1. Data controller
Pomiager, Via di Corticella 181/3 40128 Bologna · VAT 03332011208. Contact: amministrazione@pomiager.com.
2. What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| The questions you type or dictate and the answers generated | Answering you; measuring usage and costs; improving the service | Legitimate interest (art. 6.1.f GDPR) | 90 days, then only aggregated figures for 13 months |
| A pseudonymised fingerprint of your IP address (HMAC hash; the address itself is never stored) | Fair-use limits per visitor and abuse prevention | Legitimate interest | daily counters 62 days, monthly counters 14 months |
A technical session cookie (pomiagent_sid) | Keeping the conversation context during your visit | Strictly necessary (art. 122 Italian Privacy Code): no consent banner is required | 90 days or until you clear it |
We do not create profiles of you and we do not use your data for advertising. Guided conversations started from a card on the home page keep a short, non-personal summary of your preferences for the duration of the session only; personal data such as e-mails or phone numbers are filtered out before it is saved.
3. Cookies
The portal uses a single first-party technical cookie, pomiagent_sid (httpOnly, SameSite=Lax), needed to keep your conversation. Preferences such as the width of the panels are kept in your browser's local storage and never sent to us. No analytics or marketing cookies are used, which is why no cookie banner is shown.
4. Recipients and transfers
The service runs on Microsoft Azure (EU data centres). Questions and the excerpts needed to answer them are processed by Azure OpenAI as data processors; they do not use this data to train models. No data is sold or shared with other third parties.
5. Your rights
You can ask for access, rectification, erasure, restriction, portability and object to the processing (art. 15–22 GDPR) by writing to amministrazione@pomiager.com. You can also lodge a complaint with the Italian Data Protection Authority (Garante).
6. Artificial intelligence (EU AI Act compliance)
You are interacting with an artificial intelligence system (Regulation (EU) 2024/1689, art. 50). PomIAgent is a conversational assistant that answers using only the material the company has published: website pages and documents indexed in a knowledge base. It never uses external sources and declares when it has no information on a topic.
- Answers are generated automatically and may contain inaccuracies: check the sources listed at the bottom of every page ("How I built this page") and contact a person for binding information.
- The system does not take decisions about you, does not recognise emotions and does not perform biometric identification; it is not a high-risk AI system under the Regulation.
- The optional voice features read answers aloud only when you press the speaker icon; synthetic speech is clearly presented as such.
- A human contact is always available through the "Talk to a person" button.