Privacy & Cookie Policy
Last updated: 27 February 2026
Information on the processing of personal data and cookies, pursuant to EU Regulation 2016/679 (GDPR).
1. Data Controller
AYROMEX S.R.L., registered in Romania (Trade Reg.: J2025044424001 – VAT EU: RO52014564), operational in Bari, Italy. For any queries regarding the processing of your personal data, contact us at: privacy@ayromex.com
2. Types of Data Collected
- Navigation data: IP addresses, browser type, pages visited, date and time of access (automatically recorded by hosting servers).
- Voluntarily provided data: name, email address, phone number, service requested and message, when you fill in the contact form.
- Aggregated usage data: browsing behaviour and conversions, collected via Google Analytics (with consent).
- Ad interaction data: conversions and interactions with Meta and Google Ads campaigns (with consent).
- Technical preferences: selected language and light/dark theme preference, stored locally in the browser.
3. Purposes and Legal Bases
Form data is processed to respond to your enquiry. Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR).
Technical logs and necessary cookies ensure the site functions correctly. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Google Analytics measures visits and user behaviour to improve the site. Legal basis: consent (Art. 6(1)(a) GDPR). Only active if you give consent.
Meta Pixel and Google Ads track conversions and enable personalised advertising. Legal basis: consent (Art. 6(1)(a) GDPR). Only active if you give consent.
Retention of mandatory accounting and tax records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Retention Periods
Contact form data is retained for the time needed to handle your request and for a maximum of 24 months. Navigation logs are kept for 90 days. Data related to contractual relationships is retained for 10 years in compliance with tax obligations. Data collected via Google Analytics and Meta Pixel is subject to each provider's retention terms.
5. Recipients and Extra-EU Transfers
Your personal data may be processed by the following providers acting as data processors:
| Provider | Paese | Ruolo | Garanzie |
|---|---|---|---|
| Vercel Inc. | USA | Website hosting and infrastructure | Standard Contractual Clauses (SCCs) approved by the European Commission. |
| Resend Inc. | USA | Delivery of contact form emails | Standard Contractual Clauses (SCCs) approved by the European Commission. |
| Google LLC | USA | Google Analytics (statistics) + Google Ads (advertising) — with consent only | Standard Contractual Clauses (SCCs). Google Analytics activated with IP anonymisation. |
| Meta Platforms Ireland Ltd. | IE/USA | Meta Pixel for conversion tracking from Facebook/Instagram campaigns — with consent only | Standard Contractual Clauses (SCCs) approved by the European Commission. |
6. Your Rights
Under Arts. 15–22 of the GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate or incomplete data (Art. 16)
- Request erasure of data in applicable cases (Art. 17)
- Restrict processing in certain circumstances (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Lodge a complaint with the competent supervisory authority: ANSPDCP (Romania, anspdcp.ro) as the lead supervisory authority, or with the supervisory authority of your country of residence.
8. Managing Cookie Preferences
You can modify or withdraw your cookie preferences at any time via your browser settings or by contacting us at privacy@ayromex.com.
9. Changes to This Policy
We reserve the right to update this policy to reflect regulatory or technical changes. The date of the last update is shown at the top of the page.