Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are:
first name; last name; phone number; Data communicated while using the service; answers to questions; user content; contents of the email or message; profile picture; date of the message; time the message was sent; sender of the message; email address; order ID; Trackers; Usage Data; date of birth; city; User ID; Current City; number of Users; session statistics; ZIP/Postal code; state; province; country; county; latitude (of city); longitude (of city); metro area; geography/region; IP address; device information; app information; device logs; operating systems; browser information; language; launches; number of sessions; session duration; scroll-to-page interactions; mouse movements; scroll position; keypress events; motion sensor events; touch events; video views; clicks; browsing history; search history; page views; interaction events; page events; custom events; Application opens; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); gender; various types of Data.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.
Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools — by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.
Users are responsible for any third-party Personal Data obtained, published or shared through this Application.
Mode and place of processing the Data
Methods of processing
The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
Place
The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.
Retention time
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
The purposes of processing
The Data concerning the User is collected to allow the Owner to:
- provide its Service
- comply with its legal obligations
- respond to enforcement requests
- protect its rights and interests (or those of its Users or third parties)
- detect any malicious or fraudulent activity
as well as for the following purposes:
Interaction with live chat platforms; Handling payments; Advertising; Analytics; User database management; Tag Management; Spam and bots protection; Traffic optimisation and distribution; Heat mapping and session recording; Managing support and contact requests; Displaying content from external platforms; Handling activities related to productivity; Remarketing and behavioural targeting; Registration and authentication; Managing contacts and sending messages; Contacting the User.
For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data.”
Detailed information on the processing of personal Data
Personal Data is collected for the following purposes and using the following services:
Advertising
This type of service allows User Data to be utilised for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Application, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers to identify Users or may use the behavioural retargeting technique, i.e. displaying ads tailored to the User’s interests and behaviour, including those detected outside this Application.
For more information, please check the privacy policies of the relevant services. Services of this kind usually allow Users to opt out of such tracking. Users may learn how to opt out of interest-based advertising more generally by visiting the relevant opt-out section in this document.
Meta ads conversion tracking (Meta pixel)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing. It connects data from the Meta Audience Network with actions performed on this Application. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
LinkedIn Ads
LinkedIn Ads is an advertising service provided by LinkedIn Ireland Unlimited Company or by LinkedIn Corporation, depending on how the Owner manages the Data processing.
Personal Data processed: Trackers; Usage Data.
Place of processing: Ireland – Privacy Policy – Opt out; United States – Privacy Policy – Opt out.
Google Ads Customer Match
Google Ads Customer Match is an advertising service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing. It allows matching Data that Users have shared with the Owner to existing Google accounts in order to target them or similar Users with personalised ads.
Users can opt out of Google's use of personalised advertising by visiting Google's Ads Settings.
To understand Google’s use of Data, consult Google’s partner policy.
Personal Data processed: country; email address; first name; last name; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); User ID; ZIP/Postal code.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Google Ads conversion tracking
Google Ads conversion tracking is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing. It connects data from the Google Ads advertising network with actions performed on this Application.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Google Ads Similar audiences
Service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages the Data processing. It uses data from Google Ads Remarketing to display ads to Users whose behaviour is similar to that of Users already on the remarketing list.
On this basis, personalised ads will be shown to Users suggested by Google Ads Similar audiences.
Users can opt out of advertising Trackers via Google Ad Settings.
To understand Google’s use of Data, consult Google’s partner policy.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Meta Lookalike Audience
Service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited. It uses Data collected through Meta's Custom Audience to show ads to Users with similar behaviour to those already included in a Custom Audience list, based on their previous interaction with this Application or Meta’s platforms.
Users can opt out via Meta’s opt-out page.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Analytics
These services allow the Owner to monitor and analyse traffic and track User behaviour.
Meta Events Manager
Analytics service by Meta Platforms Ireland Limited or Meta Platforms, Inc. Integrates the Meta pixel to collect insights on traffic and user interaction.
Personal Data processed: city; date of birth; email address; last name; User ID.
Place of processing: Ireland – Privacy Policy – Opt out; United States – Privacy Policy – Opt out.
Google Analytics 4
Service provided by Google LLC or Google Ireland Limited. Tracks usage of this Application, prepares reports and shares insights with other Google services.
IP addresses are used at collection and discarded before data is logged.
Personal Data processed: number of Users; session statistics; Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Analytics collected directly (this Application)
This Application uses its own internal analytics system, with no third-party involvement.
Personal Data processed: Trackers; Usage Data.
Contacting the User
Contact form (this Application)
When filling in the contact form, the User allows the Application to use the provided Data to respond to requests.
Personal Data processed: city; email address; last name; various types of Data; ZIP/Postal code.
