protect our rights, on the basis of legitimate interests (Article 6(1)(f)). Any mandatory legal requirements are based on applicable law (Article 6(1)(c)).

The mandatory form checkbox records that you have read the notice and requested processing to handle your enquiry; it remains separate from the optional marketing choice. The applicable legal bases are those described above.

What happens when you submit a form

Contact enquiries are saved in the lead archive and made available to authorised staff in a restricted dashboard. We send an internal notification and an acknowledgement to the contact. Guide registrations are also available in the dashboard and generate an internal notification; the PDF is provided directly on the website. We record the technical email status, attempts and provider identifiers.

The confirmation is tailored to your language, area of expertise and selected interest. Additional promotional content requires marketing consent. Personalisation uses these declared choices and does not involve automated decisions with legal or similarly significant effects. The lead collection system does not send form data to AI models.

Required fields must be completed so that we can respond. Leaving optional fields empty does not prevent submission. If the form is unavailable, you may email info@icarex.ai directly.

Who can access data

Data is accessible to authorised staff and the providers needed to deliver our services, in accordance with their respective roles and applicable instructions. We do not sell contact data. Information may also be shared with advisers or authorities where necessary to comply with legal obligations or protect rights.

The website uses OpenAI’s ChatGPT Sites hosting platform and Cloudflare infrastructure, including runtime and database services. Resend sends confirmation emails and internal notifications. Communications also reach the recipient’s email providers. Any required access functions are managed by the hosting platform.

You may ask info@icarex.ai for up-to-date information about recipients and providers. Provider privacy notices are linked at the end of this page.

Where data is processed

Processing takes place at the controller and through provider services. Some services may involve processing or access outside the European Economic Area, including in the United States; Resend identifies the United States as its primary processing location.

Transfers outside the EEA must use the safeguards required by the GDPR, such as adequacy decisions or standard contractual clauses, depending on the service and transfer concerned. You can request information about the safeguards used and a copy or details of where to find them by emailing info@icarex.ai.

How long we retain data

Enquiry data is retained for as long as needed to manage the contact and any subsequent commercial or contractual relationship. The period depends on the nature and status of the enquiry, continuation of the relationship and applicable obligations. Data that is no longer needed is to be deleted or anonymised unless there is a justified reason to retain it.

For marketing, processing continues while consent is valid and the original purpose remains relevant. If you withdraw consent or object, promotional use stops; the minimum information necessary to respect that choice and evidence of consent or communications may be retained where needed for obligations or the protection of rights.

Technical anti-abuse counters for forms expire after two hours and are cleared during subsequent requests. Providers’ technical data and logs follow their security requirements and retention periods. Contact us to find out which retention period applies to your enquiry.

Cookies, local storage and external links

The current website uses technical cookies only, for hosting security, access and the requested guide download. It does not integrate advertising analytics, profiling pixels or optional game storage. Cookie settings are available in every footer; the complete inventory and durations are in the cookie policy.

After guide registration, a secure, HttpOnly, SameSite cookie grants access to the PDF for 30 minutes. It contains a random token; only its cryptographic hash is saved on the server. Expired sessions are removed on subsequent registrations.

External links lead to services with their own notices. Contact marketing consent is separate from technical cookie settings.

Your rights

Subject to the GDPR’s conditions and limits, you may request access, rectification, erasure, restriction and portability where applicable. You may object to processing based on legitimate interests on grounds relating to your situation; you may object to direct marketing at any time. You may also withdraw consent without affecting the lawfulness of earlier processing.

Email info@icarex.ai with your request. We may ask for proportionate information to verify your identity. We normally respond within one month, with extensions where permitted by law. Exercising your rights is normally free of charge.

If you believe processing infringes data protection law, you may complain to the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or the competent supervisory authority, and seek the judicial remedies available to you.

Changes to this notice

This notice covers the ICAREX website and its contact forms. Contractual services involving additional processing may have separate notices. We will update this page when the processing described changes, showing the revision date and providing further information where required.

The data we collect

Our forms require your name and email address to handle your enquiry. Company, mobile number and message are optional. Please do not include special categories of data, such as health information, or unnecessary information about other people.

We also record the selected area of expertise, service, project or topic, any related success story, the source page, language, submission date and any campaign parameters in the link you used. We retain your privacy and marketing choices, the text displayed and a reference to the notice version.

For operation and security, IP addresses, technical browser information, access logs and account identifiers may be processed when access is managed by the hosting platform. The form protection system temporarily uses cryptographic hashes of email addresses and IP addresses to limit repeated submissions.

Why we use data and the legal basis

Handling enquiries: we use your data to respond, understand your needs, arrange a conversation and, if requested, prepare a proposal. The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR) or, for other professional enquiries, our legitimate interest in managing correspondence and business relationships (Article 6(1)(f)).

