Privacy
Data controller
Xem is the data controller for this website. Hostem is the service presented here. For questions about your data or to exercise your rights, contact Xem by email at operations@hostem.it or using the WhatsApp link in the Contact section and identify your message as a privacy request.
Browsing
Vercel hosts the website and processes technical data needed to deliver and protect it, which may include IP address, requested URLs, timestamps, browser and device information. The purpose is to serve pages and prevent abuse, based on the legitimate interest in website security and operation. No analytics, advertising pixels or profiling tools are installed. Fonts and images are served by this website.
Contact enquiries
The form is enabled only when email delivery is configured. It collects an email address and message; your name is optional. The information is used to answer your enquiry and, if requested, discuss our services. The legal basis is taking precontractual steps at your request or, for other enquiries, the legitimate interest in responding. Without an email address and message, we cannot handle an enquiry through the form. There is no automatic marketing subscription. Do not enter guest data, credentials or confidential information.
Recipients and retention
When active, the form sends your request through the Vercel server and Resend email service via Supabase to a private inbox managed by Xem. The website adds no contact database and does not write message contents to application logs. Emails remain in the inbox until deleted; retention periods and procedures must be defined before activation. Abuse and duplicate controls use protected digests in server memory with windows of 10 and 15 minutes; expired records are removed on subsequent requests or when the instance closes. Hosting data retention depends on the provider’s terms and configuration.
Providers and transfers
Vercel, Supabase and Resend may process data outside the European Economic Area. The terms, contractual roles and safeguards applicable to the email service must be verified before activation. See the privacy information from Vercel and Resend. This website does not promise exclusive EEA data storage.
Demo and external links
The demo contains simulated conversations and operations. Edits and typed text remain in page memory and are lost when you reload; they are not sent to AI, booking or payment services. The microphone is not activated. WhatsApp and linked websites open only when you select a link and apply their own privacy notices. WhatsApp messages are processed by Xem to respond and by the service provider under its own terms.
Your rights
Where the GDPR applies, you may request access, correction, deletion, restriction and portability, and object to processing where applicable. Contact Xem at operations@hostem.it or through the WhatsApp link in the Contact section, or through the form when available. You may complain to a supervisory authority, including the Italian Data Protection Authority. This website does not make automated decisions with legal effects.
Updated
2 October 2026. This notice concerns the Hostem marketing website and its demo, not data processing within the Hostem service activated for customers.