Privacy and cookie notice

Last modified: January 29th, 2026

The XTEL Group (“XTEL” or “We” or “us”) is committed to protecting and respecting your privacy. As a global business, XTEL is committed to your privacy, and our obligations under the data protection laws which apply in your region, including where relevant the EU General Data Protection Regulation (GDPR, the UK General Data Protection Regulation (UK GDPR), or the California Consumer Protection Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
This policy sets out the basis on which we process personal data we collect from you, that you provide to us on http://www.xtech.ai (“our Website”) or that we receive about you in the course of any interaction with us, including applications, correspondence, telephone calls, meetings and the provision of our services.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

How To Contact Us

If you have any questions about this Privacy and Cookie Notice or how we process your personal data, you can contact us at:

Email: dataprotection@xtech.ai
By opening a support ticket: https://xtelcloud.atlassian.net/servicedesk/customer/portal/67
Telephone: +39 051 865 8611
Or by writing to: XTEL S.r.l Data Protection Officer – Via del Lavoro, 47, 40033 Casalecchio di Reno (BO) – Italy

Information we collect from you

We collect and process the following data on our Website:

Information that you provide by filling in forms on our Website.
Information you provide if you report a problem with our Website.
If you contact us, we may keep a record of that correspondence.

Details of your visits to our Website, including, but not limited to, traffic data, location data, weblogs, and other communication data, whether this is required for our own billing purposes or otherwise, and the resources that you access as described in this policy.
In addition to information collected through our Website, XTEL also processes personal information in the course of our wider business activities, including customer onboarding, contract management, supplier relationship management, invoicing, and general business administration. This information typically includes basic identifiers and professional contact details, such as names, business email addresses, telephone numbers, job titles, employer information, billing contact details, and information contained in business correspondence.
XTEL also processes personal information relating to individuals who apply for employment with us, including both successful and unsuccessful candidates. This may include identifiers, contact details, CV/resume information, employment history, qualifications, interview notes, assessment results, and any other information voluntarily provided during the recruitment process. This information is processed for recruitment, evaluation of suitability for roles, and to comply with legal or regulatory obligations.

For the purposes of the CCPA/CPRA, the categories of personal information we may collect include:

Identifiers (name, alias, postal address, IP address, online identifiers, email address)
Personal information described in Cal. Civ. Code §1798.80(e) (e.g., contact details, signature, bank account numbers used for invoicing)
Characteristics of protected classifications (only where voluntarily provided, such as on event dietary forms)
Commercial information (records relating to purchases of XTEL services)
Internet or electronic network activity information (browsing behaviour, interaction with our Website)
Geolocation data (general, derived from IP address)
Professional or employment-related information (job title, employer, role)
Inferences drawn from the above (e.g., potential service preferences)
Sensitive personal information (only where strictly necessary, such as authentication data or government IDs provided during due diligence; XTEL does not routinely collect sensitive information)

Special category data / sensitive information

Under the EU & UK GDPR, special category data includes information about race or ethnic origin, political or religious beliefs, health, genetic or biometric data, sex life and sexual orientation, trade union membership, and philosophical beliefs of an individual. Criminal offence and conviction data are also subject to additional safeguards and obligations.

Sensitive personal information under CCPA/CPRA includes Government IDs (social security number, driver’s license, passport), financial account or payment card information combined with access codes or passwords, precise geolocation data, racial or ethnic origin, citizenship status, religious beliefs, or union membership, contents of your private communications (mail, email, text messages), genetic and neural data, biometric identifiers used for unique identification (fingerprints, facial recognition, etc.), health information and information about your sex life or sexual orientation

This does not include publicly available information from government records.

We do not routinely collect or process special category data or sensitive personal information.

Cookies

Please refer to our Cookie Notice below for information on our use of cookies and other tracking technologies.

Where we store your personal data

The data that we collect from you may be transferred to and/or stored outside your territory. It may also be processed by staff operating outside your territory who work for us, or for one of our suppliers.

If your personal data is transferred to, stored at, or otherwise processed outside your country or territory, and that country or territory has not been recognised as providing an adequate level of data protection, we will put in place additional safeguards to protect your personal data, as required by applicable law. For example, if you are in the EEA, standard contractual clauses would be used if we process your data outside the EEA.

Keeping your personal data secure

We implement appropriate technical and organisational measures to ensure that your data is treated securely and in accordance with this privacy policy. All information you provide to us is stored on secure servers. We limit access to the information by our own employees, contractors, website service providers, and those individuals who are authorised for the proper handling of such information. Third-party contractors and website service providers are contractually obliged to follow similar standards of security and confidentiality, including but not limited to encryption of data in transit and at rest, multi-factor authentication, regular security audits, etc.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will take reasonable steps to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will apply strict procedures and security measures to prevent unauthorised access.

