Privacy Policy
How ilayer.io collects, uses, shares and protects personal data when you visit the website. Controller: Equito S.A, Lugano.
This Privacy Policy explains how ilayer.io (“Ilayer,” “we,” “our,” “us”) collects, uses, shares, and protects personal data when you visit https://ilayer.io/ (the “Website”) and use any related features (e.g., contact forms, newsletter sign-ups, account areas, and—if enabled—Web3 integrations).
If you do not agree with this Policy, please do not use the Website.
/01. Data Controller & Contact
- Data Controller: Equito S.A
- Registered address: Via Nassa 3a 6900 Lugano
/02. Categories of Data We Process
Data you provide directly
- Identification and contact data (name, surname, email, phone) submitted via forms or email.
- Message content and support requests.
- Account data (if an account area exists).
Data collected automatically
- Technical/usage data: IP address, device and browser info, language, referring/exit pages, pages viewed, timestamps, events, error logs.
- Cookies or similar technologies (see §7).
- Security logs (e.g., access attempts, malicious requests).
Data from third parties / embedded services
- Aggregated analytics (e.g., Google Analytics 4, if enabled).
- None for fonts: this Website's fonts are self-hosted, not loaded from Google Fonts or any third-party font CDN, so your browser does not contact Google to render text.
- (Optional) Web3/on-chain data: public wallet addresses you connect, network, signatures, on-chain transactions. Public blockchains are transparent and immutable (see §8).
We do not intentionally collect special categories of data (Art. 9 GDPR) or criminal data, unless required by law.
/03. Purposes & Legal Bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Operating the Website and providing requested services (responding to contact requests, managing accounts, support) | Contract / pre-contractual steps (Art. 6(1)(b)) |
| Security, fraud prevention, service reliability (CDN/WAF, logs, monitoring) | Legitimate interest (Art. 6(1)(f)) |
| Aggregated statistics and UX improvement (e.g., GA4) | Consent via cookie banner (Art. 6(1)(a)) |
| Service and legal communications; compliance with legal obligations | Legal obligation (Art. 6(1)(c)) and/or Contract |
| (Optional) Newsletter / marketing | Consent (Art. 6(1)(a)) – revocable anytime |
| (Optional) Web3/on-chain features you choose to use | Contract and/or Legitimate interest |
/04. Nature of Provision
Providing data marked as required in forms is necessary to receive the requested service.
Analytics/marketing cookies are optional.
/05. Recipients (Processors/Sub-processors)
We share data only when necessary and under appropriate data processing agreements. Typical recipients include:
- Hosting/Cloud & Security: [TODO DA COMPILARE: nome del fornitore hosting/CDN/WAF effettivamente in uso — es. Vercel, Cloudflare, AWS, OVH] for hosting, CDN, WAF, DDoS protection, logs.
- Website stack: static site (hand-built HTML/CSS/JS, no CMS or plugins).
- Analytics: Google LLC – Google Analytics 4 (enabled only with consent).
- Email/Helpdesk: [TODO DA COMPILARE: fornitore email/SMTP/helpdesk effettivamente usato per rispondere ai contatti].
- Other strictly necessary IT providers supporting the Website.
An updated list of processors is available upon request.
/06. International Data Transfers
Some providers may be located outside the EEA/UK. Where applicable, we use Standard Contractual Clauses (SCCs) and additional safeguards to ensure an adequate level of protection (Arts. 44–49 GDPR).
/07. Cookies & Similar Technologies
We use:
- Strictly necessary cookies to operate the Website (no consent required).
- Analytics cookies (Google Analytics 4) only with your consent.
On your first visit, before any analytics tag can load, Google Consent Mode is set to deny by default (analytics_storage: denied) and a banner is shown with two equally-weighted buttons, “Accept” and “Reject”, plus a link to this Policy. Nothing from Google Analytics is requested until you press Accept; pressing Reject keeps analytics off and only strictly necessary functionality runs. Your choice is stored in your browser (not on our servers) for up to 12 months, after which the banner is shown again, and you can change it at any time by clearing this site's data/local storage in your browser (or by contacting us, see §1).
Manage preferences via:
- the Accept/Reject banner shown on your first visit (or again after your choice expires or is cleared);
- your browser settings (cookies and site data);
- vendor opt-out tools.
Fonts: already self-hosted on this domain, not loaded from Google Fonts or any other third-party CDN — no font-related request reaches Google or any other font provider.
/08. Note on Public Blockchains (if Web3 is used)
Public blockchains are transparent, immutable, and not under our control. Wallet addresses and transactions may be linked to individuals by third parties now or in the future. Consider carefully what you associate with your public address. Your use of wallets/bridges/explorers is also subject to their own terms and privacy policies.
/09. Data Retention
- Contact/support data: up to 24 months after your last interaction.
- Account/contract data (if applicable): for the relationship duration and up to 10 years for legal/accounting duties.
- Security logs: typically 7–12 months (longer if needed for incident response).
- Cookies: per the durations shown in the cookie banner/vendor list.
- Consent-based processing: until consent is withdrawn or the stated period ends.
/10. Security
We apply appropriate technical and organizational measures (TLS/HTTPS, hardening, access controls, backups, logging, least-privilege). No system is 100% secure: please use strong, unique passwords and keep them confidential.
/11. Your Rights (Arts. 15–22 GDPR)
You have the right to access, rectify, erase, restrict, port, object, and to withdraw consent at any time.
To exercise your rights, contact privacy@ilayer.io [TODO DA COMPILARE: Pietro, conferma che questa casella esiste ed è monitorata].
You also have the right to lodge a complaint with your Supervisory Authority (e.g., the Italian Garante: www.garanteprivacy.it).
/12. Third-Party Links & Embeds
External websites, social widgets, maps, videos, wallets, explorers, and other embeds are governed by their own privacy policies. We are not responsible for their practices.
/13. Changes to This Policy
We may update this Policy to reflect legal, technical, or business developments. We will post the updated version here with a new “Last updated” date.