Privacy Policy

Data controller

The data controller is SOV Ricerca S.r.l., VAT IT13483670967, based in Milan, Italy.

For any request regarding personal data, you can write to team@sov.rocks.

Data we collect and purposes

We process the following categories of data, for the purposes and on the legal bases set out below.

• Contact data submitted through the "Contact" form: name, company, email address, a description of your request and, optionally, how you heard about us. Purpose: responding to enquiries and assessing a possible engagement. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Analytics and session-recording data, collected only with your consent through PostHog. Purpose: understanding and improving how the site is used. Legal basis: consent (Art. 6(1)(a) GDPR).
• Technical and navigation data collected automatically by the hosting infrastructure: IP address, browser and device type, date and time of the request, server logs. Purpose: delivery, security and diagnostics of the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Anonymous, aggregated performance metrics (Core Web Vitals) collected by Vercel Speed Insights, without cookies and without identifying the user. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Behaviour analytics and session recording (PostHog)

With your consent, we use PostHog for statistical analytics and for recording browsing sessions (session replay). This feature is configured in an extended mode and may record: the pages you visit and your navigation paths, clicks and interactions, text typed into fields (except password fields, which are always masked), heatmaps, browser console logs, and the headers and body of network requests.

Recording only takes place after you have given consent via the cookie banner and can be disabled at any time by withdrawing consent (see the Cookie Policy). Data is hosted on PostHog's European servers (eu.i.posthog.com). Please do not enter unnecessary or special-category personal data into the site's fields.

Tools and processors

To run the site we rely on providers that process data on our behalf as processors or as independent controllers:

• PostHog — statistical analytics and session recording, with data hosted in the European Union (only with consent).
• EmailJS — delivery of the messages filled in through the contact form to our inbox.
• Vercel — website hosting and collection of anonymous performance metrics (Speed Insights).

Cookies and similar technologies

The site uses cookies and local-storage technologies. For details of the categories, purposes and consent management, please see the Cookie Policy.

Data retention

• Contact data: kept for as long as necessary to handle your request and any resulting relationship, and thereafter for the period required by legal obligations.
• Analytics and session-recording data: kept for a maximum of 12 months, unless consent is withdrawn earlier.
• Technical logs: kept for as long as necessary for security and diagnostic purposes.

Transfers outside the EU

Analytics data collected through PostHog is hosted in the European Union. Some providers (for example EmailJS and Vercel) may also process data outside the European Economic Area; in that case, transfers are based on appropriate safeguards under Art. 44 et seq. GDPR, such as the European Commission's Standard Contractual Clauses.

Your rights

Within the limits set by the GDPR, you have the right to:

• access your personal data and obtain a copy (Art. 15);
• request rectification (Art. 16) or erasure (Art. 17);
• obtain restriction of processing (Art. 18);
• receive your data in a structured format and have it ported to another controller (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Exercising your rights and complaints

To exercise your rights, simply write to team@sov.rocks. We will respond within the time limits set by law.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Changes to this policy

We may update this policy over time. The current version is always published on this page, with the date of the latest update.