Privacy Policy

1. Data controller

The data controller is:

2. Types of data collected

Meeting bookings are managed through Google Calendar appointment scheduling, available through the link on this page. In this context, the following data may be collected when voluntarily provided by you:

• full name;
• email address;
• phone number, if requested during booking;
• selected meeting date and time;
• any additional information you freely enter in the booking notes.

This page does not use analytics, profiling or advertising tracking tools.

3. Purposes and legal bases of processing

Providing the data requested during booking is necessary to manage the appointment; without it, the meeting cannot be scheduled.

4. Processing methods

Data is processed using IT and telematic tools, with appropriate technical and organizational measures to ensure security, integrity and confidentiality, and to prevent unauthorized access.

5. Data recipients and processors

Your data may be processed on our behalf and according to our instructions by the following parties, appointed as processors or acting as independent controllers where required by law:

• Google Ireland Ltd. / Google LLC — for calendar, appointment scheduling and agenda management (Google Calendar / Google Workspace);
• Vercel Inc. — for the technical delivery and hosting management of this page;
• consultants, professionals and service providers (e.g. administrative, accounting, legal) within their respective areas of responsibility.

Data is not disseminated or sold to third parties for purposes other than those described. In particular, parties distributing the link to this page do not have access to booking data.

6. Data transfers outside the EU

Some of the providers listed above, particularly Google and Vercel, may process data in countries outside the European Economic Area. In such cases, transfers take place in compliance with Articles 44 et seq. of the GDPR, based on European Commission adequacy decisions or Standard Contractual Clauses and appropriate supplementary safeguards.

7. Retention period

• Data collected to manage the booking is retained for the time needed to manage the meeting and any subsequent contacts and, in the absence of a contractual relationship, for a maximum of 12 months from the last contact.
• Data processed to comply with legal obligations is retained for the periods required by applicable law.

At the end of the indicated periods, data is deleted or anonymized.

8. Data subject rights

As a data subject, you may exercise the following rights at any time, within the limits of Articles 15-22 of the GDPR:

• access to your personal data;
• rectification of inaccurate data or completion of incomplete data;
• erasure of data ("right to be forgotten");
• restriction of processing;
• data portability;
• objection to processing.

To exercise these rights, you can write to riccardo.lugli@bonoboai.it or to the certified email address bonobosrl@pec.cloud.

You also have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority — www.garanteprivacy.it).

9. Cookies

This page uses only technical cookies necessary for its proper operation, for which prior user consent is not required. No profiling cookies, analytics cookies or third-party cookies for marketing purposes are used.

10. Changes to this notice

The Controller reserves the right to modify or update this notice, including as a result of regulatory changes or the introduction of new tools. Changes will be published on this page with the last updated date.