Legal information
Privacy policy
Data controller
THE EDGE COMPANY S.r.l. is the controller of the personal data this policy describes. Our registered office is at Via Flaminia 171, 47923 Rimini (RN), Italy. VAT number 04325430405, REA RN-402033.
For anything about your data, write to info@theedgecompany.net or call +39 0541 670335.
This policy covers www.theedgecompany.net. Our product website, bcms.ai, has a policy of its own.
What we collect
When you write to us
The form on our contacts page sends what you type: the topic, your name and email address, your company or organization if you give it, your city and country, and your message.
Some topics ask for one or two more details: an outlet and a deadline, a territory, an area of interest, or a profile link. The form also sends the language and the address of the page.
The form is received by Formbricks, our form service, installed on the same server as this website. It does not store your IP address. It stores the country worked out from it, and the type of browser and device your browser reports.
Without JavaScript, the form opens on the form service's own page with your answers in its address. Your answers then also appear in our server logs, kept at most 15 days.
If you email or call us, we receive what you write or say, with your email address or phone number.
When you visit
We count visits with Umami, a statistics tool installed on the same server as this website. For each page you open it records:
- the address and title of the page, the site you came from, and the campaign tags a link may carry;
- a few actions: a form sent, a link to another site with that site's name, a file downloaded, a click on our email address or phone number.
For each visit it also records your browser, operating system, type of device, screen size, and language, and the country, region, and city worked out from your IP address. The IP address itself is not stored.
Umami sets no cookie and stores nothing on your device. It groups a visit under a key that changes every day, so your visits cannot be linked from one day to the next.
It counts nothing when your browser sends Do Not Track, or when you switch counting off on the cookie policy.
Server logs
Our server records each request it receives:
- your IP address and port, and the time;
- the address requested, with any parameters in it, and the request method;
- the status and size of the answer, how long it took, and the encryption used.
It does not record your browser or the page you came from.
A security service, CrowdSec, reads these logs to detect and block attacks. When a request looks like an attack, its IP address, time, and type of attack are sent to CrowdSec SAS, in France. CrowdSec shares lists of attacking addresses with the sites that use it.
Why we use it
Each use rests on a legal basis of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR):
- To answer your message and, when it leads there, to prepare an offer or a contract, or to assess a job application. Legal basis: steps taken at your request before entering into a contract, Article 6(1)(b) of the GDPR.
- To answer a message that is not about a contract, such as a press request. Legal basis: our legitimate interest in answering the people who write to us, Article 6(1)(f) of the GDPR.
- To count visits, so we can see which pages are read and fix what does not work. Legal basis: our legitimate interest, Article 6(1)(f) of the GDPR. You can switch the statistics off.
- To keep the site running and secure, with the server logs and the attack detection. Legal basis: our legitimate interest, Article 6(1)(f) of the GDPR.
You do not have to write to us. If you use the form, the fields marked * are needed to answer you: without them the form cannot be sent, and we cannot reply. The company or organization field is optional. The visit statistics need nothing from you.
We do not sell your data, and we do not use it for advertising or to build a profile of you.
Who processes it and where
The website, Formbricks, n8n, Umami, and our customer relationship system are installed on one server. We rent it from Hetzner Online GmbH, in its data centre in Helsinki, Finland. The server is operated for us by the provider that manages our web infrastructure.
- Formbricks receives and stores the messages sent with the contact form.
- n8n, our automation service on the same server, passes each form message to our mailbox and keeps a record of that step for 14 days.
- Umami keeps the visit statistics.
- Twenty, our customer relationship system, may hold your message and our exchanges with you.
- Microsoft, through Microsoft 365, carries our email: the messages we receive and our replies.
- CrowdSec SAS, France, receives the IP address, time, and type of attack of the requests that look like attacks.
- Cloudflare (Cloudflare, Inc., United States) protects Formbricks and n8n and forwards their traffic: your IP address and the message you send with the form pass through it.
We pass your data to no one else, unless the law requires us to.
Transfers outside the European Economic Area
The server is in the European Union. Microsoft may process email data, and Cloudflare the traffic to Formbricks and n8n, outside the European Economic Area, including in the United States.
Those transfers rely on the EU-U.S. Data Privacy Framework, Article 45 of the GDPR, and on the standard contractual clauses of the European Commission, Article 46. You can ask us for a copy of these clauses at info@theedgecompany.net.
How long we keep it
- Messages and contact details: at most 24 months after our last contact, or, when they lead to a contract, as long as the law requires us to keep the contract's records.
- Records of the form's delivery in n8n: 14 days.
- Visit statistics: 26 months, then deleted automatically.
- Server logs: at most 15 days.
- Attack alerts: 7 days; blocks: 4 hours.
- Backup copies of the visit statistics: 14 days.
- Backup copies of the form messages and of our customer relationship system: not yet fixed; we will state the period here once it is.
- The server's error log: not yet fixed.
Your rights
You can ask us for access to the data we hold about you. You can also ask us to correct it, delete it, restrict its use, or give it to you in a common, machine-readable format.
These rights, and the right to object below, are set out in Articles 15 to 21 of the GDPR. Write to info@theedgecompany.net. We answer within one month.
If you think we have not respected your rights, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, at garanteprivacy.it, another site. You can also complain to the authority of the country where you live or work.
Your right to object
You can object at any time to the uses based on our legitimate interest. They are the replies to messages not about a contract, the visit statistics, and the server logs.
Write to info@theedgecompany.net. For the statistics, the switch on the cookie policy works at once.
Automated decisions
We take no decision about you by automated means alone, and we do no profiling.
Changes to this policy
We update this policy when what we do with personal data changes, and we change the date below.