Privacy Policy

Aegister S.p.A. Privacy Policy

Contents
  1. 1. Data Controller
  2. 2. Data Collected
  3. 3. Legal basis for processing
  4. 4. How we use your data
  5. 5. Data sharing
  6. 6. Cookie Policy
  7. 7. Data Security
  8. 8. Data Subject Rights
  9. 9. Data Retention
  10. 10. Aegister VPN mobile app
  11. 11. Changes to this Privacy Policy

Last updated: 12 October 2026

Aegister S.p.A. (“we”, “our”, or “Aegister”) is committed to protecting the privacy of users who visit our website (aegister.com) or use our services. This Privacy Policy explains how we collect, use, and protect your personal data.

1. Data Controller

  • Aegister S.p.A.
  • Address: Via Aldo Moro 1F, Baronissi (SA) 84081 Italy
  • Email: [email protected]

2. Data Collected

2.1. Browsing Data

While browsing our website, we automatically collect the following technical data:

  • Anonymous IP address
  • Browser and operating system used
  • Duration of visit and pages viewed

Tools used:

  • Google Analytics: We use this tool to analyze site traffic. The data collected is anonymous and processed in compliance with European privacy regulations.

2.2. Data provided by the user

When you fill out a form on our website (e.g., to request information, a demo, or support), we may collect:

  • Full name
  • Email
  • Phone number
  • Company and professional role
  • Other data you choose to provide in optional fields

2.3. Data sent via Google services

If you give us explicit consent, we may transfer your data to the following Google services:

  • Google Sheets and Google App Script: Used to manage and organize information submitted through forms.
  • Gmail: Used for personalized communications related to received requests.

2.4. Form protection

The site's forms use Google reCAPTCHA Enterprise to tell people from automated programs; Google receives technical data about the device and the use of the form page.

We collect and process your personal data only when:

  • You have provided explicit consent (e.g., by filling out a form).
  • It is necessary for the performance of a contract or to take pre-contractual steps.
  • We have a legitimate interest in improving our services and your browsing experience.

4. How we use your data

  • Providing you with the requested information about our services.
  • Improving website navigation using analytical data from Google Analytics.
  • Personalizing communications via email (if you have given consent).
  • Ensuring compliance with privacy and security regulations.

5. Data sharing

We do not sell or share your data with third parties, except in the following cases:

  • Google Services: As mentioned above, we use Google Analytics, Google reCAPTCHA Enterprise, Google Sheets, and Gmail, always in compliance with European regulations.
  • Legal obligations: Your data may be shared if required by law or a competent authority.

6.1. What are cookies?

Cookies are small text files sent by the website to your browser to collect information about your browsing.

6.2. Types of cookies used

  • Technical cookies: Necessary for the functioning of the website.
  • Analytical cookies (optional): Used via Google Analytics to collect anonymous information about site visits.

6.3. Managing cookies

You can accept or decline cookies through our information banner and change your choice at any time with the “Cookie preferences” control at the bottom of every page.

7. Data Security

Aegister adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration.

8. Data Subject Rights

Under the GDPR, you have the following rights:

  • Access: You can request a copy of your personal data.
  • Rectification: You can correct inaccurate or incomplete data.
  • Erasure: You can request the deletion of your data (“right to be forgotten”).
  • Portability: You can obtain your data in a readable format.
  • Consent withdrawal: You can withdraw consent at any time.
  • Objection: You can object to data processing for direct marketing purposes.

To exercise these rights, contact us at [email protected].

9. Data Retention

Data will be retained only as long as necessary to fulfill the purposes for which it was collected:

  • Browsing data: up to 14 months (Google Analytics).
  • Form data: 12 months from collection, unless explicit consent is given for longer periods.

10. Aegister VPN mobile app

This section covers the Aegister VPN apps for Android and iOS. The apps contain no analytics tools, no advertising SDKs and no advertising identifiers, and they collect no browsing data.

10.1. Data processed by the app

To issue the VPN profile, the app sends app.aegister.com only the access token issued by Keycloak at sign-in or, for app store reviewers, an access code issued by Aegister. The server resolves it to the corresponding account and returns the VPN profile assigned to it and the account name:

  • The Aegister account's email address and its user identifier.
  • No other personal data is transmitted by the app.

10.2. Data that stays on the device

  • The VPN profile, which contains the certificate and its private key, and the sign-in credentials. On iOS they are kept in the Keychain, on this device only; on Android the profile is kept in the app's private storage and the credentials are encrypted with an Android Keystore key. On both platforms they are excluded from device backups.
  • The account name (organisation and email address), shown in the app's settings.
  • The daily and monthly traffic counters shown in the app: they are calculated and kept on the device alone, and are never transmitted to Aegister or to any third party.

10.3. Traffic and connection logs

Aegister does not log the traffic passing through the VPN tunnel, nor the sites or services the user reaches.

The VPN infrastructure is operated by ClosedVPN (OneFirewall Alliance). Per its own privacy notice, ClosedVPN collects only an email address and anonymised usage data (for example connection times and server locations), and states that it does not collect or store browsing history, IP addresses or other personal data. The full notice is available at

https://closedvpn.io/legal.

It is worth adding that Aegister uses a certificate shared at organisation level: towards the VPN infrastructure every user of the same organisation presents the same identity, not an individual one.

10.4. DNS resolution

The issued VPN profile configures the following public DNS resolvers, which are not operated by Aegister. Their own privacy notices apply to DNS queries made while the tunnel is active:

  • 9.9.9.9 (Quad9)
  • 1.1.1.1 (Cloudflare)

If a profile specifies no DNS resolvers, the iOS app uses OpenDNS (208.67.222.222 and 208.67.220.220).

10.5. Public IP address

To show the real address next to the tunnel's, the app calls app.aegister.com/api/v1/whoami, which returns the request's public IP address together with an approximate city and country. The value is displayed in the app and the app does not store it. No third-party service is contacted for this feature.

10.6. Deleting your data

Signing out of the app (Log out) deletes the VPN profile, the credentials and the usage counters from the device. On Android, uninstalling the app has the same effect. On iOS the Keychain can keep the profile and credentials after the app is uninstalled: the app deletes them the next time it is installed, and signing out before uninstalling removes them straight away. To delete an Aegister account, write to [email protected].

11. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect regulatory changes or internal processes. We encourage you to review it periodically.

If you have any questions or concerns about our Privacy Policy, please contact us at [email protected].