Our use of your personal data

Below we provide information about our use of your personal data collected and the legal basis under which we process it.

Operating our Website

Purpose: Ensure that content from our Website is presented effectively, according to the device and location you are accessing it from. Analyse statistical data about users’ browsing actions and their patterns to improve our Website or detect fraudulent behaviour.
Categories of data collected: IP address, operating system information, browser specifications, device specifications.
Source: We obtain this data from you directly.
Legal basis: It is our legitimate interest to ensure that our site is presented to you in the most effective way possible, to improve our website, and to detect fraudulent behaviour.

Providing you with information or responding to your enquiries about our products and services.

Purpose: Provide you with information regarding products or services that you request from us, for the purposes of quotations, negotiations, or entering into a contract of service. with us.
Categories of data collected: Name, email address, IP address, phone number, postal address, job title.
Source: We obtain this data from you directly, for example, when you download reports or other content from our Website, or when you submit an enquiry.
Legal basis: Performance of a contract to which you are a party or when taking steps to enter into a contract.

Providing you with information about our products and services.

Purpose: Provide you with information regarding products or services that we have determined may be of interest to you, or respond to an enquiry you have raised with us.
Categories of data collected: Name, email address, IP address, phone number, postal address, job title.
Source: We obtain this data from you directly, for example, when you download reports or other content from our Website, or when you submit an enquiry.
Legal basis: Where we have an existing relationship with you, or you have previously enquired about our products and services, we will rely on legitimate interest. Where this is not the case, we will rely on consent, which will be obtained beforehand.
All information necessary regarding our purposes of processing, lawful bases, and your rights is provided within this Privacy Notice. Where your enquiry relates to exploring a potential commercial relationship with XTEL, our lawful basis will typically be our legitimate interests in operating and growing our business. We may also process personal information where necessary to comply with legal or regulatory obligations. You can withdraw your consent or opt out of communications from XTEL at any time.

Additionally, in certain circumstances:

We will rely on processing data for the purpose of pursuing our legitimate interest (including carrying out our business and pursuing our general business interests.
The processing may be necessary for our compliance with our legal obligations.
The processing is necessary for the establishment, exercise, or defence of legal claims.

Disclosure of your information

We may disclose your personal data to group entities of The XTEL Group located outside of the EEA or outside the country of collection, which means our subsidiaries, our affiliates, our ultimate holding company, and its subsidiaries. In such cases, we will take measures to ensure that your personal data receives an adequate level of protection, such as Standard Contractual Clauses published by the respective data protection authority or the EU-US Data Privacy Framework.
We may disclose your personal data to third parties:

In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If XTEL or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If we are under a duty to disclose your personal data in order to comply with any legal obligation, or to protect the rights, property, or safety of XTEL, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
If we use a service provider or supplier to process your data (for example, third parties who help administer our Website or provide our services to you); however, such third parties will only process this data for the purposes for which they’ve been instructed.
For CCPA/CPRA purposes, XTEL may disclose the following categories of personal information to third parties for business purposes:
Identifiers
Professional or employment information
Internet or other electronic network activity information
Commercial information
Inferences drawn from any of the above categories

We disclose this information to the following categories of recipients:

Service providers and processors (including hosting providers, IT service providers, analytics providers, customer support platforms and marketing automation tools)
Professional advisers (including legal counsel, auditors, and accountants)
Business partners involved in providing or supporting our services
Government authorities and regulators, where required by law
Other XTEL Group entities

These disclosures occur solely for business purposes, such as operating and improving our Website, providing and supporting our services, ensuring the security and integrity of our systems, complying with legal or regulatory obligations, and managing our business operations.

We do not sell or share personal information as those terms are defined under the California Consumer Act, as amended by the CPRA (including ‘sharing’ for cross-contextual behavioural advertising). Where we disclose personal information to vendors who help us to operate our business (for example, hosting, analytics, consumer support, etc.) we do so for business purposes, under written agreements that restrict vendors’ use of the information and prohibit them from selling or sharing it.

XTEL does not knowingly collect or process personal information of children.

How long we keep your personal data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Retention periods may vary depending on the type of data and context of processing. For example:

Customer and transaction‑related information: 7 years from the date of last interaction, for accounting and regulatory purposes.
Supplier and invoicing information: 7 years from the date of the last transaction.
Website analytics and log data: retained for up to 24 months, unless required for security or fraud‑prevention purposes.
Correspondence relating to enquiries: retained for up to 24 months from the date of last communication.

