Privacy Policy

Privacy

Last updated: 02.08.2026

Introduction

Synanext (“Aqutron”, “we”) considers the protection of personal data an essential element of its technological and operational responsibility.

This notice describes how the personal data of users who visit www.aqutron.com (the “Site”) are collected, used, and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection laws.

1. Data Controller

The Data Controller is:

Daniel Bozzolan

Website: www.aqutron.com

2.a Browsing data

During normal navigation of the Site, limited technical and pseudonymous data may be collected and subsequently aggregated, such as:

IP address, processed transiently on the server to derive coarse location and network information and never stored in full by Visitor Intelligence
a site-scoped visitor hash generated using the IP address, user agent and a salt rotated on each calendar day in Europe/Rome
device, browser and language information
page paths visited and visible engagement duration
referrer origin and the limited UTM source, medium and campaign parameters; other query parameters and URL fragments are removed before transmission
named interactions, such as calls-to-action, downloads and successful contact, brochure, newsletter or survey steps; form contents are not included in analytics events

The daily hash is not a persistent identifier and is not used to follow a natural person across days or sites. Pseudonymous visits are not retroactively linked to identities supplied through forms.

2.b Data provided voluntarily by the user

The Site allows users to provide personal data through forms (e.g., brochure download and contact requests).

The processed data may include:

Full name
Email address
Organization/role
Message or request sent

Providing such data is optional, but necessary to receive the requested content or responses.

2.c Newsletter and double opt-in

When a user requests the Aqutron newsletter, we process the email address, preferred language, selected topics and source, together with consent, confirmation and unsubscribe status and timestamps.

We also store a one-time confirmation token, an unsubscribe token and a hashed IP value for security and abuse prevention. No newsletter is sent until the user confirms the request through the double-opt-in link.

3. Purposes of processing

Personal data are processed exclusively for the following purposes:

Enable navigation and the proper functioning of the Site
Provide content requested by the user (e.g., brochure, documentation)
Respond to information or contact requests
Send the requested Aqutron updates on pool safety, regulations and technology after double opt-in, and manage confirmation and unsubscribe requests
Measure traffic sources, page performance, visible engagement and successful conversion events in order to improve the Site and Aqutron’s marketing activities
Where proportionate, distinguish consumer, mobile, ISP or hosting networks from possible business or institutional networks and understand organization-level interest
Comply with legal obligations or requests from competent authorities

Aqutron does not use data for aggressive commercial profiling or unsolicited automated marketing.

4.a Plausible Analytics

The Site uses Plausible Analytics, a privacy-friendly web analytics service that:

does not use cookies
does not track individual users
does not collect personally identifiable data

Data are processed in aggregated and anonymous form.

Site: https://plausible.io

4.b Cloudflare Web Analytics

The Site uses Cloudflare Web Analytics to:

ensure security
prevent abuse
monitor Site performance

Cloudflare may process technical browsing data according to its own privacy policy.

Site: https://www.cloudflare.com/privacypolicy/

4.c Google Search Console

Aqutron uses Google Search Console exclusively to:

monitor the Site’s presence in search results
analyze SEO performance in aggregate form

Google Search Console does not allow Aqutron to identify individual users.

Site: https://policies.google.com/privacy

4.d Synanext Visitor Intelligence

The Site uses a first-party, cookieless analytics system operated on infrastructure managed by Synanext. It measures page views, visible engagement time and the named interactions described above without setting advertising cookies or persistent browser identifiers.

The full IP address is used transiently to create the daily, site-scoped hash and to obtain coarse location and network information; it is not stored or exposed in the dashboard. For visits that meet minimum engagement or high-intent criteria, the current IP address may be checked against locally managed datasets to classify the network and suggest a possible organization. That organization name may then be searched in public registers without sending an IP address, user agent or pseudonym. External IP-to-company providers are currently disabled.

residential, mobile, ISP, hosting, VPN, proxy, Tor, datacenter, crawler and other excluded traffic is not presented as a company
an IP-range owner or provider result does not prove that a specific company or person visited the Site; candidates are displayed with their source, confidence and an explicit verification status
the system is not designed to identify a named natural person or create persistent profiles of individual visitors across days or sites; organization-level summaries may span multiple days only within the same site and remain probabilistic

Before any external IP-to-company provider is enabled, its contractual, privacy, retention and operational conditions must be approved and this notice updated. The Visitor Intelligence tracker does not write analytics identifiers to browser storage; only when a user objects does the public control store the technical preference synx_ignore=true locally, and that preference is not sent to the server.

