Privacy Policy

This Privacy Policy was last updated on 11 December 2025 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy policy, we explain what we do with the data we obtain about you via https://reeview.me. We recommend you carefully read this policy.

In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

we clearly state the purposes for which we process personal data. We do this by means of this privacy policy;
we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
we first request your explicit consent to process your personal data in cases requiring your consent;
we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
we respect your right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Owner of the Data Processing

Reeview.me Digital Services
Piazza Manin 1 - Genoa
Italy
VAT: IT03448130124
Website: https://reeview.me
Email:
Phone number: +39 010 893 4315
Email address of the Owner:

2. Types of Data collected

Among the Personal Data collected by this Application, either independently or through third parties, are: Cookies; Usage Data; email address; Data communicated while using the service; first name; Universal Unique Identifier (UUID); number of Users; session statistics; full access permissions; last name; job title; city; User ID; billing address; device information; pageviews; device logs; operating systems; browsing history; browser information; clicks; interaction events; scroll interactions; scroll position; crash data; IP address; answers to questions.
Detailed information regarding each category of Personal Data collected is provided in the dedicated sections of this Privacy Policy or through specific informational notices displayed prior to the Data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. Failure to provide such Data may make it impossible for this Application to offer the Service. Where this Application expressly indicates that certain Data is optional, Users are free to refrain from providing such Data without consequences on the availability or functionality of the Service.
Users who are uncertain about which Data is mandatory are encouraged to contact the Owner.
The use of Cookies or of other tracking technologies by this Application or by the third-party service providers used by this Application is carried out for the purpose of providing the Service requested by the User, as well as for the additional purposes described in this document and in the Cookie Policy.
The User is responsible for any Personal Data of third parties obtained, published, or shared through this Application.

3. Methods and place of processing of the collected data

3.1. Methods of treatment

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of Data Processors may be requested from the Data Controller at any time.

3.2. Place of processing

Personal Data is processed at the Data Controller’s operating offices and on servers located within the European Union, unless otherwise specified in this document.
Depending on the services integrated into this Application, Personal Data may also be transferred to third countries outside the European Economic Area (“EEA”), including countries where data protection laws may differ from those in force within the EEA.

3.3. