Privacy notice

1. Data controller

The data controller is the person or legal entity responsible for operating the CityCortex project and website. Privacy enquiries can be sent to hello@citycortex.io.

To be completed before publication: the controller’s full legal name, registered address or professional address, tax/VAT identification (where applicable), and any Data Protection Officer contact details if a DPO has been appointed. These particulars have not yet been supplied.

2. Personal data we process

Technical browsing data may be processed when the site is accessed, such as IP address, time and date of the request, requested resource, browser and device information, and information required for infrastructure security. Whether these data are actually logged or retained depends on the hosting and technical services in use.

If you contact us by email, we may process your email address, name, role, organisation, contact details and any information you choose to include in your message.

The website has no contact form. The dashboard and AI agent displays are illustrative and do not analyse the personal data of website visitors.

3. Purposes and lawful bases

• Website operation and security: delivering the website, maintaining technical operations and protecting against misuse or unauthorised access, relying where applicable on our legitimate interests in securely operating the service (Article 6(1)(f) GDPR).
• Responding to enquiries: handling correspondence and, where relevant, steps requested by an individual before entering into a contract (Article 6(1)(b)), or our legitimate interests in responding to enquiries (Article 6(1)(f)).
• Legal obligations: complying with applicable legal requirements when required (Article 6(1)(c)).

This version of the website does not include newsletters, commercial profiling or advertising tracking.

4. Whether providing data is required

You do not need to supply personal information voluntarily merely to browse the site. Sending an email is optional, although we may not be able to respond meaningfully without sufficient contact details or relevant information.

5. Recipients and service providers

Where necessary, personal data may be accessed by authorised personnel and technical providers responsible for hosting, infrastructure or email services. Depending on their role, those providers may act as processors or independent controllers.

To verify: the identities and locations of the hosting, CDN, DNS, email and security providers actually used, together with their data protection roles.

6. International transfers

The HTML file alone does not establish whether the live website or email system entails transfers of personal data outside the European Economic Area. Before publication, the providers must be checked and, where relevant, the destinations, transfer arrangements and safeguards under Articles 44 and following of the GDPR must be specified.

7. Retention periods

Email correspondence is kept for as long as necessary to handle an enquiry and, if a working relationship begins, for any additional periods required for administrative and legal purposes. Any technical logs are retained under policies that must be verified with the relevant provider before publication.

To confirm: the actual retention periods for emails and technical access logs, or the specific criteria used to determine them.

8. Your rights

Where the GDPR applies, you may request access to, rectification or erasure of your personal data, restriction of processing or data portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of previous processing.

Please contact hello@citycortex.io to exercise your rights. You may also lodge a complaint with the Italian Data Protection Authority (Garante) or another competent supervisory authority.

9. Automated decisions and profiling

The demonstration website does not make decisions about visitors which have legal or similarly significant effects, and it does not profile visitors. The AI agents described on this website are part of the proposed CityCortex platform; they do not analyse people visiting these pages.

10. Updates and legal references

This notice will be updated if the controller, providers, processing activities or deployed functionality change. Legal reference: Regulation (EU) 2016/679.