Marketing communications: only if you tick the separate optional box may we contact you by email or mobile phone about relevant ICAREX services, initiatives and content. The legal basis is consent (Article 6(1)(a)). You may withdraw it at any time by emailing info@icarex.ai, without affecting the lawfulness of earlier processing. Marketing consent is not required to submit an enquiry.

Operation, security and legal protection: we process technical data to keep the website operational, prevent abuse and protect our rights, on the basis of legitimate interests (Article 6(1)(f)). Any mandatory legal requirements are based on applicable law (Article 6(1)(c)).

The mandatory form checkbox records that you have read the notice and requested processing to handle your enquiry; it remains separate from the optional marketing choice. The applicable legal bases are those described above.

What happens when you submit a form

Your enquiry is saved in our lead database and made available to authorised staff through a restricted area. A notification is sent to our internal contacts and a confirmation to the email address you provided. We record the technical sending status, attempts and identifiers returned by the email service.

The confirmation is tailored to your language, area of expertise and selected interest. Additional promotional content requires marketing consent. Personalisation uses these declared choices and does not involve automated decisions with legal or similarly significant effects. The lead collection system does not send form data to AI models.

Required fields must be completed so that we can respond. Leaving optional fields empty does not prevent submission. If the form is unavailable, you may email info@icarex.ai directly.

Who can access data

Data is accessible to authorised staff and the providers needed to deliver our services, in accordance with their respective roles and applicable instructions. We do not sell contact data. Information may also be shared with advisers or authorities where necessary to comply with legal obligations or protect rights.

The website uses OpenAI’s ChatGPT Sites hosting platform and Cloudflare infrastructure, including runtime and database services. Resend sends confirmation emails and internal notifications. Communications also reach the recipient’s email providers. Any required access functions are managed by the hosting platform.

You may ask info@icarex.ai for up-to-date information about recipients and providers. Provider privacy notices are linked at the end of this page.

Where data is processed

Processing takes place at the controller and through provider services. Some services may involve processing or access outside the European Economic Area, including in the United States; Resend identifies the United States as its primary processing location.

Transfers outside the EEA must use the safeguards required by the GDPR, such as adequacy decisions or standard contractual clauses, depending on the service and transfer concerned. You can request information about the safeguards used and a copy or details of where to find them by emailing info@icarex.ai.

How long we retain data

Enquiry data is retained for as long as needed to manage the contact and any subsequent commercial or contractual relationship. The period depends on the nature and status of the enquiry, continuation of the relationship and applicable obligations. Data that is no longer needed is to be deleted or anonymised unless there is a justified reason to retain it.

For marketing, processing continues while consent is valid and the original purpose remains relevant. If you withdraw consent or object, promotional use stops; the minimum information necessary to respect that choice and evidence of consent or communications may be retained where needed for obligations or the protection of rights.

Technical anti-abuse counters for forms expire after two hours and are cleared during subsequent requests. Providers’ technical data and logs follow their security requirements and retention periods. Contact us to find out which retention period applies to your enquiry.

Cookies, local storage and external links

The website does not embed advertising analytics tools or profiling pixels in its own content. The hosting platform may use technical technologies needed for access, sessions, operation and security.

Only with your consent to Preferences does the mini-game save the high score in local storage on your device. This value is not sent to the lead database. The technical cookie icarex_consent_v1 records your choice, version, date and expiry for six months. Use “Cookie preferences” in the footer to change your choice or withdraw consent: the local score is then removed. Form entries are not saved by the website in persistent browser storage.

Links to maps, platforms and external websites lead to services with their own privacy notices. Providing a link does not embed their tracking tools in the page. The Cookie policy describes technologies, purposes, providers and durations. Browsing or scrolling alone never enables optional functions. We will update notices and choices before introducing further technologies that require consent.

Your rights

Subject to the GDPR’s conditions and limits, you may request access, rectification, erasure, restriction and portability where applicable. You may object to processing based on legitimate interests on grounds relating to your situation; you may object to direct marketing at any time. You may also withdraw consent without affecting the lawfulness of earlier processing.

Email info@icarex.ai with your request. We may ask for proportionate information to verify your identity. We normally respond within one month, with extensions where permitted by law. Exercising your rights is normally free of charge.

If you believe processing infringes data protection law, you may complain to the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or the competent supervisory authority, and seek the judicial remedies available to you.

Changes to this notice

This notice covers the ICAREX website and its contact forms. Contractual services involving additional processing may have separate notices. We will update this page when the processing described changes, showing the revision date and providing further information where required.

This notice explains how we handle personal data when you visit this website, contact us or choose to receive marketing communications. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

The data we collect

Our forms require your name and email address to handle your enquiry. Company, mobile number and message are optional. Please do not include special categories of data, such as health information, or unnecessary information about other people.

We also record the selected area of expertise, service, project or topic, any related success story, the source page, language, submission date and any campaign parameters in the link you used. We retain your privacy and marketing choices, the text displayed and a reference to the notice version.

