Privacy Policy at openterra.ai

Notice Regarding the Processing of Personal Data Collected Through This Website
Last revised: April 10, 2026

1. Introduction and Regulatory References
This notice describes the processing of personal data collected through this website, including data obtained through cookies, tracking technologies, and—where available—contact forms and any other features that may be active on the site.
This notice is intended for anyone who accesses or uses this website, describing how the user’s personal data is collected, used, and protected, as well as the rights granted by law.
These provisions do not apply to other websites, pages, or online services accessible via external links that may be present on the site; for those, you are encouraged to consult the relevant privacy notices.
This notice is provided in compliance with the principal national and international regulations on the protection of personal data, including:

Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC, known as the ePrivacy Directive
Swiss Federal Act on Data Protection (nFADP / FADP)
Other regulations that may apply.

2. Who manages your data and how can you contact us?
Your personal data is processed by:
OpenTerra GmbH / S.r.l.
NOI Techpark Alessandro-Volta-Straße 13/A 39100 Bolzano (BZ) South Tyrol, Italy
info@openterra.ai
VAT ID: 03275070211

For any information regarding the processing of personal data or to exercise the rights granted by law, data subjects may contact the Data Controller.

3. On what legal bases do we process your data?
The processing of personal data collected through this site (including data collected through cookies, similar technologies, contact forms, and any other features that may be active on the site) is based on one or more of the following legal bases:

Performance of pre-contractual or contractual obligations: where processing is necessary to respond to user requests, provide requested services, and—where the site offers such features—manage orders, accounts, or contractual relationships.
Compliance with legal obligations: where processing is necessary to comply with tax, accounting, administrative, or security obligations, or with requests from the authorities.

Another legal basis—the data controller’s legitimate interest—may be used for specific purposes (e.g., ensuring IT security, preventing fraud, and protecting the data controller’s rights in legal proceedings).

Failure to accept or the withdrawal of consent may limit certain features or services on the site.

4. What data do we collect when you visit the site?
While browsing this site, the following data may be collected, including through cookies and similar technologies such as pixel tags, web beacons, local storage, and equivalent technologies—namely:

Navigation and technical data: information such as IP addresses, device identifiers, data relating to the operating system and browser, requested URLs, connection times, technical logs, technical preferences, and usage data collected through cookies and tracking technologies (pixel tags, web beacons, local storage, and equivalent tools).

5. How do we process your data, how do we protect it, and how long do we keep it?
The personal data collected through this site is processed primarily by electronic and digital means in accordance with the principles of lawfulness, fairness, data minimization, integrity, and confidentiality.

Appropriate technical and organizational measures are implemented to prevent unauthorized access, loss, alteration, or unauthorized disclosure of data, including:

Encryption of communications (HTTPS): Communications between your browser and the site are protected by HTTPS encryption, a measure designed to reduce the risk of interception or tampering with the data transmitted while browsing;
Periodic backups: Data is copied and stored periodically to protect it from accidental loss or technical incidents;

Data is retained for the following periods:

Cookie preferences and consents: retained for 180 days, as described in the Cookie Policy on this site.
Navigation and technical data: retained for the time strictly necessary for security purposes and, as a rule, for no longer than 12 months, after which it is deleted or anonymized, except for longer periods required by legal obligations or by the need to establish, exercise, or defend a right in legal proceedings.
Data related to any contractual relationships established with the Data Controller: where such relationships exist, the data is retained for the duration of the relationship and, thereafter, for the period required by applicable legal obligations (for example, in accounting and tax matters).
Data entered through forms or specific requests: retained for as long as necessary to respond to the request and to fulfill the related purpose, and thereafter for any period required by legal obligations.

6. Who can receive your data?
The following parties may access the personal data collected through this site, within the limits of their respective responsibilities and purposes:

Authorized internal personnel designated by the Data Controller, who have received proper training on privacy and security matters;
Suppliers and third parties designated as Data Processors (for example: technical providers and IT service providers, website maintenance providers, email providers, and consultants, where applicable);
Third parties that provide services integrated into the site (e.g., fonts, maps, image display), which may process technical data as independent data controllers in accordance with their own privacy notices (in which case, please also consult the individual privacy notices of such third parties);
Competent public authorities and supervisory bodies, within the limits set by law or in order to comply with requests from judicial authorities;

The updated list of external recipients can be provided upon request by writing to the Data Controller at the contact address provided.

7. Where can your data be transferred?
The personal data collected through this site may be processed within the European Union / European Economic Area. In some cases, the use of third-party services may involve a transfer to third countries. Where transfers to the United States take place, these are made to providers that adhere to the EU-U.S. adequacy framework (Data Privacy Framework) or, failing that, on the basis of Standard Contractual Clauses.

8. What are your rights regarding the data collected?
Under applicable law, the user has the right to:

Obtain confirmation as to whether or not personal data concerning them is being processed and, if so, obtain access to that data and the related information (right of access).
Request the correction, updating, or deletion of data that is inaccurate or no longer necessary (right to correction and deletion).
Request the restriction of, or object to, the processing of data, including for promotional or profiling purposes, where applicable.
Request that data be provided in a structured and interoperable format (where technically possible).
You may withdraw any consent you have given at any time, without affecting the lawfulness of processing based on consent that took place prior to the withdrawal (for example, for the sending of commercial communications or newsletters, where applicable).
Withdraw your consent to the use of non-technical cookies and to the processing of data collected through tracking tools.
Report any irregularities or abuses to the relevant supervisory authorities.

To exercise these rights, simply send a request to the Data Controller using the contact information provided. The Data Controller will respond without undue delay and, in any case, within one month of receiving the request; this period may be extended by an additional two months in cases of particular complexity or a high volume of requests, in which case the data subject will be notified.

9. How is minors’ data processed?
The protection of minors is a fundamental priority.

This site is not intended for minors and does not intentionally collect their data through its forms. If, in the context of a request or inquiry, the user provides personal data relating to third parties—including any minors—they must ensure that they are authorized to do so; such data will be processed within the limits and for the purposes of the request, in compliance with applicable law. For requests regarding rectification, restriction, or erasure, please contact the Data Controller using the contact information provided.

10. How can you file reports or complaints with the authorities?
If you believe that the processing of your personal data through this site does not comply with applicable law, you may file a complaint free of charge with the competent supervisory authorities, including:

11. How do we notify you of changes to this notice?
This notice is subject to periodic revision to reflect regulatory changes or modifications to the services offered through the site. Any significant change will be communicated on this page.
Last revised: April 10, 2026