Privacy Notice

Who is the data controller

The data controller is Terra Mia AI Services, an individual operator based in Italy. Direct contact: terra.mia.ai@gmail.com.

• Controller: Terra Mia AI Services
• Privacy contact: terra.mia.ai@gmail.com
• No DPO appointed (operator below mandatory threshold)

What data we collect and where from

We collect only data you provide directly: name, business email, and message text via the contact form or the showcase site chat widget.

• Name (optional)
• Email address
• Commercial message content

Why we process your data

Data is processed exclusively to respond to commercial inquiries, prepare quotes, and manage the pre-contractual relationship. We do not use data for profiling, newsletters, or marketing without explicit consent.

• Responding to commercial inquiries
• Pre-contractual relationship management
• Fulfilling contractual obligations (if active contract)

On what basis we process data

The legal basis is pre-contractual performance (Art. 6.1.b GDPR) for commercial inquiries, and contract performance for active relationships. Explicit consent is required for marketing communications.

• Art. 6.1.b GDPR — pre/contractual performance
• No processing of special category data
• No marketing without consent

How long we keep your data

Data for unconverted leads is kept for 12 months from last contact. Active client data is kept for the duration of the contract plus the period required by Italian tax law.

• Unconverted leads: 12 months
• Active clients: contract duration + fiscal obligations
• Erasure on request with backup propagation

Who we share data with

We use sub-processors based in the EU or with adequate safeguards (signed DPA). Main providers are Cloudflare (hosting/CDN) and Brevo (transactional email), both with signed DPA.

• Cloudflare Inc. — hosting and CDN (DPA available)
• Brevo SAS — transactional email (DPA available)
• No data transfer to AI providers without verified DPA

Your GDPR rights

You have the right to access, rectify, erase, restrict, object to, and receive a portable copy of your data. Write to terra.mia.ai@gmail.com with subject 'Privacy request'. Response within 30 days.

• Access, rectification, erasure
• Restriction and objection
• Data portability