After the applicable retention period expires, personal data will be securely deleted or anonymised.

Your rights

As a global business, XTEL is committed to protecting your privacy, and committed to our obligations under the data protection laws which apply in your region (such as GDPR, UK GDPR, or the CCPA/CPRA).

You have the following rights in relation to your personal data (some of these rights apply only in certain circumstances, and some of them vary according to the legal basis on which we are processing your data or the territory you are located in):

The right to be informed about how your personal data is collected and used, the purposes for processing, the lawful basis for processing, retention periods, and recipients of your personal data
The right to ask whether we’re processing your personal data and, if we are, to find out details of that processing (as well as obtaining a copy of your personal data).
The right to ask us to correct any personal data that we hold about you that’s inaccurate or incomplete.
The right to ask us to delete personal data that we hold about you.
The right to restrict processing where accuracy is contested, processing is unlawful, but the data subject opposes deletion, and the data is required for a legal claim. (EU & UK GDPR specific).
The right to object to how we’re processing your personal data. (EU & UK GDPR specific).
The right to have your personal data provided to you in a structured and commonly used electronic format. You can also ask us to transfer your personal data directly to another company if that’s feasible. (EU & UK GDPR specific, CCPA allows for ‘readily usable format’ for access requests)
The right to object to automated decision-making and profiling. You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects and to obtain human intervention, express your views, and challenge the decision. (EU & UK GDPR specific).
The right to limit use and disclosure of sensitive information. (CCPA/CRPA specific)
The right to opt out of the sale or sharing of your personal data if applicable. Personal data collected through this Website is not sold to third parties. (CCPA/CPRA specific).
The right not to be discriminated against for exercising the rights available to you under applicable data protection laws. (CCPA/CPRA specific)
If you wish to exercise any of these rights (for example,e you no longer wish to receive marketing from us), you can use the link or unsubscribe button provided in our email correspondence, contact info@xtech.ai or you can use the phone numbers provided in our “contact us” section of this Website.

Please note: in some circumstances, we may need to take steps to verify your identity prior to fulfilling your request.

If you’re not happy with how we’ve dealt with your personal data, we’d like a chance to put it right – please contact us at info@xtech.ai. However, you have the right to complain to the local data protection supervisory authority. If you are in the EEA, please visit the website of the relevant supervisory authority for more information on how to submit such a complaint, and if you are in the UK, please visit the Information Commissioner’s website (www.ico.org.uk).

Links to other websites

Our Website may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Changes to our Privacy and Cookie Notice

This notice was last updated on 29 January 2026.

This privacy and cookie notice may be updated from time to time, and any changes we may make will be posted on this Website.

Cookie notice

This Website uses cookies. We use cookies to personalise content and ads, to provide social media features, and to analyse our traffic. We also share information about your use of our Website with our social media, advertising, and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this Website. For all other types of cookies, we need your permission. This Website uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.

Please state your consent ID and the date when you contact us regarding your consent. Your consent applies to the following domains: https://www.xtech.ai.

What is a cookie

A cookie is a small text file that can be used by websites to make a user’s experience more efficient. When the user browses the same website in the future, the data stored in the cookie can be retrieved by the website to notify the website of the user’s previous activity.
If you want to know more about Cookies, please visit the website http://www.allaboutcookies.org. This website provides more information about cookies; it also details how you might delete any cookies that you find, and it shows you how to allow those trusted websites to store their cookies on your devices.

This website uses different types of cookies

NECESSARY COOKIES

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

FUNCTIONALITY COOKIES

Functionality cookies are used to recognize you when you return to the Website and to remember the choices you made to enable us to personalize its content to you. The information the functionality cookies collect may include personally identifiable information that you have disclosed. If you do not accept functionality cookies, it may affect the performance and functionality of the Website and may restrict access to its content.

ANALYTICAL/PERFORMANCE COOKIES

Analytical/Performance cookies allow us to recognize and count the number of visitors and help us understand how visitors interact with the Website by providing information about, among others, the areas visited, the time spent on the Website, and any issues encountered. This helps us to improve the way the Website works. Performance cookies do not identify you as an individual. All data is collected and aggregated anonymously.

