Privacy Policy

Last updated: 19/09/2025

1) Who we are

  • Data Controller: OpenValue (“Controller”)

  • Registered office: Piazza Piero Gobetti, 10 – 20131 Milan, Italy

  • Contact e-mail: info@openvalue.cloud

  • Website hosting: Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy, with servers located in Italy/EU.

2) Types of data we process

  • Data provided via the contact form: first name, last name, e-mail address, message text and any other information you freely include.

  • Technical/browsing data (logs): aggregated information necessary for the operation and security of the website.

  • Technical cookies (see Cookie Policy): language, time zone, session management.

3) Purposes and legal bases

  • Handling enquiries submitted through the contact form: replying to your questions and sending information you request.
    Legal basis: your consent (Art. 6(1)(a) GDPR) via the checkbox “I authorize the processing…”. Alternatively or in parallel, performance of pre-contractual measures at your request (Art. 6(1)(b)).

  • Website operation and security (technical cookies, logs): provision of the online service, security and abuse prevention.
    Legal basis: the Controller’s legitimate interest (Art. 6(1)(f)) and/or necessity to provide the service (Art. 6(1)(b)).

  • Legal compliance (where applicable).
    Legal basis: legal obligation (Art. 6(1)(c)).

4) Nature of provision

  • Contact form: providing your data is optional but necessary to receive a response; without ticking the consent checkbox we may be unable to reply.

  • Technical cookies: necessary for the website to function; no consent required.

5) Recipients / Processors

External providers (Art. 28 GDPR) – Hosting and e-mail

For web hosting and e-mail we use Aruba S.p.A., which acts as a Processor under Art. 28 GDPR.
Data processed: browsing data and technical logs generated by the systems; communication metadata and contact details used to manage e-mails sent to/from info@openvalue.cloud; any backups and data required for service continuity.
Location of processing: European Union (primarily Italy). Extra-EU transfers: not envisaged for the services indicated.
Provider’s privacy notice: Aruba S.p.A. – Privacy Policy.

6) Transfers outside the EEA

Processing takes place in Italy/EU. We do not envisage transfers to non-EEA countries. If future transfers become necessary, we will adopt appropriate safeguards (Arts. 44–49 GDPR) and update this notice.

7) Retention periods

  • Form enquiries: up to 12 months from the last contact (unless longer retention is necessary to establish, exercise or defend legal claims).

  • Security/technical logs: generally 7–30 days, with possible extensions in case of incidents.

  • Technical cookies: for the durations indicated in the Cookie Policy.

8) Security

We implement appropriate technical and organisational measures to protect personal data (Art. 32 GDPR).

9) Your rights

You may exercise your rights under Arts. 15–22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) by writing to info@openvalue.cloud. You also have the right to lodge a complaint with the competent Supervisory Authority.

10) Privacy contact & DPO

  • Privacy contact: info@openvalue.cloud

  • DPO: not appointed; the conditions under Art. 37 GDPR do not apply. For any privacy request, please use the contact above.

11) Minors

This website is not intended for children under 14/16 (depending on the national law applicable).

12) Changes

We may update this notice from time to time. The current version is published on this page with the “Last updated” date shown above.