Displaying content from external platforms
These services allow content from external platforms to be displayed and interacted with directly from the pages of this Application. Even if not used, these services may collect data on pages where they’re installed.
Google Fonts
Typeface visualisation service by Google LLC or Google Ireland Limited.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Google Maps widget
Map visualisation service by Google LLC or Google Ireland Limited.
Personal Data processed: Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
YouTube IFrame Player
Video content service by Google LLC or Google Ireland Limited. This Application may collect data directly or indirectly via Trackers.
Users may adjust privacy settings via Google’s security page or opt out through the Network Advertising Initiative.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Handling activities related to productivity
These services help the Owner manage tasks, collaboration and productivity. Data may be processed and retained based on the activity’s purpose.
They may integrate with other services listed in this policy to allow data exchange for related operations.
Google Workspace
Google Workspace is an integrated suite of cloud-based productivity, collaboration and storage services provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing. Gmail or other G Suite services are not scanned by Google for advertising purposes. In addition, Google does not collect or use data inside these services for advertising purposes in any other way.
Personal Data processed: city; email address; first name; gender; last name.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Handling payments
Unless otherwise specified, this Application processes any payments by credit card, bank transfer or other means via external payment service providers. Users are requested to provide their payment details directly to such providers. This Application will only receive confirmation of completed payment.
PayPal (PayPal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.
Personal Data processed: email address; first name; last name; order ID.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Heat mapping and session recording
Heat mapping services display the areas of this Application that Users interact with most frequently. Some services may also record sessions and make them available for later playback.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a session recording and heat mapping service provided by Hotjar Ltd.
Hotjar honours generic “Do Not Track” headers.
Personal Data processed: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.
Interaction with live chat platforms
These services allow Users to interact with live chat platforms managed by third parties directly from this Application. Even if Users do not actively use the service, it may collect Usage Data. Conversations may also be recorded.
WhatsApp Business Chat widget
Provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited.
Personal Data processed: answers to questions; contents of the email or message; Data communicated while using the service; date of the message; first name; last name; phone number; profile picture; sender of the message; time the message was sent; user content.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Managing contacts and sending messages
This service allows management of email, phone or other contact information to communicate with the User. It may also collect interaction data like message views or link clicks.
Brevo email (SendinBlue SAS)
Email address management and message sending service.
Personal Data processed: email address; Trackers; Usage Data.
Place of processing: France – Privacy Policy.
Managing support and contact requests
This service allows this Application to manage support and contact requests via email or contact form. Data depends on information provided by the User.
WhatsApp Business customer support
Provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited.
Personal Data processed: contents of the email or message; first name; last name; order ID.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Registration and authentication
By registering or authenticating, Users allow the Application to identify them and give access to dedicated services. Third-party services may provide registration/authentication, in which case this Application may access stored Data.
Facebook Oauth
Provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited; connected to the Facebook network.
Personal Data processed: Trackers; various types of Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Google OAuth
Provided by Google LLC or Google Ireland Limited; connected to the Google network.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Remarketing and behavioural targeting
This service enables the Application and its partners to show personalised ads based on past use. Data is tracked and shared with remarketing services. Some offer remarketing based on email lists.
Google Ads Remarketing
Provided by Google LLC or Google Ireland Limited; connects activity of this Application with Google Ads and DoubleClick cookie.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Facebook Remarketing
Provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited; connects activity of this Application with Meta Audience Network.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Meta Custom Audience
Provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited.
Personal Data processed: email address; Trackers.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Spam and bots protection
These services analyse traffic to filter spam and bot activity.
Cloudflare Bot Management (Cloudflare Inc.)
Personal Data processed: app information; Application opens; browser information; browsing history; city; clicks; country; county; custom events; device information; device logs; geography/region; interaction events; IP address; keypress events; language; latitude (of city); launches; longitude (of city); metro area; motion sensor events; mouse movements; number of sessions; operating systems; page events; page views; province; scroll position; scroll-to-page interactions; search history; session duration; session statistics; state; touch events; Trackers; Usage Data; video views; ZIP/Postal code.
Place of processing: United States – Privacy Policy.
Google reCAPTCHA
Provided by Google LLC or Google Ireland Limited. Use subject to Google’s terms and privacy policy.
Personal Data processed: answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; Trackers; Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Tag Management
This service manages tags or scripts in a centralised way. Data may be processed and retained as it flows through these tools.
Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Traffic optimisation and distribution
This type of service allows this Application to distribute its content using servers located across different countries and to optimise their performance.
The Personal Data processed depends on how these services are implemented and on their function of filtering communications between this Application and the User's browser.
Due to the nature of this system, it is difficult to determine the locations where content, possibly containing Personal Data, is transferred.