ADVERTISING/TARGETING COOKIES

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

Necessary

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Cookie	Duration	Description
__cf_bm	1 hour	This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
li_gc	6 months	Linkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.
_cfuvid	session	Cloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services
__RequestVerificationToken	session	This cookie is set by web application built in ASP.NET MVC Technologies. This is an anti-forgery cookie used for preventing cross site request forgery attacks.
cookieyes-consent	1 year	CookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.

Functional

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

Cookie	Duration	Description
FormsWebSessionId	1 month	Description is currently not available.
lidc	1 day	LinkedIn sets the lidc cookie to facilitate data center selection.

Analytics

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Cookie	Duration	Description
burst_uid	1 month	Description is currently not available.
X-CSRF-TOKEN	session	Description is currently not available.
prism_*	1 month	Active Campaign sets this cookie to track and store interactions.
_gd_visitor	1 year 1 month 4 days	6sense sets this cookie, which is used for collecting information on the user's visit, such as the number of visits, average time spent on the website, and the pages loaded for displaying targeted ads.
_gd_session	4 hours	6sense sets this cookie to collect information on users' visits to the website. It collects data such as the total number of visits, the average time spent on the website and the pages loaded.
vuid	1 year 1 month 4 days	Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos on the website.
SM	session	Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains.
MR	7 days	This cookie, set by Bing, is used to collect user information for analytics purposes.
_clck	1 year	Microsoft Clarity sets this cookie to retain the browser's Clarity User ID and settings exclusive to that website. This guarantees that actions taken during subsequent visits to the same website will be linked to the same user ID.
_clsk	1 day	Microsoft Clarity sets this cookie to store and consolidate a user's pageviews into a single session recording.
_ga	1 year 1 month 4 days	Google Analytics sets this cookie to calculate visitor, session, and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
_ga_*	1 year 1 month 4 days	Google Analytics sets this cookie to store and count page views.

Performance

Performance cookies are used to understand and analyse the key performance indices of the website, which helps in delivering a better user experience for the visitors.

Cookie	Duration	Description
SRM_B	1 year 24 days	Used by Microsoft Advertising as a unique ID for visitors.

Advertisement cookies are used to provide visitors with customised advertisements based on the pages they visited previously and to analyse the effectiveness of the ad campaigns.

Cookie	Duration	Description
bcookie	1 year	LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs.
tuuid	1 year 1 month	The tuuid cookie, set by BidSwitch, stores a unique ID to determine what adverts the users have seen if they have visited any of the advertiser's websites. The information is used to decide when and how often users will see a certain banner.
tuuid_lu	1 year 1 month	This cookie, set by BidSwitch, stores a unique ID to determine what adverts the users have seen while visiting an advertiser's website. This information is then used to understand when and how often users will see a certain banner.
CMID	1 year	Casale Media sets this cookie to collect information on user behaviour for targeted advertising.
CMPS	4 hours	CasaleMedia sets CMPS cookie for anonymous user tracking based on users' website visits to display targeted ads.
CMPRO	3 months	CasaleMedia sets CMPRO cookie for anonymous usage tracking and targeted advertising.
SM	session	Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains.
MUID	1 year 24 days	Bing sets this cookie to recognise unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations.
ANONCHK	10 minutes	The ANONCHK cookie, set by Bing, is used to store a user's session ID and verify ads' clicks on the Bing search engine. The cookie helps in reporting and personalization as well..
_gcl_au	3 months	Google Tag Manager sets this cookie to experiment advertisement efficiency of websites using their services.
test_cookie	15 minutes	doubleclick.net sets this cookie to determine if the user's browser supports cookies.
_ga_*	1 year 1 month 4 days	Google Analytics sets this cookie to store and count page views.

Uncategorised

Other uncategorised cookies are those that are being analysed and have not been classified into a category as yet.

Cookie	Duration	Description
_leadgenie_session	session	Description is currently not available.
tvid	1 year	No description available.
tv_UIDM	1 year 1 month 4 days	Description is currently not available.
msal.cache.encryption	session	Description is currently not available.

Opting out of cookies

There are a number of different options available to avoid the storage of cookies. Please visit the websites of the different browsers to learn how to delete any cookies that are on your device and block the future storage of cookies.
Please keep in mind that if you decide to delete all of your cookies, you will likely have to re-enter all of your usernames and passwords on all of the websites that you visit, which you previously didn’t even have to think about.
In addition, the rejection or deletion of cookies only impacts the device and the browser on which you perform the actions.

Modification of this notice

We may change this notice at any time without prior notice, and you are advised to regularly consult it. Any changes to this notice will become effective when we make the revised notice available through our Website. Your continued use of our Website or services following such changes will constitute your acknowledgement of the updated notice.