Policy

Privacy policy

Last updated: 7 September 2026

This notice explains how PugliAI S.r.l. processes the personal data of people who visit pugliai.com, fill in the forms, use the chat assistant or write to us, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

PugliAI S.r.l., registered office at Via Giovanni Forleo 45, 72022 Latiano (BR), Italy, VAT IT02735920742, REA BR-170874. For any request concerning personal data write to sales@pugliai.com.

2. Data we process

  • Data you provide through the forms: full name, business email, company, phone number (optional), message. For accelerator applications also role, LinkedIn profile, experience, and data about the company, product and market.
  • Browsing data: IP address, browser and device type, pages visited, timestamps. They are collected by the hosting provider’s logs for security purposes and, only with your consent, by Google Analytics 4 in aggregated form.
  • Chat conversations: the text you type into the chat widget available on some pages, if you choose to use it.
  • Email: messages you send directly to sales@pugliai.com and their attachments.

3. Purposes and legal bases

  • Answering requests and arranging the strategy session — pre-contractual measures taken at your request (Art. 6(1)(b)).
  • Assessing accelerator applications — pre-contractual measures (Art. 6(1)(b)). Selection is carried out by people: we make no decisions based solely on automated processing.
  • Delivering contracted services and handling invoicing and tax obligations (Art. 6(1)(b) and 6(1)(c)).
  • Sending communications about services similar to those you requested — legitimate interest (Art. 6(1)(f)), with the right to object at any time. Other commercial communications only with your consent (Art. 6(1)(a)).
  • Measuring how the site is used with analytics cookies — consent (Art. 6(1)(a)), which you can withdraw from the “Manage cookies” panel.
  • Keeping the site secure and preventing form abuse — legitimate interest (Art. 6(1)(f)).

4. Is providing data mandatory?

Fields marked as required in the forms are necessary to handle your request; without them we cannot reply. The phone number is optional. Consent to analytics cookies is free and does not affect your use of the site.

5. Recipients

Data is processed by authorised PugliAI staff and by suppliers acting as data processors:

  • Formcarry — receipt and forwarding of the forms submitted on the site.
  • Google Ireland Ltd — Google Analytics 4, active only with your consent, with truncated IP addresses.
  • GitHub, Inc. — website hosting (GitHub Pages) and the related technical logs.
  • Chat widget provider — handling of conversations with the assistant, if you use it (Render infrastructure).
  • Advisers, professionals and banks bound by confidentiality, for accounting and legal obligations.
  • Public authorities, where required by law.

We do not sell or pass on your data to third parties for marketing purposes.

6. Transfers outside the European Union

Some suppliers may process data in the United States. In those cases the transfer relies on an adequacy decision (EU-U.S. Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission (Articles 44 et seq. GDPR).

7. Retention

  • Contact requests and applications: 24 months from the last contact.
  • Contract and invoicing data: 10 years, as required by law.
  • Google Analytics data: up to 14 months.
  • Technical security logs: up to 12 months.
  • Consent to commercial communications: until withdrawn.

8. Your rights

You can at any time request access to your data, rectification, erasure, restriction of processing or portability, object to processing and withdraw consent, without affecting the lawfulness of processing carried out before. Write to sales@pugliai.com: we reply within 30 days. If you believe the processing breaches the law, you can lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country of residence.

9. Security

We apply technical and organisational measures appropriate to the risk: encrypted transmission (HTTPS), access control, protection of forms against automated submissions, data minimisation and staff training.

10. Cookies

Information on cookies and similar technologies, and on how to manage consent, is in the cookie policy.

11. Changes

We may update this notice; the date at the top of the page shows the latest revision. Substantial changes will be flagged on the site.