Privacy Policy

1. Data controller

20Quant S.r.l., with registered office at Piazza San Marco 1, 20121 Milan, Italy, is the data controller for the processing described in this notice.

20Quant works with Simplify Partners S.A. as a research and advisory partner. Personal data collected by 20Quant is not routinely shared with Simplify Partners. Any sharing will take place only where necessary, lawful, and appropriately disclosed.

2. Scope

This notice applies to personal data collected directly by 20Quant through its website and communications. Third-party websites and services linked from 20quant.eu operate under their own privacy notices. We encourage you to review those notices before providing personal data to those services.

3. Data we collect

Data you provide

• Name, email address, telephone number, organisation, role, and jurisdiction, where requested or voluntarily provided.
• Information submitted through contact, enquiry, newsletter, research-access, or document-download forms.
• Messages, correspondence, meeting requests, and other communications with us.
• Billing and transaction information where you purchase a report or service. Payment-card details are normally processed directly by the relevant payment provider and are not stored by 20Quant.

Data collected when you use the website

• IP address, browser and device information, operating system, language, approximate location, and security logs.
• Pages viewed, referral source, navigation events, and interactions with the website, where permitted by your cookie choices.
• Email delivery, opening, and link-interaction information, where tracking is used and legally permitted.

Data from professional sources

We may receive limited business contact information from professional networks, event organisers, business partners, or publicly available professional sources. We do not purchase consumer contact lists.

4. Purposes and legal bases

We process personal data for the following purposes:

• Responding to enquiries and meeting requests: to take steps at your request before entering into a contract, or on the basis of our legitimate interest in managing professional enquiries.
• Providing requested reports, white papers, subscriptions, or services: to perform a contract or fulfil your request.
• Managing client and supplier relationships: to perform contracts, meet legal obligations, and pursue our legitimate interests in operating our business.
• Sending newsletters and promotional communications: with your consent, where consent is required.
• Operating, securing, and improving the website: on the basis of our legitimate interests, except where consent is required for cookies or similar technologies.
• Website analytics: with your consent where the analytics technology is not strictly necessary.
• Compliance and record keeping: to meet applicable legal, tax, accounting, regulatory, or dispute-management obligations.

Where processing is based on legitimate interests, we assess those interests against the impact on your rights and reasonable expectations. You may object to such processing as explained in Section 10.

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects on individuals.

5. Marketing communications

If you choose to subscribe, we may send research updates, market commentary, invitations, and information about 20Quant services. Providing an email address solely to receive a requested document does not by itself subscribe you to unrelated marketing communications.

You may withdraw your consent at any time by using the unsubscribe link in an email or by contacting info@20quant.eu. Withdrawal does not affect processing already carried out lawfully before withdrawal.

Service messages needed to provide a requested report, subscription, meeting, or contracted service are not marketing communications.

6. Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose and to meet applicable legal obligations. In general:

• Newsletter data: while you remain subscribed. After unsubscribe, we may retain a minimal suppression record to ensure that no further marketing is sent.
• Contact and business enquiries: normally for up to 24 months after the last meaningful interaction, unless the enquiry leads to a client relationship or a longer period is justified.
• Document-delivery records: normally for up to 12 months, unless a longer period is needed to document consent, a transaction, or a legal obligation.
• Client, billing, tax, and contractual records: for the period required by applicable law and for the establishment, exercise, or defence of legal claims.
• Analytics information: according to the retention period configured in the relevant analytics service and your cookie choices; aggregated or effectively anonymised statistics may be retained for longer.

Specific records may be kept for a shorter or longer period where required by law, necessary for a dispute, or appropriate in light of the nature of the relationship.

7. Recipients and international transfers

Personal data may be accessed by authorised 20Quant personnel and by service providers that support our operations, including:

• website hosting, content-delivery, and form-processing providers, including Framer;
• analytics and mapping providers, including Google, where enabled;
• email distribution, scheduling, CRM, cloud-storage, document-delivery, and workflow providers;
• payment, billing, accounting, legal, compliance, and professional advisers, where applicable;
• public authorities, courts, regulators, or law-enforcement bodies where disclosure is legally required.

Service providers acting as processors are required to process data only on documented instructions and to apply appropriate security measures.

Some providers may process personal data outside the European Economic Area. Where required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism. You may contact us for information about the applicable safeguards.

We do not sell or rent personal data to third parties for their own marketing.

8. Cookies and analytics

20quant.eu may use cookies and similar technologies for the following purposes:

• Strictly necessary: required for security, forms, navigation, and core website functions.
• Analytics: used to understand website usage and performance. These technologies are activated only after consent where required.
• Functional or third-party content: used to provide features such as embedded maps or scheduling services. These may be subject to consent where they access or store information on your device.
• Marketing: used, if applicable, to measure campaigns or communication engagement and activated only after consent where required.

You can accept, reject, or change non-essential cookie choices through the cookie controls made available on the website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. You can also delete stored cookies through your browser settings.

9. Use of AI-assisted tools

20Quant may use artificial-intelligence and automation tools to support research, drafting, analysis, document processing, workflow management, and administrative activities. These tools support professional work and do not replace appropriate human review.

Personal data is used with AI-assisted tools only where necessary for a defined purpose and subject to appropriate contractual, organisational, and technical safeguards. We seek to minimise, anonymise, aggregate, or pseudonymise personal data where reasonably possible.

We do not intentionally submit special-category data, unnecessary identifying data, or confidential client information to external AI services unless there is a valid legal basis, the use is necessary and authorised, and appropriate safeguards are in place.

Where 20Quant processes personal data on a client's documented instructions, the respective roles and obligations are governed by the relevant agreement, including an Article 28 GDPR data-processing agreement where required.

If we introduce an AI system that interacts directly with website users, users will be informed that they are interacting with an AI system where required by applicable law.

10. Your rights

Subject to the conditions set out in the GDPR, you may have the right to:

• request access to and a copy of your personal data;
• request correction of inaccurate or incomplete data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a structured, commonly used, machine-readable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data-protection authority.

To exercise your rights, contact info@20quant.eu. We normally respond within one month. That period may be extended by up to two additional months where permitted by the GDPR, taking into account the complexity and number of requests.

You may lodge a complaint with the Italian Garante per la protezione dei dati personali or with the supervisory authority in the EU or EEA country where you live or work.

11. Security

We apply technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed in light of the nature of the processing and the associated risks.

No method of transmission or storage is completely secure. If you believe personal data connected with 20Quant has been compromised, please contact us promptly.

12. Contact and updates

For questions about this notice, privacy requests, or data-protection concerns:

We may update this notice to reflect changes in our services, providers, or legal obligations. The latest version and its update date will remain available on this page. Where a change materially affects an existing processing activity, we will provide additional notice where required.