Privacy Policy

    Last updated: July 13, 2026

    1. Data Controller

    The data controller is ICONICO SRL, with registered office in Italy.
    Contact email: hello@iconi.co

    2. Collected Data

    We collect the following categories of personal data:

    • Browsing data: IP address, browser type, operating system, pages visited, date and time of access. This data is collected automatically through the computer systems that manage the site.
    • Data provided voluntarily: first name, last name, email address, and any other information provided through contact forms, Calendly bookings, or direct communications.
    • Usage data: anonymous and aggregate information on site usage, collected through analytical cookies (if accepted).
    • Papers newsletter subscription: the email address entered in the form on the Papers page is stored in our database to send future AI Strategy Papers. You can unsubscribe at any time by writing to hello@iconi.co.
    • Papers download analytics: when the PDF download buttons are clicked, we record the chosen language (IT/EN), date and time, IP address, country, browser type (user agent), referrer, and page URL. This data is used solely for internal statistical analysis of interest in published papers.

    3. Purposes of Processing

    Personal data is processed for the following purposes:

    • Provision of requested services and management of contact requests.
    • Improvement of the browsing experience and statistical analysis of traffic.
    • Compliance with legal and regulatory obligations.
    • Sending commercial communications, subject to explicit consent.
    • Sending the AI Strategy Papers newsletter to subscribers who have requested it.
    • Statistical measurement of paper downloads (number, language, geographic origin).

    4. Legal Basis of Processing

    Data processing is based on: data subject's consent (Art. 6.1.a GDPR), performance of a contract or pre-contractual measures (Art. 6.1.b GDPR), compliance with legal obligations (Art. 6.1.c GDPR), legitimate interest of the controller (Art. 6.1.f GDPR).

    5. Data Sharing

    Personal data is not sold to third parties. It may be shared with:

    • Technical service providers (hosting, database, edge functions, analytics) acting as data processors, including Lovable Cloud (infrastructure based on Supabase) for database and server function management.
    • Competent authorities, if required by law.

    6. Data Transfer

    Some third-party services used (e.g., Calendly, analytics platforms) may involve the transfer of data outside the European Economic Area. In such cases, the transfer takes place in compliance with the guarantees provided by the GDPR (adequacy decisions, standard contractual clauses).

    7. Data Retention

    Personal data is kept for the time necessary to achieve the purposes for which it was collected and in any case no longer than the terms provided by current legislation. In particular: email addresses of Papers newsletter subscribers are kept until an unsubscribe request is received; paper download logs are kept for a maximum of 24 months for statistical analysis purposes.

    8. Data Subject Rights

    Pursuant to Artt. 15-22 of the GDPR, the data subject has the right to:

    • Access their personal data.
    • Request rectification or deletion of data.
    • Restrict or object to processing.
    • Request data portability.
    • Withdraw consent at any time.
    • Lodge a complaint with the Data Protection Authority.

    To exercise your rights, write to: hello@iconi.co

    9. Changes to this Privacy Policy

    ICONICO SRL reserves the right to update this policy. Changes will be published on this page with an indication of the last updated date.