Privacy and Cookie Policy

Last updated: 25 September 2026

This is an English translation of the Italian version, which prevails in case of discrepancy.

Part 1 — Privacy Notice

pursuant to Articles 13-14 of EU Regulation 2016/679 ("GDPR")

1. Data controller

The controller of the personal data collected through this website is:

Keit AI Srls
Registered office: Via S. Gervasio 98, Trani (BT), Italy
VAT No. / Tax Code: 09204540729
Email: info@keit-ai.com
Certified email (PEC): keit.ai@pec.it

represented by its legal representative pro tempore.

To exercise the rights described in the "Data subject rights" section, or for any information on the processing of personal data, you can contact the Controller at the details above.

2. Data collected, purposes and legal basis

The website does not use analytics, profiling or advertising tools. Personal data is collected only when users provide it voluntarily through the contact form or by writing to the addresses indicated.

Providing the data needed to answer a request is optional, but without it the Controller cannot follow up on the request. Consent to receive communications is always optional, does not affect the reply to the request and can be withdrawn at any time, without affecting the lawfulness of processing already carried out.

3. Processing methods and security measures

Personal data is processed with IT and electronic tools, using methods strictly related to the stated purposes and in a way that ensures its security and confidentiality. The Controller adopts technical and organisational measures appropriate to the risk, including access control, encryption of communications (HTTPS protocol) and restricting access to data to authorised personnel only.

4. Data processors and recipients

Data may be processed on behalf of the Controller by providers acting as data processors under Art. 28 GDPR:

• Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, United States — website hosting and receipt of messages sent through the contact form;
• Squarespace Domains (a Squarespace, Inc. group company), 225 Varick Street, New York, NY 10014, United States — registration of the keit-ai.com domain and management of its DNS records;
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — email and document storage services (Google Workspace) used by the Controller to receive and store requests;
• consultants and professionals assisting the Controller with legal obligations (e.g. accountant).

An up-to-date list of processors can be requested from the Controller. Data is not disclosed to the public.

5. Transfers of data outside the EU

Some providers are based, or use infrastructure, outside the European Economic Area (in particular in the United States). In such cases the transfer takes place on the basis of the safeguards provided for in Chapter V of the GDPR, such as the provider’s participation in the EU-US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.

6. Retention period

• Data collected through the contact form: for the time needed to handle the request and, if no contractual relationship follows, for a maximum of 24 months from the last contact.
• Data processed to send communications: until consent is withdrawn.
• Data processed under a contractual relationship: for the duration of the relationship and thereafter for the period required by tax and civil law (usually 10 years).

7. Data subject rights

Under the conditions set out in Articles 15-22 GDPR, data subjects may exercise the following rights against the Controller:

• access to their personal data (Art. 15);
• rectification of inaccurate data or completion of incomplete data (Art. 16);
• erasure of data, in the cases provided for by law (Art. 17);
• restriction of processing (Art. 18);
• data portability, where technically feasible (Art. 20);
• objection to processing, in particular for direct marketing purposes (Art. 21);
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7.3).

Rights can be exercised by writing to the Controller. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Minors

The website is not intended for children under 16 and the Controller does not knowingly collect personal data from minors. If it becomes aware of having collected such data, it will delete it promptly.

9. Changes to this notice

The Controller may amend or update this notice, including following changes in legislation or the introduction of new tools on the website. The date of the last update is shown at the top of the document.

Part 2 — Cookie Policy

1. What cookies are

Cookies are small text files that the websites you visit store on your device. Similar technologies, such as browser local storage, are subject to the same rules.

2. Tools used by this website

This website uses technical tools only, which are necessary for it to work. It does not use analytics, profiling or third-party cookies, and therefore requires neither user consent nor a cookie banner, in accordance with the Guidelines of the Italian Data Protection Authority (Decision no. 231 of 10 June 2021).

3. How to manage cookies from your browser

You can delete stored data and block it from being stored through your browser settings:

• Google Chrome: https://support.google.com/chrome/answer/95647
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge

4. Updates

If the website introduces tools other than technical ones in the future (for example analytics tools or embedded third-party content), this Cookie Policy will be updated and, where required, a consent banner will be introduced before they are activated.