Privacy notice and cookie policy

The data controller is AINEVERSTOPS, reachable at hello@aineverstops.com. For any request about your personal data (exercising your rights, withdrawing consent, questions) write to this address.

This notice covers the website aineverstops.com and the services available through it (contact form, newsletter, Observatory).

Contact form. We collect name, email, company, service of interest and message. We use them solely to answer your request and provide the first assessment. Legal basis: steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR). Providing the data is necessary for us to reply.

Newsletter. We collect your email address to send you Observatory updates. Legal basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time by writing to hello@aineverstops.com, without affecting the lawfulness of processing carried out before withdrawal.

Navigation data. The systems running the site collect, in normal operation, technical data such as IP address, user agent, requested pages and timestamps (server logs). The forms also use short-lived anti-abuse counters derived from the IP address and an anti-spam check (Google reCAPTCHA v3). Legal basis: our legitimate interest in the security and proper functioning of the site (art. 6(1)(f) GDPR).

Analytics and advertising cookies. Used only with your consent (art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code). See the Cookies section below.

Data is processed by the AINEVERSTOPS team and by the following providers, acting as processors or as independent controllers for the services they provide:

• Vercel Inc. — website hosting and technical request logs (privacy policy). Non-EU transfer covered by standard contractual clauses.
• Telegram (Telegram FZ-LLC) — form submissions are notified to the team through the Telegram Bot API; this involves a transfer outside the EU (privacy policy).
• Brevo (Sendinblue SAS, France) — email delivery of submissions to the team and newsletter sending (privacy policy).
• Google Analytics 4 (Google Ireland Ltd.) — aggregated usage statistics, configured with Consent Mode: no analytics cookies are set without your consent (privacy policy, opt-out).
• Google AdSense / DoubleClick (Google Ireland Ltd.) — advertising on the site. Google and its partners may use advertising cookies (including the DoubleClick cookie) to serve ads based on your visits to this and other websites. Learn more: how Google uses data in advertising; you can opt out of personalised advertising in Google Ads Settings.
• Google reCAPTCHA v3 (Google Ireland Ltd.) — anti-spam protection for the forms: it analyses your interaction with the page (IP, browsing behaviour) to tell people from bots. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
• TradeDoubler AB (Sweden) — affiliate network of our sponsor NordVPN: sponsored links and banners use attribution pixels and cookies to recognise purchases originating from this site (privacy policy).
• Upstash Inc. — short-lived rate-limit counters for the forms, derived from the IP address and automatically deleted within minutes (privacy policy).

Data is never sold or disclosed to the public. Any transfer to countries outside the EU relies on adequacy decisions or standard contractual clauses (artt. 45-46 GDPR).

• Contact form requests: 24 months from the last contact, unless a contractual relationship follows (then for its duration and the statutory terms).
• Newsletter: until you withdraw consent or the service is discontinued.
• Technical logs and anti-abuse counters: for the technical periods set by each provider (rate-limit counters expire within minutes).
• Cookies: for the lifetimes stated in the Cookies section.

Under artt. 15-22 GDPR you have the right to access your data, to rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw any consent you have given at any time.

To exercise your rights write to hello@aineverstops.com. You also have the right to lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali.

Technical cookies. Required for the site to work (e.g. your consent preference, anti-spam protection). No consent needed.

Analytics cookies. Google Analytics 4 measures, in aggregate, how the site is used (page views, referrers, device). Main cookies: _ga (2 years), _ga_* (2 years). Active only with your consent.

Advertising and affiliate cookies. Google AdSense/DoubleClick (ad serving, measurement and — where allowed — personalisation): active only with your consent; without it Google may show non-personalised ads. TradeDoubler (attribution of NordVPN sponsored links): the impression pixels and attribution cookies are loaded together with the sponsor creative when the page is displayed; you can block them in your browser settings or at youronlinechoices.com.

How to manage them. You can change your choices from the consent banner, delete or block cookies in your browser settings, opt out of personalised advertising at adssettings.google.com and manage participating ad vendors at youronlinechoices.com. Blocking technical cookies may break parts of the site.

This notice may be updated to reflect changes in our services or in the law. The version in force is always published at this address with the date of the last update.