Privacy Policy
Last updated: September 2026
1. Data controller
The controller of the personal data collected through this website is Aven Labs, a sole proprietorship (VAT no. IT04209500042). For any privacy matter or to exercise your rights, you can write to info@aven-labs.com. Given the size of the business, no Data Protection Officer (DPO) has been appointed, as this is not mandatory here; a dedicated contact (for example privacy@aven-labs.com) can nonetheless be activated.
2. Data we process
We process: (a) contact details provided through the site's forms (name, email and, where provided, company, phone and message text); (b) for the paid analysis, the company and tax details required to deliver the service and issue accounting documents (company name, VAT number, tax code and, if provided, phone number); (c) the answers to the analyzer questionnaire (/analisi), which relate to your business and do not in themselves constitute personal data; (d) browsing and usage data collected via cookies and similar technologies (see Cookie Policy); (e) payment data, handled directly by Stripe: we neither process nor store card numbers; (f) your newsletter subscription preference, when you express it.
3. Purposes and legal bases
We process data to: respond to requests submitted through the forms and manage business contacts (legal bases: pre-contractual measures and legitimate interest in replying); deliver the paid analysis and related services (performance of a contract); meet the tax and accounting obligations connected to payments (legal obligation); send the newsletter, where you have given consent (consent, which can be withdrawn at any time); carry out statistical analysis and marketing through cookies and third-party tools (consent, given via the cookie banner).
4. Recipients and external processors
To deliver the services we rely on providers that process data on our behalf or as independent controllers: Google (Google Analytics 4, Google Tag Manager and Google Ads) for statistics and advertising; Stripe for payment processing; Resend and/or the SMTP relay provider used to send transactional emails. Leads and funnel data are forwarded to AvenGest, the internal back-office of the same controller, used as a tool to manage contacts and requests. Data is not sold or shared with third parties for their own purposes beyond what is described here.
5. Transfers outside the EU
Some providers (in particular Google and Stripe) may process data outside the European Economic Area. In such cases the transfer takes place on the basis of the safeguards required by the GDPR, typically the Standard Contractual Clauses adopted by the European Commission together with supplementary measures, as declared by the respective providers.
6. Retention period
We keep data for as long as necessary for the purposes for which it is collected and for legal obligations: contact details and requests, generally for the time needed to manage the relationship and for a reasonable subsequent period; documents and tax data connected to payments, for the term required by accounting and tax law (generally 10 years); browsing and analytics data, for the lifetime of the relevant cookies (see Cookie Policy); traffic attribution data, generally up to around 90 days. Afterwards the data is deleted or anonymised.
7. Your rights
As a data subject you can exercise the rights set out in Articles 15-22 of the GDPR: access, rectification, erasure, restriction of and objection to processing, data portability, and withdrawal of consent at any time (without affecting the lawfulness of processing based on consent given before withdrawal). You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it) or your local supervisory authority.
8. How to exercise your rights
To exercise your rights or for any request regarding data processing, you can write to info@aven-labs.com. We will respond within the timeframes set by applicable law. To withdraw consent to statistical and marketing cookies, you can use the "Cookie preferences" link in the site footer at any time.
9. Cookies and tracking
The site uses technical cookies and, subject to your consent, statistical and marketing cookies. Google Analytics and Google Ads tools are activated only after consent, via Google Consent Mode v2 (default state: denied). For details of the technologies, purposes and durations, please see the Cookie Policy.
10. Changes to this policy
We may update this policy to reflect changes to our services or to applicable law. The updated version will always be available on this page, together with the date it was last updated.