Privacy policy

1. Data controller

The Data Controller for personal data collected via the website qore.auxilium.online is:

Auxilium S.r.l.
Registered and operating office: Corso Europa 601, 10088 Volpiano (TO), Italy
VAT and Tax Code: IT09971770012 · R.E.A. TO 1095955
Share capital: € 100,000.00 fully paid-up
Tel.: +39 011 19750904 — Email: qore@auxilium.online
Dedicated privacy email: privacy@auxilium-ict.com

Auxilium S.r.l. owns the registered trademark QORE and directly operates the qore.auxilium.online website and the related operational infrastructure.

2. Personal data collected

The Controller collects the following categories of personal data:

2.1 Navigation data

IP address, browser user agent, pages visited, date and time of visits, referrer. Such data are automatically collected by server logs and by analytics tools installed on the site.

2.2 Data voluntarily provided

First name, last name, email, phone number (optional), profile (retail trader, professional, academy, etc.), message content. Data collected via the site contact form.

2.3 Billing data (active clients)

For clients subscribing to the QORE service, Auxilium S.r.l. collects and processes: legal name or first/last name, residence or registered office address, tax code and/or VAT number, recipient code or PEC for electronic invoicing, banking details for payments and credits, amount and detail of invoiced services.

2.4 Operational data (active clients)

Platform access credentials (encrypted), tenant configuration, logs of operations executed on the client broker account. Please note that Auxilium S.r.l. does not custody capital of clients: operating capital always remains at the broker chosen by the client, in the client name.

3. Purposes and legal basis of processing

Data are processed for the following purposes:

• Response to contact requests received via the site form or email. Legal basis: art. 6.1.b GDPR (pre-contractual measures at the data subject request) and art. 6.1.f GDPR (legitimate interest in responding to incoming requests).
• Contract performance for clients subscribing to the QORE service: delivery of the service, support, operational communications. Legal basis: art. 6.1.b GDPR (contract performance).
• Compliance with tax, accounting and administrative obligations (invoice issuance, accounting record retention, tax filings). Legal basis: art. 6.1.c GDPR (legal obligation) — in particular Italian Presidential Decree 633/1972, Legislative Decree 127/2015 (electronic invoicing), art. 2220 Civil Code (retention of accounting records).
• Site traffic analysis in aggregated and anonymized form (analytics). Legal basis: art. 6.1.a GDPR (consent, collected via cookie banner) for non-strictly technical analytics cookies.
• IT security: fraud prevention, unauthorized access, attacks on the site. Legal basis: art. 6.1.f GDPR (legitimate interest).

4. Processing methods

Processing is carried out with IT tools and with security measures suitable to prevent data loss, unlawful or improper uses, and unauthorized access (art. 32 GDPR). Data are processed exclusively by authorized and trained personnel of the Controller, bound by confidentiality.

Hosting servers: the qore.auxilium.online website and the operational infrastructure are hosted on servers owned by the Controller, located in Italy (Auxilium data center). Personal data are not transferred outside the European Economic Area.

5. Retention period

Data are retained for the following periods:

• Navigation data (server logs): 12 months, except where longer retention is necessary for security needs or legal obligations.
• Contact form data: 24 months from the last interaction, after which they are deleted or anonymized unless they evolve into a contractual relationship.
• Contractual and billing data: 10 years from termination of the relationship, pursuant to art. 2220 of the Italian Civil Code (mandatory retention of accounting records) and tax legislation.
• Tenant operational data: for the entire duration of the contract and up to 24 months after termination, except for specific export or anticipated deletion requests.
• Analytics cookies: according to cookie banner specifications, typically 13 months.

6. Communication and recipients of data

Personal data are NOT disclosed nor communicated to third parties for marketing purposes. Data may be communicated only to:

• Judicial, public security or other competent authorities, upon their lawful request and within legal limits.
• Accountants and tax consultants, exclusively for accounting and tax compliance, appointed as Data Processors under art. 28 GDPR.
• Entities providing technical services instrumental to site operation (e.g. email service providers), limited to what is necessary for service provision and with specific external Processor appointment contracts.

At present Auxilium S.r.l. does not use third-party services for the processing of personal data collected from the website (e.g. external CRM, mailing, ticketing). Any new services will be mentioned by updating this notice and, where required, with new data subject consent.

7. Transfer of data outside the EU

Personal data are processed and stored exclusively within the European Economic Area (EEA), on servers physically located in Italy. No transfers of personal data to countries outside the EEA are planned.

8. Data subject rights

Pursuant to articles 15-22 GDPR, the data subject has the right to:

• Access their personal data (art. 15)
• Rectification of inaccurate data or integration of incomplete data (art. 16)
• Erasure of data ("right to be forgotten"), within the limits provided by law (art. 17)
• Restriction of processing (art. 18)
• Portability of data in a structured and commonly used format (art. 20)
• Objection to processing based on legitimate interest (art. 21)
• Withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (art. 7.3)
• Not to be subject to automated decisions producing significant legal effects (art. 22) — Auxilium S.r.l. does not perform automatic profiling of site visitors

To exercise these rights the data subject can send a written request to privacy@auxilium-ict.com, with a copy of an ID document for verification.

9. Right to lodge a complaint with the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali) if they believe the processing of their personal data violates applicable regulations. Reference: Piazza Venezia 11, 00187 Rome · www.garanteprivacy.it.

10. Cookies

The use of cookies and similar technologies on the site is described in the Cookie Policy, to which we refer in full.

11. Changes to this notice

Auxilium S.r.l. reserves the right to modify this notice at any time to adapt it to any regulatory changes or the introduction of new services. Changes will be published on this page indicating the date of the last update and, where substantial, with notice on first access for registered users or via the cookie banner.

12. Privacy contacts

For any request regarding the processing of personal data, please contact Auxilium S.r.l. at privacy@auxilium-ict.com. The Controller responds within the legal timeframe, normally within 30 days of receiving the request.

Notice drafted in compliance with EU Regulation 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended, and the guidelines of the Italian Data Protection Authority.