Updated 5 October 2026

Privacy & cookies

This notice concerns the xem website at xemholding.com. It does not cover the separate Hostem or Carem websites.

xem

For questions about this website or how your personal data is handled, contact xem through the website contact form. State that your message concerns privacy and include the information needed to identify your request.

Browsing this website

The website does not use advertising trackers, audience analytics, fingerprinting, session recordings or third-party embeds. Fonts and visual assets are served with the site. There are no visitor accounts, mailing lists or application databases.

Loading a website still involves technical data. Vercel, the hosting provider, processes requests and may process IP addresses, browser and device information, requested URLs and timestamps to deliver and protect the service. Removing analytics does not remove this infrastructure processing.

See Vercel's privacy notice for its own processing. This site does not promise that Vercel keeps no logs or that all hosting data stays in the European Economic Area.

Cookies and browser storage

The website code does not set cookies or store information in localStorage, sessionStorage or IndexedDB. Display preferences apply only to the current page session. No optional analytics or advertising tools are loaded, so no consent banner is used for those purposes.

The hosting provider may use technical security mechanisms to deliver and protect the site. Any future addition of optional tracking would require this notice and the site's consent controls to be reviewed first.

Contact messages

The contact form accepts enquiries, careers and partnership messages. Email and message are required so xem can handle your request and reply; your name is optional. The form also includes the request category with your message. Providing this information is voluntary, but the form cannot send a message without an email address and message. No automatic marketing subscription is created.

The form checks sending availability when you open it. Fields become usable after that check succeeds. If sending is temporarily unavailable, the form displays a notice and does not accept submissions.

Messages are processed through Vercel and sent through Gmail to a private inbox. The recipient's email address is held on the server and is not published in the website code. Messages and replies remain in that mailbox until deleted; the website does not automatically delete correspondence from Gmail. To request deletion, use the contact form. Google has its own privacy policy and data retention processes.

The application does not write message content to a database or application logs. Its abuse controls use temporary, keyed digests of technical request identifiers and submitted data in server memory for rate limits and duplicate requests. They are not advertising identifiers. Infrastructure logging is separate.

Your rights

Where the GDPR applies, you may request access, correction, deletion or restriction of your personal data, and exercise portability or objection rights where applicable. Send a privacy request through the contact form, using the email address associated with your correspondence where possible. You may also complain to a supervisory authority, including the Italian Data Protection Authority.

Links to Hostem, Carem and other websites take you to services governed by their own privacy information. Those services are not loaded as embedded content on this website. This site sends no referrer header when you follow a link.