Privacy Policy
Last updated · 20 May 2026
How Cervio S.R.L. processes personal data on cervio.app, under GDPR Article 13 and applicable Italian privacy law.
This policy applies to the marketing website at https://cervio.app. The Site lets you browse product information and join the waitlist with your email address.
1. Data controller
Cervio S.R.L. Registered office: [INDIRIZZO SEDE LEGALE] VAT ID ITXXXXXXXXXX Email: privacy@cervio.app
Cervio S.R.L. is the independent data controller for personal data collected through the Site.
2. Categories of data collected
The Site collects the following categories of personal data, directly or through technical providers:
Data you provide voluntarily through the waitlist signup form: email address.
Data stored with your registration (to manage the waitlist): preferred language (locale), form source, IP address and user agent at signup, registration date and time.
Data collected automatically during browsing: IP address, browser type and version, operating system, pages visited, access date and time, language preference (NEXT_LOCALE cookie), cookie preferences (cervio-consent cookie), and other technical identifiers required to operate the Site.
Providing your email is optional but required to receive Cervio updates. Without it, we cannot send you those communications.
3. Purposes and legal bases
Personal data is processed for the following purposes:
Sending Cervio updates (waitlist, news, previews) - Legal basis: consent (GDPR Art. 6(1)(a)) - Data: email.
Managing the waitlist (registration, unsubscribe) - Legal basis: consent (Art. 6(1)(a)); pre-contractual steps (Art. 6(1)(b)) where applicable - Data: email, locale, source, IP, user agent, dates.
Operating, securing, and delivering the Site - Legal basis: legitimate interest (Art. 6(1)(f)) - Data: browsing and technical data.
Storing cookie preferences - Legal basis: consent where required (Art. 6(1)(a)) - Data: cookie banner choices.
Legal compliance - Legal basis: legal obligation (Art. 6(1)(c)) - Data: relevant data.
Defending legal claims and protecting rights - Legal basis: legitimate interest (Art. 6(1)(f)) - Data: relevant data.
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal, using the unsubscribe link in each email or by writing to privacy@cervio.app.
4. How we process data
Processing uses electronic means for the purposes described above, with appropriate technical and organisational security measures to prevent loss, misuse, unauthorised access, or unlawful processing.
Data is processed only by authorised staff instructed by the controller, or by external processors appointed under GDPR Art. 28.
5. Recipients
Personal data may be shared with:
Supabase Inc. (PostgreSQL database, media storage) - processor; US-based, with safeguards for transfers outside the EU.
Vercel Inc. (hosting, CDN) - processor; US-based, with safeguards for transfers outside the EU.
Email delivery providers (when activated for waitlist/newsletter) - processors under GDPR Art. 28.
Professional advisers (accountants, lawyers) in the course of their services.
Public authorities when legally required.
You may request an up-to-date list of processors by writing to privacy@cervio.app.
Data is not disclosed publicly and is not used for automated profiling or automated decision-making.
6. Transfers outside the EU
Some providers listed in section 5 are based in the United States. Transfers rely on EU Standard Contractual Clauses (Decision 2021/914) and, where applicable, the EU-US Data Privacy Framework.
7. Retention
Data is kept only as long as necessary for the purposes for which it was collected:
Waitlist (email and related data): until consent is withdrawn or up to 24 months of inactivity.
Browsing/technical logs: up to 12 months, unless longer retention is required to investigate offences.
Data required by law: for the period required by applicable rules (e.g. 10 years for accounting records).
Cookie preferences (cervio-consent): 6 months, as described in the Cookie Policy.
After the retention period, data is deleted or irreversibly anonymised.
8. Your rights
Under GDPR Articles 15–22 you have the right to:
Access your personal data and obtain a copy.
Rectify inaccurate or incomplete data.
Erase data where applicable ("right to be forgotten").
Restrict processing.
Object to processing based on legitimate interest.
Receive your data in a structured format (portability).
Withdraw consent at any time.
Lodge a complaint with your supervisory authority (www.garanteprivacy.it in Italy).
To exercise your rights, contact privacy@cervio.app. We respond within 30 days of receiving your request.
9. Cookies
The Site uses cookies and tracking tools, including a banner to manage your preferences. See our Cookie Policy at /legal/cookies for details.
10. Changes to this policy
We may update this policy at any time by publishing a new version on this page. Please check it regularly and refer to the "Last updated" date at the top.
For material changes, waitlist subscribers will also be notified by email.