Privacy Notice

Last updated: June 2026 · Versione italiana

This notice explains how personal data collected through neemia.org is processed, under Regulation (EU) 2016/679 (GDPR).

What we collect

Through the contact form we collect: name, email, organization, role, whether you operate or build an agentic AI system, what you are requesting (the dossier or a conversation about an assessment), and any optional message. We also record your consent, the submission date, the page and language. Technical data may be processed while browsing (see the Cookie Policy).

Purposes and legal basis

• To send you the Neemia dossier and/or to contact you about an assessment, and to keep you informed about the development of the standard. Legal basis: your consent (Art. 6.1.a GDPR).
• To respond to enquiries you send us. Legal basis: our legitimate interest in replying, and your consent.

Recipients

Data may be processed on our behalf by providers acting as data processors: Aruba S.p.A. (website hosting and email), and the automation (n8n) and storage (Baserow) tools managed by the controller. These tools are hosted in the European Union or under the controller's control. Data is never sold or transferred to third parties.

Where and how long

Data is kept on servers within the European Union, for as long as needed for the purposes described and in any case no longer than 24 months from the last contact, unless otherwise required by law. You may request erasure at any time.

Your rights

You may exercise at any time the rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent (without affecting prior lawful processing), by writing to maurizio.grassi@zero2stars.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Changes

This notice may be updated: the current version is always the one published on this page.