Privacy and cookie notice
Last updated:
This notice explains how Vulkano s.r.l. processes the personal data of people who visit the vulkano.ai website and of people who contact us through the website's forms, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).
How camera data is processed in our customers' stores with Kontrol Flow is described on the Kontrol Flow privacy page.
1. Data controller and contact details
The data controller is Vulkano s.r.l., VAT no. IT06204630872, based in Acireale (CT), Italy.
For any question about this notice, or to exercise your rights, write to privacy@vulkano.ai.
2. What data we process
Browsing data and technical logs
When you visit the website, the systems hosting it receive, and may record in their logs, some technical data sent by your browser, such as IP address, date and time of the request, page requested, response code and browser type. This data is needed to run and protect the website and to detect faults or abuse.
Contact form
If you write to us from the Contact page, we process the data you enter: name, email, topic of your request and message and, if you provide them, company and phone number.
Pilot Program form
If you apply for the Pilot Program, we process your name, company, email, number of stores and, if you provide them, phone number and message. We also record the date and time when you tick the privacy notice box.
Together with your request we save some information about where your visit came from, which helps us understand which campaigns and pages work: the campaign parameters in the link (utm_source, utm_medium, utm_campaign), the industry of interest, the version of the page you visited and the language. While you browse, this information stays in your browser's session storage (entry vk_attribution) and reaches us only if you submit the form.
Where requests are stored
Data submitted through the forms is saved in a database hosted in the European Union and forwarded by email to our team, so that we can reply to you.
Spam protection
The forms are protected by Google reCAPTCHA v3, which collects technical information about your device, your browser and your interaction with the page in order to tell people apart from automated programs. This information is collected directly by Google.
Cookies and similar technologies
The website uses technical cookies and, only with your consent, Google Analytics cookies. You will find the details in the Cookies section.
3. Purposes and legal bases
The box in the Pilot Program form records that you have read this notice and that you ask to be contacted.
- Replying to requests sent through the contact form and handling Pilot Program requests, including communications before a possible contract: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Measuring the use of the website statistically with Google Analytics: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Protecting the forms from spam and abuse with Google reCAPTCHA and keeping the website secure through technical logs: the controller's legitimate interest in the security of its website and services (Art. 6(1)(f) GDPR).
- Understanding which campaigns and pages Pilot Program requests come from, through the source data sent with the form: the controller's legitimate interest in assessing the effectiveness of its sales activities (Art. 6(1)(f) GDPR).
- Complying with legal obligations and, where necessary, establishing, exercising or defending legal claims: legal obligation (Art. 6(1)(c) GDPR) and the controller's legitimate interest (Art. 6(1)(f) GDPR).
4. Providing your data
The fields marked as required in the forms are needed to reply to your request: without them we cannot get back to you. Optional fields can be left blank.
Consent to analytics cookies is optional: if you do not give it, you can still use the website without restrictions.
5. Recipients of the data
Data is processed by authorised and instructed staff of Vulkano s.r.l. It may also be processed, on our behalf, by the suppliers that provide us with technical services:
- the hosting and infrastructure provider (Hetzner, with data centres in the European Union), which hosts the website and the database;
- the email service provider, through which requests are forwarded to our team.
For Google Analytics (only with your consent) and Google reCAPTCHA, data is also processed by Google, under Google's terms and privacy policy (https://policies.google.com/privacy).
We do not sell or disclose your data to the public.
6. Transfers outside the European Union
The website and the request database are hosted in the European Union.
Using Google Analytics and Google reCAPTCHA may involve transferring data to the United States or other countries outside the European Economic Area. In those cases the transfer relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, in which Google participates, or on the standard contractual clauses approved by the European Commission.
7. How long we keep data
- Requests sent through the contact or Pilot Program form: 24 months from the last contact. If the request leads to a contract, the data is kept for the duration of the relationship and for the periods required by law.
- Website technical logs: for a short period, normally no longer than 30 days, unless they are needed to investigate abuse or unlawful activity.
- Google Analytics data: for the retention period set in the service, no longer than 14 months.
- Cookies: for the duration shown in the table in the Cookies section.
- Source data in your browser's session storage: until you close the tab.
8. Your rights
At any time you can exercise the rights provided by Articles 15-22 GDPR, in particular:
- access to your data and a copy of it (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure of your data (Art. 17);
- restriction of processing (Art. 18);
- portability of the data you provided to us (Art. 20);
- objection to processing based on legitimate interest (Art. 21);
- withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)). For analytics cookies you can do this from the cookie preferences.
To exercise your rights, write to privacy@vulkano.ai. We reply without undue delay and in any case within one month of your request, a period that can be extended in the cases set out in Art. 12 GDPR.
If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (https://www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.
10. Changes to this notice
We may update this notice, for example if the services used by the website change. The date of the last update is shown at the top of the page.
Questions about privacy?
Write to us and we will get back to you as soon as possible.
privacy@vulkano.ai
AI-powered retail analytics that respects privacy. Transform your store's video feeds into actionable insights.
Stay Updated
Get the latest insights on retail analytics and AI.