Privacy
Provided under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. Version 1.2 of 12 November 2026. This is a courtesy translation: in case of discrepancy, the Italian version prevails.
Lydius Operations S.r.l., registered office at Via Monte Napoleone 8, 20121 Milan, Italy. For any matter relating to personal data: [email protected]. No data protection officer has been appointed, as the legal requirements for doing so are not met.
Data provided voluntarily. By filling in the contact form or writing to the addresses shown: first and last name, email, phone if given, company or firm, professional skills if given, and the content of the message.
Browsing data. The computer systems hosting the site record, in their normal operation, some technical data whose transmission is implicit in internet protocols: IP address, date and time of the request, page requested, browser type and operating system, response code. These data are used only to ensure the operation and security of the service and are kept by the hosting provider for the time strictly necessary.
Cookies and tracking tools. The site uses a technical cookie, or more precisely an entry in the browser's local storage, to remember the choice made on the cookie banner, and, only with consent, the statistical cookies of Google Analytics 4. Details are in section 10, Cookie policy. The site does not load fonts or social plugins from third-party servers. Only the Contact page loads Cloudflare Turnstile, the anti-spam check of the form described in section 10.
Replying to contact requests from companies and investors and handling the pre-contractual stage: legal basis is the performance of pre-contractual measures taken at the request of the data subject (art. 6(1)(b) GDPR).
Assessing collaboration proposals from professionals: legal basis is the performance of pre-contractual measures at the request of the data subject (art. 6(1)(b)) and the controller's legitimate interest in selecting qualified collaborators (art. 6(1)(f)).
Measuring site visits in aggregate form through Google Analytics 4: legal basis is the data subject's consent (art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code), given through the banner and revocable at any time.
Ensuring the security and operation of the site and preventing abuse: legitimate interest of the controller (art. 6(1)(f)).
Complying with legal obligations, accounting and tax obligations or those arising from requests by the authorities: art. 6(1)(c).
Providing the data requested in the form is optional, but without name, email and message the request cannot be followed up. The data are not used for marketing or to send unsolicited commercial communications.
Data are processed with IT tools, with technical and organisational measures appropriate to guarantee their confidentiality and integrity, by the controller and by persons expressly authorised by it. There is no automated decision-making or profiling.
Contact request data are kept for the time needed to reply and in any case no longer than 24 months from the last contact, unless a contractual relationship follows, in which case the retention periods required by law for contractual and accounting documents apply. Data of professionals proposing a collaboration are kept for 12 months from receipt and then deleted unless the data subject renews their interest. Browsing data are kept by the hosting provider for short periods according to its own policies.
Data may be processed, on behalf of the controller and as processors under art. 28 GDPR, by providers of hosting, domain registration, email and contact form forwarding services. They may also be disclosed to consultants and professionals bound by professional secrecy, and to public authorities where required by law. Data are not disseminated or transferred to third parties for their own purposes.
The controller prefers providers with servers in the European Union. Data collected by Google Analytics may be processed by Google LLC in the United States: the transfer is based on the European Commission's adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, to which Google LLC adheres. Where a provider processes data in third countries, the transfer takes place on the basis of a European Commission adequacy decision (art. 45 GDPR) or of the standard contractual clauses approved by the Commission (art. 46 GDPR), with any supplementary measures needed.
At any time the data subject may exercise the rights under articles 15 et seq. of the GDPR: access, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest. Requests should be sent to the controller's contact details in point 1 and will be answered within one month, extendable in the cases provided for by art. 12 GDPR.
A data subject who considers their rights infringed may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or apply to the courts.
The site is aimed at companies and professionals and does not knowingly collect data from minors under 18.
The site contains links to LinkedIn. By following these links the user leaves this site and is subject to the privacy policy of the destination service, over which the controller has no control.
Cookies are small text files that the sites visited send to the user's browser, where they are stored to be sent back to the same sites on the next visit. This section is provided in accordance with art. 122 of the Italian Privacy Code and the Guidelines of the Italian Data Protection Authority of 10 June 2021.
Necessary tools, without consent. The site stores in the browser, through localStorage, the entry lydius_consent with the choice made on the banner (acceptance or refusal) and the date. Duration six months, after which the choice is asked again. It contains no identifying data and is not sent to third parties.
Third-party statistical cookies, only with consent. Google Analytics 4, provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), sets the cookies _ga and _ga_<ID>, lasting up to 13 months, to distinguish visitors and measure page views. Google Analytics 4 does not record or store the full IP address of visitors; the service is configured without Google Signals and without advertising personalisation; data are not combined with other data held by Google for the controller's purposes. The Google Analytics script is not loaded until the user has given consent, and is disabled, with deletion of the cookies, if consent is withdrawn. Google's privacy policy: policies.google.com/privacy.
How to manage consent. On the first visit a banner lets you accept, refuse or customise. Refusing does not limit the use of the site in any way. Closing the banner without choosing, continuing to browse or scrolling the page do not count as consent. The choice can be changed at any time from the "Cookie preferences" link at the bottom of every page. Cookies can also be deleted or blocked in the browser settings.
Anti-spam check, without consent. On the Contact page the form is protected by Cloudflare Turnstile, provided by Cloudflare, Inc., which checks that the submission comes from a person and not from an automated program. Turnstile does not use profiling cookies or advertising purposes and processes technical browser data only for this check, on the basis of the controller's legitimate interest in preventing abuse (art. 6(1)(f) GDPR). Cloudflare's policy: cloudflare.com/turnstile-privacy-policy.
This policy may be updated to reflect changes in the law or in the services used. The current version, with the date of update, is always published on this page.
