Privacy policy

1. Who we are

This privacy policy explains how Adesion Technologies S.r.l., a company registered in Milan, Italy (Via Giovanni Battista Pirelli, 12, 20124 Milano (MI), Italy, VAT/P.IVA IT12345678901, REA MI-2198453), collects, uses, and protects personal data when you visit adesion.it.com, use the Adesion product, or otherwise interact with us. Adesion Technologies S.r.l. is the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and applicable Italian data protection law.

2. Data we collect

We collect the following categories of personal data:

• Account data: name, work email address, company name, and role, provided when you create an account or request a demo.
• Contact form data: any information you submit through our contact form, including your message.
• Product usage data: log data, feature usage, and configuration settings within your Adesion workspace.
• Connected-tool metadata: when you connect a third-party tool (such as a CRM or helpdesk) to Adesion, we process the case, ticket, and handoff metadata necessary to build cross-tool timelines. We request read-only access and do not collect data beyond what you authorise during the connection process.
• Website analytics data: pages visited, referring URL, device and browser type, and approximate location derived from IP address, collected via cookies as described in our cookie policy.

3. How we use your data

We use personal data to:

• Provide, maintain, and improve the Adesion product;
• Respond to enquiries submitted through our contact form or by email;
• Send product updates, security notices, and (where you have consented) marketing communications;
• Monitor the security and integrity of our systems;
• Comply with legal obligations, including tax and accounting requirements under Italian law.

4. Legal basis for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract — to provide the Adesion product to customers under our terms of service;
• Legitimate interests — to respond to enquiries, secure our systems, and improve our product and website;
• Consent — for marketing communications and non-essential cookies, which you may withdraw at any time;
• Legal obligation — for accounting, tax, and other statutory record-keeping requirements.

5. Sharing and third parties

We do not sell personal data. We share personal data only with:

• Sub-processors who provide infrastructure, hosting, email delivery, or customer support tooling on our behalf, under written data processing agreements;
• Professional advisers (legal, accounting) where necessary for their services;
• Public authorities, where required by applicable law or a valid legal request.

A current list of sub-processors is available on request from legal@adesion.it.com.

6. International transfers

Personal data for customers based in the European Economic Area is stored and processed in EU data centres by default. Where data is transferred outside the EEA — for example to a sub-processor located elsewhere — we rely on the European Commission's Standard Contractual Clauses or another valid transfer mechanism recognised under GDPR.

7. Data retention

We retain account and product data for as long as your account is active. Following cancellation of an Adesion subscription, workspace data remains available for export for 30 days, after which it is permanently deleted from production systems, subject to any longer retention required by law (for example, invoicing records retained for 10 years under Italian tax law). Contact form submissions are retained for 24 months.

8. Your rights

If the GDPR applies to you, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request erasure of your data, subject to legal retention requirements;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or your local supervisory authority.

To exercise any of these rights, email privacy@adesion.it.com. We respond to verified requests within 30 days.

9. Security

We apply industry-standard technical and organisational measures, including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security reviews. No system is completely secure, and we encourage you to use a strong, unique password and enable available account protections.

10. Children's privacy

Adesion is a business product intended for use by professional users. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, please contact privacy@adesion.it.com and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified to registered users by email at least 15 days before taking effect. The "last updated" date at the top of this page always reflects the current version.

12. How to contact us

Adesion Technologies S.r.l.
Via Giovanni Battista Pirelli, 12, 20124 Milano (MI), Italy
Email: privacy@adesion.it.com