Separately, the Site stores an explicit language choice in the functional aqv-locale cookie for up to 12 months, keeps unfinished Observatory survey answers, contact details, choices and the temporary response identifier and access token only in sessionStorage for the current browser tab, and uses Cloudflare Turnstile on protected forms for technical anti-abuse processing and server-side verification. Plausible and Cloudflare Web Analytics are not loaded on reward/download pages or URLs containing non-approved query parameters.

Visitor Intelligence preference on this browser

…

5. Legal basis for processing

The processing of personal data is based on:

the user’s consent (Art. 6(1)(a) GDPR) for the newsletter and other optional consent-based communications; consent may be withdrawn at any time
steps taken at the user’s request before entering into a contract (Art. 6(1)(b) GDPR), where applicable to contact or information requests
the Data Controller’s legitimate interest (Art. 6(1)(f) GDPR) in operating and securing the Site, preventing abuse, measuring the effectiveness of content and B2B marketing, understanding organization-level interest and keeping limited evidence of subscription choices
legal obligations where applicable

For first-party analytics and business-network attribution, that interest is balanced through data minimization, daily identifier rotation, exclusion of consumer and high-risk network categories, no storage of full IP addresses, confidence labels and the right to object under Article 21 GDPR.

6. Processing methods and security

Data are processed with electronic and organizational measures suitable to ensure:

confidentiality
integrity
availability
protection against unauthorized access

Aqutron adopts a privacy-by-design approach, consistent with its technological mission.

7. Data retention

Personal data are retained:

for the time strictly necessary for the purposes for which they were collected
or for the period required by legal obligations
Visitor Intelligence salts are rotated daily and expired salts are deleted; full IP addresses are not retained. Pseudonymous first-party events, locally derived network classifications and public-register organization enrichments are retained for up to 365 days and then removed by a daily automatic cleanup. No external IP-to-company provider is currently enabled; this notice and a provider-specific retention rule must be approved before activation
newsletter confirmation links expire after 24 hours; confirmed email addresses and preferences are retained while the subscription remains active

Data related to contact requests or downloads may be retained for technical or institutional follow-up, without intrusive commercial use.

An unconfirmed newsletter record is not added to the campaign provider or used for campaign delivery. After an unsubscribe request, active sending stops and the record is minimized to the data needed to honor and document the choice or defend legal claims; it is not used for campaigns.

8. Communication and data transfers

Personal data are not sold. They are shared only with processors needed to provide the Site and newsletter, or with authorities where required by law.

Cloudflare, for hosting, D1 storage, Turnstile verification, security and delivery infrastructure
Synanext-managed infrastructure, for first-party Visitor Intelligence storage and reporting
specialist network and IP-to-company data providers, only where enabled and only for the limited lookup described in section 4.d
MailChannels, for transactional email including subscription confirmations and survey toolkit or report messages
Brevo, for the confirmed newsletter list and campaign delivery only after double opt-in, where the integration is enabled
public authorities, where required by law

Providers process data under the applicable contractual arrangements. Where processing involves a transfer outside the EEA, the transfer relies on an adequacy decision or other safeguards provided by Chapter V GDPR, as applicable.

9. Data subject rights

Users may exercise at any time the rights provided by Articles 15–22 GDPR, including:

access to data
rectification
erasure
restriction of processing
objection
data portability (where applicable)

Newsletter consent can be withdrawn at any time through the unsubscribe link included in each newsletter or by writing to privacy@aqutron.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Visitor Intelligence can be disabled for future visits on the current browser through the control in section 4.d. An objection under Article 21 GDPR may also be sent to privacy@aqutron.com.

Other rights requests can also be sent to: privacy@aqutron.com

You also have the right to lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante) where applicable.

10. Changes to this notice

Aqutron reserves the right to update this notice.

Changes will be published on this page with the updated date.

Final note

Aqutron develops systems for the responsible governance of safety.

The same principle guides the way personal data are processed.

Contact Aqutron Access technical documentation