Privacy Policy
Information on the processing of personal data pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR).
Last updated: 1 July 2026
1. Data controller
Lemonlights S.r.l., Via per Inveruno 99/101, 20038 Busto Garolfo (MI), Italy — VAT IT12904120966.
Email: info@lemonlights.eu · Certified email (PEC): lemonlights@pec.lemonlights.eu
The Controller has not appointed a Data Protection Officer (DPO), as the legal requirements do not apply. For any privacy matter, please write to the email address above.
2. What data we process
a) Browsing data
The IT systems and software procedures that operate this website acquire, during normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP address, browser and device type, request time, pages visited). This data is processed by the hosting provider in the server's technical logs, solely for the operation and security of the site, and is not used to identify you.
b) Data you provide voluntarily
When you fill in the contact form or request a demo, you provide the data entered in the form (e.g. name, company, email and the content of your message). If you subscribe to the newsletter, we process your email address. Providing data is optional, but without the data required we will not be able to act on your request.
We do not process special categories of data (Art. 9 GDPR) and we carry out no automated decision-making or profiling.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Operation and security of the site | Legitimate interest (Art. 6(1)(f)) |
| Responding to contact / demo requests | Pre-contractual measures at your request (Art. 6(1)(b)) |
| Sending the newsletter | Consent, revocable at any time (Art. 6(1)(a)) |
| Legal obligations (accounting, tax) | Legal obligation (Art. 6(1)(c)) |
4. Data retention
We keep data only for as long as necessary for the purposes it was collected for: technical logs for short, security-related periods; contact-request data for the time needed to handle the request and any resulting relationship; newsletter data until consent is withdrawn. After those periods the data is deleted or anonymised, subject to retention obligations required by law.
5. Recipients and processors
Data is not disclosed or sold to third parties. It may be processed on our behalf, as Processors under Art. 28 GDPR, by suppliers providing technical services to us — in particular the hosting provider Aruba S.p.A. (servers located within the European Union). Data may also be shared with professionals and authorities where required by law.
6. Transfers outside the EU
This site is designed not to transfer data outside the European Economic Area: fonts, icons and images are hosted directly on our own servers, without relying on third-party CDNs. We do not use remote Google Fonts, analytics services or social plugins that would entail transfers to third countries.
7. Cookies
The site uses only technical tools and does not employ profiling cookies. For details, see the Cookie Policy.
8. Your rights
As a data subject you may exercise, within the limits of the law, the rights set out in Articles 15-22 of the GDPR:
- access to your data and to information about the processing;
- rectification of inaccurate data and completion of incomplete data;
- erasure ("right to be forgotten") and restriction of processing;
- portability of the data you provided to us;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting processing already carried out.
To exercise your rights, write to info@lemonlights.eu. We will reply without undue delay and in any case within the statutory time limits.
9. Complaint to the supervisory authority
If you believe the processing of your data infringes the law, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the EU State where you reside.
10. Changes to this notice
We may update this notice to reflect legal changes or changes to the services offered. The version in force is always the one published on this page, with the last-updated date shown at the top.