Privacy Policy
How ilayer.io collects, uses, shares and protects personal data when you visit the website. Controller: Equito S.A, Lugano.
This Privacy Policy explains how ilayer.io (“Ilayer,” “we,” “our,” “us”) collects, uses, shares, and protects personal data when you visit https://ilayer.io/ (the “Website”) and use any related features (e.g., contact forms, newsletter sign-ups, account areas, and—if enabled—Web3 integrations).
If you do not agree with this Policy, please do not use the Website.
/01. Data Controller & Contact
- Data Controller: Equito S.A
- Registered address: Via Nassa 3a 6900 Lugano
/02. Categories of Data We Process
Data you provide directly
- Identification and contact data (name, surname, email, phone) submitted via forms or email.
- Message content and support requests.
- Account data (if an account area exists).
Data collected automatically
- Technical/usage data: IP address, device and browser info, language, referring/exit pages, pages viewed, timestamps, events, error logs.
- Cookies or similar technologies (see §7).
- Security logs (e.g., access attempts, malicious requests).
Data from third parties / embedded services
- Aggregated analytics (e.g., Google Analytics 4, if enabled).
- External assets like Google Fonts (your browser may contact Google to fetch fonts).
- (Optional) Web3/on-chain data: public wallet addresses you connect, network, signatures, on-chain transactions. Public blockchains are transparent and immutable (see §8).
We do not intentionally collect special categories of data (Art. 9 GDPR) or criminal data, unless required by law.
/03. Purposes & Legal Bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Operating the Website and providing requested services (responding to contact requests, managing accounts, support) | Contract / pre-contractual steps (Art. 6(1)(b)) |
| Security, fraud prevention, service reliability (CDN/WAF, logs, monitoring) | Legitimate interest (Art. 6(1)(f)) |
| Aggregated statistics and UX improvement (e.g., GA4) | Consent via cookie banner (Art. 6(1)(a)) |
| Service and legal communications; compliance with legal obligations | Legal obligation (Art. 6(1)(c)) and/or Contract |
| (Optional) Newsletter / marketing | Consent (Art. 6(1)(a)) – revocable anytime |
| (Optional) Web3/on-chain features you choose to use | Contract and/or Legitimate interest |
/04. Nature of Provision
Providing data marked as required in forms is necessary to receive the requested service.
Analytics/marketing cookies are optional.
/05. Recipients (Processors/Sub-processors)
We share data only when necessary and under appropriate data processing agreements. Typical recipients include:
- Hosting/Cloud & Security: [provider(s) e.g., Cloudflare/AWS/OVH] for hosting, CDN, WAF, DDoS protection, logs.
- CMS/Website stack: WordPress + Elementor (and essential plugins).
- Analytics: [Google LLC – GA4] (enabled only with consent).
- Email/Helpdesk: [email/SMTP/helpdesk provider].
- Other strictly necessary IT providers supporting the Website.
An updated list of processors is available upon request.
/06. International Data Transfers
Some providers may be located outside the EEA/UK. Where applicable, we use Standard Contractual Clauses (SCCs) and additional safeguards to ensure an adequate level of protection (Arts. 44–49 GDPR).
/07. Cookies & Similar Technologies
We use:
- Strictly necessary cookies to operate the Website (no consent required).
- Analytics/marketing cookies (e.g., GA4) only with your consent via our cookie banner.
Manage preferences via:
- the cookie banner;
- your browser settings;
- vendor opt-out tools.
Google Fonts: if loaded from Google CDN, your browser contacts Google (IP processing). We can switch to self-hosted fonts if preferred.
/08. Note on Public Blockchains (if Web3 is used)
Public blockchains are transparent, immutable, and not under our control. Wallet addresses and transactions may be linked to individuals by third parties now or in the future. Consider carefully what you associate with your public address. Your use of wallets/bridges/explorers is also subject to their own terms and privacy policies.
/09. Data Retention
- Contact/support data: up to 24 months after your last interaction.
- Account/contract data (if applicable): for the relationship duration and up to 10 years for legal/accounting duties.
- Security logs: typically 7–12 months (longer if needed for incident response).
- Cookies: per the durations shown in the cookie banner/vendor list.
- Consent-based processing: until consent is withdrawn or the stated period ends.
/10. Security
We apply appropriate technical and organizational measures (TLS/HTTPS, hardening, access controls, backups, logging, least-privilege). No system is 100% secure: please use strong, unique passwords and keep them confidential.
/11. Your Rights (Arts. 15–22 GDPR)
You have the right to access, rectify, erase, restrict, port, object, and to withdraw consent at any time.
To exercise your rights, contact [privacy@ilayer.io].
You also have the right to lodge a complaint with your Supervisory Authority (e.g., the Italian Garante: www.garanteprivacy.it).
/12. Third-Party Links & Embeds
External websites, social widgets, maps, videos, wallets, explorers, and other embeds are governed by their own privacy policies. We are not responsible for their practices.
/13. Changes to This Policy
We may update this Policy to reflect legal, technical, or business developments. We will post the updated version here with a new “Last updated” date.