Cloudflare (Cloudflare Inc.)
Cloudflare is a traffic optimisation and distribution service provided by Cloudflare Inc.
Cloudflare filters all traffic through this Application and enables the collection of analytics.
Personal Data processed: Trackers; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
User database management
These services allow the Owner to build user profiles starting from information provided by the User (e.g., email, name), and track User activities using analytics. The Data may also be matched with publicly available information (e.g., social profiles) and used to improve the Application.
Some services may also allow the sending of automated messages based on User behaviour.
HubSpot CRM (HubSpot, Inc.)
Personal Data processed: Current City; email address; first name; last name; phone number.
Place of processing: Germany – Privacy Policy.
Brevo marketing automation (SendinBlue SAS)
Personal Data processed: email address; Trackers; Usage Data.
Place of processing: France – Privacy Policy.
Information on opting out of interest-based advertising
In addition to any opt-out feature provided by services listed in this document, Users may refer to the dedicated section of the Cookie Policy for general information on how to opt out of interest-based advertising.
Cookie Policy
This Application uses Trackers. To learn more, Users may consult the Cookie Policy.
Further Information for Users
Legal basis of processing
The Owner may process Personal Data relating to Users if one of the following applies:
- The User has given consent for one or more specific purposes.
- Provision of Data is necessary for the performance of an agreement or pre-contractual obligations.
- Processing is necessary for compliance with a legal obligation.
- Processing is carried out in the public interest or in the exercise of official authority.
- Processing is necessary for legitimate interests pursued by the Owner or a third party.
- The Owner will clarify the legal basis that applies to each processing activity upon request.
Further information about retention time
Personal Data is stored for as long as required by the purpose of its collection.
- Data collected for contractual purposes is retained until the contract has been fulfilled.
- Data collected for legitimate interests is retained until the purpose has been satisfied.
- When processing is based on consent, Data may be retained until consent is withdrawn.
- Data may also be stored for longer to comply with legal obligations or orders from authorities.
Once the retention period expires, Data will be deleted. Users can no longer exercise rights of access, erasure, rectification, or data portability after expiration.
The rights of Users based on the GDPR
Users may exercise the following rights, where applicable:
- Withdraw consent at any time.
- Object to processing based on legal grounds other than consent.
- Access their Data, including processing details and a copy.
- Verify and request rectification of inaccurate Data.
- Restrict processing, in which case Data will only be stored.
- Have their Data deleted ("right to be forgotten").
- Receive their Data and transfer it to another controller ("data portability").
- Lodge a complaint with a data protection authority.
Users may also request information about data transfers to countries outside the EU and safeguards applied.
Details about the right to object to processing
Where processing is carried out for public interest, official authority, or legitimate interests, Users may object by providing grounds relating to their situation.
If Data is processed for direct marketing purposes, Users may object at any time, without justification. Once this occurs, the Data will no longer be processed for such purposes.
How to exercise these rights
Requests to exercise User rights should be sent to the Owner using the contact details provided. These requests are free and will be processed within one month.
The Owner will inform Users of any rectification, erasure, or restriction carried out, unless impossible or requiring disproportionate effort. Recipients of the Data will also be informed upon User request.
Additional information about Data collection and processing
Legal action
The User’s Personal Data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action. The User acknowledges that the Owner may be required to disclose personal data to public authorities.
Additional information about User’s Personal Data
In addition to this policy, the Application may provide contextual and specific information upon request.
System logs and maintenance
The Application and any third-party services may collect system logs and use other Personal Data (e.g. IP address) for operation and maintenance.
Information not contained in this policy
Further information may be requested at any time from the Owner via the contact details provided.
Changes to this privacy policy
The Owner reserves the right to modify this privacy policy at any time, notifying Users on this page and possibly within the Application and/or via contact information. Users are advised to check this page often, referencing the date of the last update.
If changes affect processing based on consent, the Owner will request new consent where required.
Definitions and legal references
Personal Data (or Data)
Any information that allows identification of a natural person, directly or indirectly.
Usage Data
Automatically collected data including: IP address; browser details; system characteristics; time spent on pages; navigation path; etc.
User
The individual using this Application.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The entity that processes Personal Data on behalf of the Owner.
Data Controller (or Owner)
The entity that determines purposes and means of the processing of Personal Data.
This Application
The tool through which the User’s Personal Data is collected and processed.
Service
The service provided by this Application.
European Union (EU)
Includes current EU and EEA member states.
Cookie
A small piece of data stored in the User's browser.
Tracker
Technology used to track Users, including cookies, identifiers, web beacons, etc.
Current City
Provides access to the User’s current location.
Legal information
This privacy policy relates solely to this Application, unless otherwise stated.
Last updated: 26 May 2024
