Privacy Policy

1. Data Controller

Vimage Srl has not appointed a Data Protection Officer (DPO) as the conditions set out in Article 37 of the GDPR do not apply. For any matter relating to data protection you may contact the Controller at the addresses indicated above.

2. Data Processed and Purposes

We process the following personal data for the purposes indicated:

3. AI Chatbot and Message Processing

The site integrates a virtual assistant ("Vimage AI") that uses artificial intelligence models to provide information about Vimage services and solutions. When you use the chatbot, the messages you send are transmitted to our server and forwarded to a third-party AI service for generating the response. Under the contractual terms of the AI providers, the messages are not used to train the models.

4. Nature of Data Provision

Providing data through the contact form is optional. However, failure to provide the data marked as mandatory (name, email) will make it impossible for Vimage to respond to the request. Use of the chatbot is entirely optional and requires the user's explicit consent.

5. Data Recipients and Sub-processors

Personal data is neither sold nor disclosed to third parties for commercial purposes. For the purposes described above, the data may be processed by the following sub-processors (Art. 28 GDPR), appointed under specific agreements (DPAs) and selected to ensure an adequate level of security:

In addition, the data may be disclosed to the competent authorities, where required by legal obligation, court order or for the exercise of rights in judicial proceedings.

6. Transfer of Data Outside the EU (Arts. 44-49 GDPR)

When personal data is processed by sub-processors based outside the European Union (see the table in section 5), the transfer takes place in compliance with the safeguards provided for by the GDPR:

• Standard Contractual Clauses (SCC) approved by the European Commission (Decision (EU) 2021/914), contractually binding the sub-processor to levels of protection equivalent to those of the EU.
• EU-US Data Privacy Framework (for US sub-processors that adhere to it), an official certification following Adequacy Decision (EU) 2023/1795.
• Transfer Impact Assessment (TIA) for US providers, with verification of any supplementary safeguards in accordance with EDPB guidelines 01/2020.

You have the right to request a copy of the safeguards applicable to a specific transfer by writing to the Controller's email address indicated at the bottom of this document.

7. Automated Decision-Making and Profiling

The AI chatbot generates responses in an automated manner based on the messages sent by the user. However, this processing does not produce legal effects nor does it significantly affect the user within the meaning of Article 22 of the GDPR. The chatbot's responses are purely informational and in no way constitute binding advice, a contractual offer or an automated decision with legal effects.

Vimage does not carry out any profiling of site visitors.

8. Your Rights (Arts. 15-22 GDPR)

You have the right to:

To exercise your rights, write to privacy@vimage.it. We will respond within 30 days. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

9. Data Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure. These measures include: HTTPS connections, anti-spam and anti-bot protection (Cloudflare Turnstile), data access limited to authorised personnel, regular backups and encryption of sensitive data.

10. Cookies and Tracking Technologies

The site uses cookies and similar technologies (localStorage). For detailed information on the categories of cookies used, the purposes and how consent is managed, please see our Cookie Policy.

11. Minors

Our services are intended exclusively for adults (18+ years) and for business owners or representatives. We do not knowingly collect data from minors. If you believe that a minor has provided personal data, please contact us immediately.

12. Changes to the Privacy Policy

This Privacy Policy may be updated to reflect regulatory or operational changes. Substantial changes will be communicated via a notice on the site or by email to registered users. The date of the last update is shown at the top of this page.

13. Privacy Contacts