Privacy
notice.
This notice describes how OLOtheme processes the personal data collected through the olotheme.com website, including these OLObuild pages, in accordance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Last updated: October 12, 2026
Data controller
The Data Controller is OLOtheme (hereinafter “OLOtheme” or the “Controller”), who can be contacted at the email address info@olotheme.com.
Full identification details (company name, registered office, VAT number) will be provided as soon as the company's incorporation is completed.
Types of data collected
We collect the following personal data, only if voluntarily provided by the user:
- Contact data: first name, last name, email address, possibly phone number (provided through the “Book a demo” form or by direct communication).
- OLOfounder application data: first name, last name, email address, country, profile, website or portfolio (optional), the .json file of the page built in the sandbox and, if chosen, the consent to appear in the OLOfounder register. The attached page is used for the review: it goes into the OLObuild library only with the author’s agreement.
- Browsing data: IP address (in anonymized form), browser type, operating system, pages visited, visit duration, referral source. Collected automatically through analytics cookies (only with prior consent).
- Technical support data: logs of interactions with the try.olotheme.com sandbox (anonymous SID cookie, content of the cloned template). They are deleted automatically after 48 hours of inactivity.
Purposes and legal basis
- Replying to demo, information and support requests
Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR). Retention: up to 24 months from the last contact. - Reviewing OLOfounder applications and running the program (automatic check and review of the page, delivery of OLObuild, points and licenses)
Legal basis: performance of pre-contractual measures and of the rules accepted with the application (Art. 6(1)(b) GDPR). Retention: up to 24 months from the last contact. - OLOfounder register (name and website published on this site, only for those who get in)
Legal basis: consent of the data subject, given with the optional checkbox of the form (Art. 6(1)(a) GDPR), revocable at any time. Retention: until consent is withdrawn. - Newsletter and commercial communications
Legal basis: explicit consent of the data subject (Art. 6(1)(a) GDPR), revocable at any time. Retention: until consent is withdrawn. - Statistical analysis of traffic
Legal basis: explicit consent (analytics cookies). Retention: maximum 26 months (Microsoft Clarity / Google Analytics). - Compliance with legal obligations (e.g. invoicing)
Legal basis: legal obligation (Art. 6(1)(c) GDPR). Retention: 10 years (Art. 2220 of the Italian Civil Code).
Processing methods
Personal data is processed by electronic means, adopting technical and organizational measures suited to ensuring the security, integrity and confidentiality of the data, as required by Art. 32 GDPR. The hosting servers are located in the European Economic Area.
Disclosure to third parties
Personal data may be disclosed to the following parties, designated as data processors under Art. 28 GDPR:
- Hostinger International, Ltd.: hosting provider (EU servers)
- Microsoft Corporation: Microsoft Clarity for session analysis (only with prior consent)
- Stripe / PayPal: payment processing for license purchases (when applicable)
- Professional advisors (accountants, lawyers) for regulatory compliance
We do not sell or transfer data to third parties for marketing purposes.
Transfers outside the EU
Microsoft Clarity may transfer data to the United States. The transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission (decision 2021/914) and the EU-US Data Privacy Framework.
Rights of the data subject
At any time you can exercise the following rights by writing to info@olotheme.com:
- Access to your data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of data (“right to be forgotten”, Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 GDPR)
- Complaint to the Italian Data Protection Authority (www.garanteprivacy.it)
Cookies
For detailed information about the cookies used, see our Cookie Policy. You can change your preferences at any time through the cookie panel reachable from the footer.
Changes to this notice
This notice may be updated. The date of the latest update is shown at the top of the page. We invite you to check it periodically.
Contact
For any question about this notice or the processing of your data, write to us at info@olotheme.com.