Privacy Policy
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) — Last updated: 5 November 2026. The Italian version is the reference text.
1. Data controller
Holocryptics.com, sole proprietorship of Alessia Mior
Registered office: Via Filippo Turati 17, 10086 Rivarolo Canavese (TO), Italy
VAT no. (P.IVA): 12693640018
Privacy contact: contact@holocryptics.com
Website: www.holocryptics.com
2. Data Protection Officer (DPO)
No DPO has been appointed because it is not mandatory under Article 37 GDPR: the Controller is not a public authority and its core activities consist neither of regular and systematic monitoring of data subjects on a large scale (Art. 37(1)(b)) nor of large-scale processing of special categories of data or data relating to criminal convictions and offences (Art. 37(1)(c)). For any privacy matter you can write directly to the Controller at contact@holocryptics.com.
3. What data we process, why and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Request sent through the contact / demo form: name, email address, message text and any other information you choose to write | Replying to your request, providing information, preparing a quote or a demo | Art. 6(1)(b) GDPR: pre-contractual measures taken at your request; alternatively point (f) (legitimate interest in answering the requests received) | 24 months from the request, then deletion. If a contract follows, the data needed for the relationship are processed as provided by the contract and by legal obligations (e.g. accounting and tax records) |
| Technical security data of the form: non-reversible hash of the IP address and the browser user agent | Preventing spam and abuse of the form and keeping it secure (limit of requests per visitor) | Art. 6(1)(f) GDPR: legitimate interest in the security of the site | Automatically removed 30 days after the request |
| Web server technical logs: IP address, date and time, requested page, user agent | Operation, security and diagnosis of the site | Art. 6(1)(f) GDPR: legitimate interest in the security and proper functioning of the site | For the period strictly necessary set by the hosting provider, normally no longer than 12 months |
We do not collect special categories of data (Art. 9 GDPR), and we ask you not to include them in your message. We do not carry out profiling or direct marketing, and we do not send newsletters: if we do so in the future, we will ask for your specific consent and update this notice.
Providing the form data is optional, but without name, email and message we cannot reply to your request.
4. Who we share data with (recipients)
Data are not sold or passed on to third parties for their own purposes. They are processed by the Controller and by providers acting as processors (Art. 28 GDPR), only to deliver the service:
- OVH SAS (France, European Union) — website hosting.
- Vercel Inc. (United States) — infrastructure that receives the contact form.
- Supabase Inc. (United States; data are hosted on servers in the European Union, Ireland region) — database where the request is stored.
- Resend, Inc. (United States) — sending the notification email to the Controller.
- The Controller's email service provider, which receives the messages sent to contact@holocryptics.com.
5. Transfers of data outside the European Economic Area
Some of the providers listed above are based or have infrastructure in the United States. Transfers take place with the safeguards provided by Chapter V GDPR: an adequacy decision of the European Commission for companies adhering to the EU-US Data Privacy Framework, or Standard Contractual Clauses (Articles 45 and 46 GDPR). You can ask us for a copy of the safeguards by writing to the Controller.
6. Security
We adopt appropriate technical and organisational measures: encrypted connection (HTTPS), access to data limited to authorised people, systems protected by confidential credentials, and non-reversible hashes instead of the IP address in the form data.
7. Your rights
You have the right to obtain at any time: access to your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). To exercise them write to contact@holocryptics.com: we will reply within one month (extendable by two months in complex cases, with notice). You can also lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy — www.garanteprivacy.it.
8. Automated decisions
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you (Art. 22 GDPR).
9. Cookies
The site does not use cookies or tracking tools. For details see the Cookie Policy.
10. Links to third-party sites
The site contains links to our profiles on TikTok, Instagram, Facebook, YouTube and LinkedIn. These services are run by third parties with their own notices and cookies: until you click a link, no data is sent to these platforms.
11. Changes to this notice
We may update this notice, for example if services or the law change. The version in force is always the one published on this page, with the date of the latest update.