Privacy Policy

Last updated: 8 October 2026

1. Data controller

XANO O.V.
Via G. Santini 10, Noventa Padovana (PD), Italy
P.IVA 05504490284
Email: info@xano.it

2. What data we process

Browsing data. When you visit this website, the hosting provider's servers automatically record technical data needed to deliver the pages and keep the service secure. This includes your IP address, the date and time of the request, the page requested, the browser and operating system, and the referring page. We do not use this data to identify you.

Data you send us. If you write to us by email, we process your email address, your name if you give it, and anything you include in the message.

This website does not use cookies, analytics, tracking pixels, advertising tools, social media plugins or contact forms. See our Cookie Policy.

3. Why we process it, and on what legal basis

• Delivering the website and keeping it secure (browsing data). Legal basis: our legitimate interest in operating a functioning and secure website (Art. 6(1)(f) GDPR).
• Replying to your enquiry and, where relevant, preparing a quote (data you send us). Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering correspondence (Art. 6(1)(f) GDPR).
• Meeting legal obligations, such as tax and accounting requirements if a contract follows. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not use your data for marketing, profiling or automated decision-making.

4. Who processes the data for us

We use the following service providers, acting as data processors under written agreements:

• Vercel Inc. (United States): website hosting and delivery.
• Cloudflare, Inc. (United States): domain name service and email routing for info@xano.it.
• Our email provider, where messages sent to info@xano.it are delivered.

We do not sell or share your data with anyone else, except where required by law.

5. Transfers outside the European Union

Some of these providers are based in the United States or may process data there. Such transfers take place on the basis of the EU–US Data Privacy Framework where the provider is certified, or of the Standard Contractual Clauses approved by the European Commission, as set out in each provider's data processing terms.

6. How long we keep it

• Browsing data: for the limited period set by the hosting provider's logging, after which it is deleted automatically.
• Emails: for as long as needed to handle your request. If no contract follows, we delete them within 24 months.
• Contract and accounting records: for the period required by Italian law, generally 10 years.

7. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability (Articles 15 to 22 GDPR). To exercise any of these rights, write to info@xano.it. We will reply within one month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

8. Is providing data required?

No. You can browse this website without giving us any data beyond the technical data described above. If you choose not to email us, we simply cannot reply to you.

9. Changes to this policy

We may update this policy, for example if we add new services to the website. The date at the top shows when it last changed.