Privacy & cookie policy

This policy explains how the personal data of visitors to ametric-strutture.com is handled, under EU Regulation 2016/679 (GDPR). This is a showcase site: it sells no products, requires no sign-up and uses no tracking or advertising profiling tools. The policy also covers the data processed to activate and manage licences of the AMetric Toolbox software (see the dedicated section).

Data controller

Ing. Andrea Mercurio — AMetric · VAT 04187460136

Email: mercurio@ametric-strutture.com

Data processed and purposes

• Browsing data (technical logs). For the site to work and stay secure, servers automatically record technical data such as IP address, date and time of the request and browser type. This is processed by the hosting provider to ensure stability and protection against abuse. Legal basis: legitimate interest (Art. 6.1.f GDPR).
• Data sent through the forms. When you fill in the contact form, the course pre-enrollment form or the form shown before the AMetric Toolbox download, you provide data such as name, email, optional phone and the message content. It is used only to reply to your request, handle the pre-enrollment or ask whether the software installed successfully, and is never shared with third parties for commercial purposes. Legal basis: responding to your request and pre-contractual measures (Art. 6.1.b GDPR).
• Communications about the software. The email address you give when downloading or activating AMetric Toolbox is used for communications strictly related to the software (updates, new versions, expiry of the trial or of the licence, support), not for promotional communications, and is never shared with third parties for commercial purposes. Legal basis: performance of the contract (Art. 6.1.b GDPR). You can object at any time by writing to the controller.

AMetric Toolbox software licences

If you use the AMetric Toolbox software, activating and managing your licence involves processing the following data: email address, licence code, a technical identifier of the workstation the software is installed on (Machine ID) and the dates of activation and periodic licence checks. The Machine ID is a code derived from the computer's configuration and contains no personal information in itself.

• Activation required for every module. From version 1.2, opening any module of the software requires activating the free 30-day trial with an email address. The free tools stay usable with no time limit after the trial; only the paid modules require a licence. If the same email is used on another computer, the service restores the same trial instead of granting a new one, and the associated Machine ID changes.
• Data stored on your computer. The software keeps a few service files in the user folder (activation status and acceptance of the licence agreement, with the email address), which you can delete at any time; uninstalling does not remove them.
• Purposes and legal bases.
  • Activating and managing the trial and the licence, checking their validity and providing support: performance of the licence agreement (Art. 6.1.b GDPR). This also applies to the free modules, whose licence to use is part of the same agreement: the software cannot be activated without an email address.
  • Preventing unauthorised use and abuse of the trial (for example several trials with the same address or on the same computer): legitimate interest of the controller (Art. 6.1.f GDPR).
  • Accounting and tax obligations for paid licences: legal obligation (Art. 6.1.c GDPR).
  • Communications strictly related to the software and to the licence relationship (expiry of the trial or of the licence, malfunctions, updates, new versions and new modules): performance of the contract (Art. 6.1.b GDPR). We send no promotional or commercial communications. You can object at any time to receiving information about new versions and new modules by writing to mercurio@ametric-strutture.com.
• Retention. Licence data is kept for the duration of the licence (or trial period) and, after expiry, for as long as needed for renewals, legal obligations and the handling of possible disputes.
• Where it is stored. Licence data is stored on Google services (Google Ireland Ltd. — Google Sheets and Apps Script), acting as data processor. It is never shared with third parties for commercial purposes.

Third-party tools and providers

• Hosting and analytics — Cloudflare, Inc. The site is served through Cloudflare Pages, acting as data processor for the technical operation and security logs. Visit statistics use Cloudflare Web Analytics, which measures traffic in aggregate, anonymous form, without cookies and without collecting identifying personal data.
• Forms — Formspree, Inc. Delivery and temporary storage of the forms are handled by Formspree: submissions are delivered by email to the controller and kept for as long as needed to handle the request.
• Anti-bot check — Cloudflare Turnstile. The AMetric Toolbox download window and the vote on the tools in development include a check that tells a person from an automated program, needed to prevent bulk requests, addresses created for the sole purpose of fetching the file and automated votes. The check runs only when that window is opened or when you vote, and processes the IP address and some technical characteristics of the browser, for as long as the check takes. It does not profile you and is not used for advertising.
• Votes on the tools in development. On the AMetric Toolbox page you can vote for a planned tool: only the number of votes of each tool is counted, without recording who voted or their IP address. Your browser remembers locally which tools you have already voted for, and that data never leaves your device.
• Video — YouTube (Google Ireland Ltd.). Some pages embed videos. The player is loaded from the youtube-nocookie.com domain only after you explicitly click play: no data is sent to Google before that point. Playing a video is subject to Google's terms.
• Appointment booking — Google Calendar (Google Ireland Ltd.). The “Book an appointment” button on the AMetric Toolbox page opens the Google Calendar booking page in a new tab: no data is sent to Google before you click. The details you enter there (name, e-mail, day and time) are processed by Google under its terms and reach the controller as a calendar event, used only to arrange and manage the appointment.
• Fonts. Typefaces are hosted directly on this site: no request is made to third-party servers (e.g. Google Fonts) to load them.

Cookies

This site uses no profiling cookies. Visit statistics are collected through Cloudflare Web Analytics, which uses no cookies and does not track users across different sites: that is why no consent banner is shown. Third-party cookies may be set by YouTube, and only if you choose to play a video, by Google, and only if you open the appointment booking page, and by Cloudflare Turnstile, and only when the download window is opened or when you vote for a tool: in the case of Turnstile they are technical security cookies, not profiling ones.

Software — why the program connects to the Internet

AMetric Toolbox periodically verifies the licence status by connecting to a service run by the controller (Google Apps Script). These checks transmit only the licence data described above: the software does not collect or transmit the contents of your projects, the files you work on or any other data on your computer.

AI assistant (from version 1.4)

The AI assistant interface of AMetric Toolbox runs on the user's computer: AMetric does not receive what the user writes to the assistant or the results the Toolbox returns to it, which pass through the provider of the assistant the user has chosen (for example Anthropic or OpenAI), under that provider's terms and privacy notice. The Toolbox keeps a local log of requests on the computer (tool called, parameters, date and time), which is not transmitted to AMetric and which the user can delete at any time. For licence activation and verification, the processing described above applies.

Data transfer outside the EU

Some providers (Cloudflare, Formspree, Google) are based in the United States. Any transfers rely on the safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses and/or membership of the EU-US Data Privacy Framework.

Retention period

Data sent through the forms is kept for as long as needed to handle the request and any subsequent obligations, then deleted. Technical security logs are kept for limited periods by the hosting providers.

Your rights

You can exercise the rights under Arts. 15-22 GDPR at any time — access, rectification, erasure, restriction, portability and objection — by writing to mercurio@ametric-strutture.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Last updated: 27 October 2026