Privacy. What we collect, and why.

We count the visit anonymously: the pages viewed, for how long and what gets clicked, where you came from, the type of device, browser and operating system, the language, the window width.

We write nothing to your browser and we don’t recognize you if you come back: the code that ties the pages of one visit together is computed on the fly and changes every day. Of your IP address we keep only the network, with the last number set to zero, to derive country and city.

A tool of our own, with the data on the website’s server, also records: two random codes stored in your browser, which recognize later visits; the full IP address; the company or public body your connection is registered to, when there is one; the characteristics of the device; what you do on the page (clicks, sections read, copying our contact details, use of the forms field by field, never what you type).

From these data we compute an interest score from 0 to 100, which helps us decide whom to follow up with. No automated decision has any effect on you. With consent, Google Analytics 4 starts too.

After the visit the website’s server asks IPinfo for the location of the address and, only if you accepted, looks up the name associated with the address and the holder of the network in the public registry of RIPE NCC, which for non-European addresses refers to the ARIN, APNIC, LACNIC or AFRINIC registries.If you declined, IPinfo only gets the truncated network (the last number of the address set to zero) and the registries are not queried.

When a recognized company, or a person who accepted, reads the website carefully or leaves a form half-way, the website sends us an email alert with the pages read and where the visit came from. It contains no IP address and nothing you typed.

For anonymous counting, our legitimate interest in knowing whether the website works (Art. 6(1)(f) GDPR). For everything else, your consent (Art. 6(1)(a)).

Detailed data for 400 days, then they are deleted automatically. Daily totals remain.

What you type in the form and the attachments you upload, with the date, the page you write from, the IP address and the browser used.

Replying to you and following up your request (pre-contractual measures, Art. 6(1)(b) GDPR). The IP address and the automatic checks protect the forms from robot submissions (legitimate interest, Art. 6(1)(f)).

Into an email to our mailbox and into an encrypted copy on the website’s server, which only the controller can read. The copy makes sure your request isn’t lost if the email doesn’t arrive.For internal use we also note how it went: offer, order, not relevant.

The encrypted copy is deleted automatically after 12 months. The email stays in our mailbox.

Only if you accepted measurement, the request is linked to the visit it was sent from: we see the pages you read before writing to us.

The application and the CV you send from “Careers”, stored like the other forms.

Assessing the application (pre-contractual measures, Art. 6(1)(b) GDPR).

12 months from sending, then application and CV are deleted automatically.

Only if you tick the optional box, during those 12 months we may also contact you about different positions. You withdraw consent by writing to us.