Updated 28 October 2026 · Version 1
Privacy policy
Information under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). This notice covers the Obermon marketing website, not the monitoring service at hub.obermon.com.
1. Data controller
Obermon is a project of Tommaso Miotto, who is the data controller. There is no company: Obermon is a project name, used by an individual for a market test. A market test is not exempt from the GDPR.
The website lists hello@obermon.com as its contact address. Its operation and management by the controller must be confirmed before this notice is finalized for publication.
2. Data and purposes
Browsing: IP address, device and browser details, requested resources and timestamps may be processed by the hosting infrastructure to deliver pages, operate the website and prevent abuse. The legal basis is the legitimate interest in operating and protecting the site (Article 6(1)(f)), balanced against individuals’ rights.
Contact: when emailing or requesting a demo, you provide your email address and message content. Data is used to answer your request, based on steps at your request before entering a contract (Article 6(1)(b)), where applicable, or the legitimate interest in responding to other enquiries (Article 6(1)(f)). Do not send passwords, server data or unnecessary sensitive information.
Optional analytics: only with consent, Google Analytics 4 collects visits, pages and technical device details, including cookie identifiers. Google receives the IP in the connection; its GA4 documentation says it does not log or store it. This does not make all data anonymous. The legal basis is consent (Article 6(1)(a)). Page-view events sent by this application omit query strings, URL fragments and external referrer paths.
Preferences: your cookie choice is stored in the browser to remember and respect consent or refusal. This is necessary technical storage, not advertising.
3. Providing data
Technical data necessary for internet communication is required to display pages. Emailing and analytics consent are optional. Rejecting Analytics does not restrict access. Without a contact method, the controller cannot respond to an enquiry.
4. Recipients and providers
The site is hosted on a managed hosting platform, which may process technical data and logs under the applicable terms. The contracting entity, subprocessors and processing agreements must be checked for this project. No European data-residency claim is made.
Google supplies optional Analytics. Its contracting entity and precise role depend on accepted account terms and data-sharing settings. The site tag disables Google Signals and advertising personalization. Account-level sharing with other Google products still needs checking.
The email provider remains to be identified. Data may be provided to authorities where legally required. This is not a finalized recipient list until these details have been verified.
5. Retention
Cookie choices are stored for six calendar months unless cleared earlier. The site configures Analytics cookies for up to 180 days, without automatic renewal; browsers may impose shorter limits.
GA4 account retention is separate from cookie lifetime and must be checked and specified before final publication. Actual retention periods or criteria for emails, hosting logs and backups must also be completed. Unconfirmed periods are not attributed to providers’ existing records.
6. Transfers outside the EEA
Hosting, email and Google services may involve infrastructure outside the EEA. Cookie consent does not replace international-transfer requirements. Before final publication, destination countries, receiving entities and applicable safeguards must be checked (adequacy decisions or standard contractual clauses and additional measures where required). General provider terms alone do not establish this project’s safeguards.
7. Rights and withdrawal
You may request access, correction, erasure, restriction and, where applicable, portability. You may object to legitimate-interest processing and withdraw consent without affecting the lawfulness of earlier processing (Articles 15–22 GDPR). Use “Cookie preferences” at the bottom of any page to withdraw analytics consent. Withdrawal stops subsequent collection and deletes accessible GA cookies on this site; it does not automatically erase data already sent to Google.
For other rights, contact the controller using the confirmed working contact method, which still needs verification. Requests are normally answered within one month; justified extensions will be notified within GDPR deadlines. Proportionate identity verification may be required. You may complain to Italy’s Garante per la protezione dei dati personali (www.garanteprivacy.it) or the competent supervisory authority in the EEA country where you live or work.
8. Scope and changes
This website has no signup forms and does not process server-monitoring data here. Links to hub.obermon.com open a separate service: read its privacy notice before use. No automated decisions producing legal or similarly significant effects are made about visitors. Material changes to purposes or tools will be documented here and require renewed consent where necessary.