For operation and security, IP addresses, technical browser information, access logs and account identifiers may be processed when access is managed by the hosting platform. The form protection system temporarily uses cryptographic hashes of email addresses and IP addresses to limit repeated submissions.

Why we use data and the legal basis

Handling enquiries: we use your data to respond, understand your needs, arrange a conversation and, if requested, prepare a proposal. The legal basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR) or, for other professional enquiries, our legitimate interest in managing correspondence and business relationships (Article 6(1)(f)).

Marketing communications: only if you tick the separate optional box may we contact you by email or mobile phone about relevant ICAREX services, initiatives and content. The legal basis is consent (Article 6(1)(a)). You may withdraw it at any time by emailing info@icarex.ai, without affecting the lawfulness of earlier processing. Marketing consent is not required to submit an enquiry.

Operation, security and legal protection: we process technical data to keep the website operational, prevent abuse and protect our rights, on the basis of legitimate interests (Article 6(1)(f)). Any mandatory legal requirements are based on applicable law (Article 6(1)(c)).

The mandatory form checkbox records that you have read the notice and requested processing to handle your enquiry; it remains separate from the optional marketing choice. The applicable legal bases are those described above.

What happens when you submit a form

Your enquiry is saved in our lead database and made available to authorised staff through a restricted area. A notification is sent to our internal contacts and a confirmation to the email address you provided. We record the technical sending status, attempts and identifiers returned by the email service.

The confirmation is tailored to your language, area of expertise and selected interest. Additional promotional content requires marketing consent. Personalisation uses these declared choices and does not involve automated decisions with legal or similarly significant effects. The lead collection system does not send form data to AI models.

Required fields must be completed so that we can respond. Leaving optional fields empty does not prevent submission. If the form is unavailable, you may email info@icarex.ai directly.

Who can access data

Data is accessible to authorised staff and the providers needed to deliver our services, in accordance with their respective roles and applicable instructions. We do not sell contact data. Information may also be shared with advisers or authorities where necessary to comply with legal obligations or protect rights.

The website uses OpenAI’s ChatGPT Sites hosting platform and Cloudflare infrastructure, including runtime and database services. Resend sends confirmation emails and internal notifications. Communications also reach the recipient’s email providers. Any required access functions are managed by the hosting platform.

You may ask info@icarex.ai for up-to-date information about recipients and providers. Provider privacy notices are linked at the end of this page.

Where data is processed

Processing takes place at the controller and through provider services. Some services may involve processing or access outside the European Economic Area, including in the United States; Resend identifies the United States as its primary processing location.

Transfers outside the EEA must use the safeguards required by the GDPR, such as adequacy decisions or standard contractual clauses, depending on the service and transfer concerned. You can request information about the safeguards used and a copy or details of where to find them by emailing info@icarex.ai.

How long we retain data

Enquiry data is retained for as long as needed to manage the contact and any subsequent commercial or contractual relationship. The period depends on the nature and status of the enquiry, continuation of the relationship and applicable obligations. Data that is no longer needed is to be deleted or anonymised unless there is a justified reason to retain it.

For marketing, processing continues while consent is valid and the original purpose remains relevant. If you withdraw consent or object, promotional use stops; the minimum information necessary to respect that choice and evidence of consent or communications may be retained where needed for obligations or the protection of rights.

Technical anti-abuse counters for forms expire after two hours and are cleared during subsequent requests. Providers’ technical data and logs follow their security requirements and retention periods. Contact us to find out which retention period applies to your enquiry.

Cookies, local storage and external links

The website does not embed advertising analytics tools or profiling pixels in its own content. The hosting platform may use technical technologies needed for access, sessions, operation and security.

The mini-game saves only the highest score in local storage on your device. This value is not sent to the lead database and can be removed by clearing the website’s browser data. Form entries are not saved by the website in persistent browser storage.

Links to maps, platforms and external websites lead to services with their own privacy notices. Providing a link does not embed their tracking tools in the page. If we introduce technologies requiring consent, we will update this notice and the relevant choices before enabling them.

Your rights

Subject to the GDPR’s conditions and limits, you may request access, rectification, erasure, restriction and portability where applicable. You may object to processing based on legitimate interests on grounds relating to your situation; you may object to direct marketing at any time. You may also withdraw consent without affecting the lawfulness of earlier processing.

Email info@icarex.ai with your request. We may ask for proportionate information to verify your identity. We normally respond within one month, with extensions where permitted by law. Exercising your rights is normally free of charge.

If you believe processing infringes data protection law, you may complain to the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or the competent supervisory authority, and seek the judicial remedies available to you.

Changes to this notice

This notice covers the ICAREX website and its contact forms. Contractual services involving additional processing may have separate notices. We will update this page when the processing described changes, showing the revision date and providing further information where required.