pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
1. Data controller
Vasudev S.r.l., with registered office at Riviera Silvio Trentin 38/3, 30034 Mira (VE), Italy, tax and VAT no. 05008420274, certified e-mail (PEC) vasudev.srl@pec.it, e-mail info@lyri.it.
Data Protection Officer (DPO): not appointed.
2. What data we process, why and on what legal basis
Scope: this notice covers the website www.lyri.it. It does not cover the LYRI app or third-party websites linked from this site.
- “Request a demo” form – data: first name, last name, e-mail, phone, type of requester (theatre or institution, company or organisation, private individual), organisation name, role, website and the text of your request. Purpose: reply to your request and arrange the demonstration. Legal basis: steps taken at the data subject’s request before entering into a contract (Art. 6(1)(b) GDPR). Required fields must be provided in order to receive a reply.
- Browsing data – data: IP address, date and time, requested pages, browser and operating system, recorded by the site’s systems and by the hosting provider. Purpose: operate the site, keep it secure and prevent abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Browsing statistics – data: pages visited, where the visit came from, country, device and browser type, in aggregated form, measured with Cloudflare Web Analytics, which does not use cookies or other data stored in the browser and does not identify or profile people. Purpose: understand how the site is used in order to improve it. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- E-mail and phone communications – data: what you tell us. Purpose: reply to your requests. Legal basis: Art. 6(1)(b) or (f) GDPR.
3. How we process the data and for how long
Data sent through the form is not stored on the site: it is transmitted by e-mail to info@lyri.it and kept in the company mailbox. It is processed electronically, with appropriate security measures, by authorised persons.
We keep it for as long as needed to reply to and handle your request and, if no contract follows, for 24 months after the last contact; then we delete it or anonymise it. Browsing data is kept for as long as strictly necessary for the security and operation of the service, according to the hosting provider’s settings. Aggregated statistics can be viewed for up to six months. If we become your supplier, data follows the contract and tax-law retention periods.
4. Who receives the data
- persons authorised to process data on behalf of the controller;
- suppliers processing data on our behalf as processors: Cloudflare, Inc. (site hosting and delivery, aggregated browsing statistics), Google Ireland Limited (e-mail and transmission of the contact form);
- authorities, where required by law.
We do not disclose or sell data.
5. Transfers outside the European Economic Area
The site is delivered through the Cloudflare network and e-mail is handled by Google: providers with headquarters or infrastructure also in the United States. Transfers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework or, alternatively, on standard contractual clauses.
6. Cookies
The site does not use cookies or tracking or advertising tools. Visits are measured in aggregated form with Cloudflare Web Analytics, which does not use cookies or other data stored in the browser and does not identify people. During your visit the site only remembers your choice to pause animations, in the browser’s temporary memory: it is a preference you ask for, it is deleted when you close the tab and it does not need your consent. For this reason we do not show a banner. If we use tools that need consent in the future, we will update this notice and ask for your consent before enabling them.
7. Your rights
You may ask for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR). Write to info@lyri.it. We reply within one month. If you believe the processing breaches the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.
8. Links to other sites
The site contains links to third-party sites (social networks, partners, app stores). They have their own notices and we are not responsible for their content.
9. Updates
Last updated: 13 October 2026. If we change how we process data, we will update this page.