(Regulation (EU) 2016/679, Articles 13 and 14; for contact persons of clients established in Switzerland, also the Swiss Federal Act on Data Protection — see final section)
Controller. Redexe S.r.l. a socio unico, via Battaglione Framarin 14, 36100 Vicenza, Italy — r.donati@redexe.net — represented by its sole director Riccardo Donati. No data protection officer has been appointed.
Data processed and their source. First name, surname, role, business telephone number and email address; the content of the communications exchanged in the service channels (messaging group, email) and the related metadata (dates, times). Identification and contact data are provided to us by the client you work for, or directly by you in the course of the relationship.
Purposes and legal basis. The data are processed in order to: (a) perform the data-processing contracts entered into with the client (processing requests, delivery of reports, clarifications on methodology and results); (b) manage the relationship and document the services rendered, also to protect Redexe's rights. Legal basis: the legitimate interest of Redexe and of the client in managing the contractual relationship through their respective contact persons (Article 6(1)(f)); where the contact person is itself a party to the contract, the performance of the contract (Article 6(1)(b)). No consent is required. Providing your contact details is necessary in order to take part in the service channels: otherwise you cannot be added to the group.
Assistant based on artificial intelligence. In the messaging group you also interact with an automated assistant based on generative artificial intelligence operated by Redexe, which introduces itself as such. Your messages in the group are processed by the provider of the model used by the assistant (see Recipients). The service involves no decisions based solely on automated processing and no profiling within the meaning of Article 22.
Recipients. The data may be accessed by: the provider of the messaging service (WhatsApp Ireland Limited); the provider of the artificial-intelligence model used by the assistant (OpenAI — OpenAI Ireland Limited for data from the European Union and Switzerland), bound to Redexe by a data processing agreement; the provider of the shared folders used to deliver the results (Google LLC — Google Drive); the hosting and email provider (Aruba S.p.A., Italy); Redexe's authorised persons. The data are neither disclosed to other third parties nor disseminated.
Transfers to countries outside the EU. Some providers, or their sub-providers, are established in the United States of America: transfers take place on the basis of an adequacy decision of the European Commission (for organisations participating in the Data Privacy Framework) or of the standard contractual clauses adopted by the European Commission; a copy of the safeguards is available on request.
Retention. Communications in the service channels are kept, as a record of requests and deliveries, for the duration of the contract with the client and for the subsequent period needed to protect the parties' rights, and are then deleted; contact data are kept for as long as you are a contact person of the client and for the same subsequent period.
Rights. You may ask Redexe for access to your data, their rectification or erasure, the restriction of processing, and you may object to processing based on legitimate interest, by writing to the contacts indicated above. You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
If you work for a client established in Switzerland, the processing of your data is also subject — alongside Regulation (EU) 2016/679 — to the Swiss Federal Act on Data Protection of 25 September 2020 (FADP), since the processing produces effects in Switzerland. The information above also serves the purposes of Article 19 FADP; in addition:
Controller, representative and authority. The controller is Redexe S.r.l. (contact details above). Redexe has not appointed a representative in Switzerland, as the conditions set out in Article 14 FADP are not met. The supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).
Purpose and lawfulness of the processing. Your data are processed in direct connection with the performance of the contract between Redexe and the client you work for (processing requests, delivery of results, clarifications, documentation of the services rendered), in compliance with the principles of lawfulness, good faith, proportionality and purpose limitation; your consent is not required. Categories of data processed, including where not collected directly from you but communicated by the client: business identification and contact data; content and metadata of the communications exchanged in the service channels.
Countries of destination of the data and safeguards. The data are processed by Redexe in Italy, a country recognised by the Federal Council as providing adequate data protection. The providers listed under "Recipients" may also process the data in the United States of America: for organisations certified under the Swiss-U.S. Data Privacy Framework the level of protection is recognised as adequate; in the other cases the disclosure takes place on the basis of data protection contractual clauses or of standard clauses recognised by the FDPIC. The status of each provider and a copy of the safeguards applied are available on request.
Retention. The criterion indicated above applies; the data are destroyed or anonymised as soon as they are no longer needed for the purpose of the processing.
Rights. You may ask Redexe whether data concerning you are being processed and obtain the information provided for by Article 25 FADP; you may request the rectification of inaccurate data and assert the further claims provided for by law, including the prohibition of a specific processing or disclosure to third parties and the erasure of the data (Article 32 FADP), by writing to the controller's contacts. You remain free to contact the FDPIC.
Automated decisions. The service involves no automated individual decisions within the meaning of Article 21 FADP.
Version of 22 August 2026. Redexe S.r.l. a socio unico – via Battaglione Framarin 14, 36100 Vicenza, Italy – r.donati@redexe.net. Available at https://www.redexe.net/en/informativa-referenti/ (Italian version: https://www.redexe.net/informativa-referenti/).