Privacy Policy
Last updated: 27 September 2026
This website has no contact forms, requires no registration and uses no analytics or profiling tools. The data we process is minimal, and this page sets out exactly what it is and why.
01Who processes your data
The data controller is IOIEN CONSULTING – FZCO, Building 1, Dubai Silicon Oasis, Dubai, United Arab Emirates, commercial licence No. 55164.
For any matter concerning your personal data, including the exercise of the rights set out in section 8, write to info@ioien.com.
02Why European law applies
IOIEN is established in the United Arab Emirates but offers its services to companies and individuals located in the European Union. Data collected through this website is therefore processed in accordance with Regulation (EU) 2016/679 (GDPR), applicable under its Article 3(2), and — for Italian users — with Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
03What we collect
a) Navigation data
Like any website, the server hosting ioien.com automatically records certain technical information on each visit: IP address, browser and operating system type, date and time of the request, page requested and server response code. This serves to operate the site, detect malfunctions and protect it against abuse.
We do not use this data to identify visitors and we do not combine it with other information. It could be used to establish liability only in the event of computer crimes against the site.
b) Data you send us by writing to us
The site displays an email address. If you write to us, we process whatever your message contains: name, email address, company, and any other information you choose to include. We ask you not to send us special categories of data — health, religious or political beliefs, trade union membership — as we do not need them and do not wish to process them.
c) Language preference
The site remembers whether you prefer to read it in Italian or English by storing that
single choice in your browser's local storage, under the name ioien-lang. It is
not a profiling cookie, it is never transmitted to us or to third parties, and it cannot
identify you. Details are in the Cookie Policy.
04Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Operating the site and protecting it from abuse | Navigation data | Legitimate interest — Art. 6(1)(f) GDPR |
| Replying to your enquiries and assessing a possible business relationship | Data contained in your email | Pre-contractual steps taken at your request — Art. 6(1)(b) GDPR |
| Remembering the language you selected | Local preference | Strictly necessary for a service you explicitly requested — Art. 122, Legislative Decree 196/2003 |
| Complying with legal, accounting and tax obligations | Contact and contractual data | Legal obligation — Art. 6(1)(c) GDPR |
Providing data is always optional: if you do not write to us, we process no data about you beyond the server's technical logs.
05How long we keep it
- Navigation data: for the technical period set by the hosting provider, as a rule no longer than twelve months, unless needed to establish unlawful conduct.
- Email: for as long as needed to handle your enquiry. If a business relationship follows, for the duration of that relationship and the subsequent ten years required for accounting and contractual records.
- Language preference: remains in your browser until you delete it.
06Who else can see your data
We do not sell, trade or otherwise transfer personal data to anyone. It is accessible only to the providers of services we rely on, each appointed as a processor under Art. 28 GDPR where required:
- Netlify, Inc. — website hosting (United States)
- Aruba S.p.A. — domain registration and email (Italy)
- The accounting and legal professionals who assist us, where necessary
Data may also be disclosed to the competent authorities where the law so requires.
07Transfers outside the European Union
Two transfers are structural and we state them plainly:
- to the United Arab Emirates, where the data controller is established;
- to the United States, where the hosting provider is established.
Both countries lie outside the European Economic Area. Transfers take place on the basis of the standard contractual clauses adopted by the European Commission under Art. 46(2)(c) GDPR, supplemented by the technical and organisational measures set out in our contracts with those providers. You may request a copy of the safeguards in place by writing to info@ioien.com.
08Your rights
At any time you have the right to obtain:
- access to the data concerning you and a copy of it (Art. 15);
- rectification of inaccurate data or completion of incomplete data (Art. 16);
- erasure of your data, where the legal conditions are met (Art. 17);
- restriction of processing (Art. 18);
- portability of your data in a machine-readable format (Art. 20);
- objection to processing based on legitimate interest (Art. 21).
An email to info@ioien.com is enough — no particular form is required. We reply within one month of the request, a period that may be extended by two months in particularly complex cases, of which we will inform you.
09Complaint to a supervisory authority
If you believe the processing of your data infringes the law, you may lodge a complaint with the Italian Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome (garanteprivacy.it), or with the supervisory authority of the Member State in which you reside.
10Changes to this policy
If the services offered on this site or the tools we use change, we update this page and amend the date shown at the top. Please review it from time to time.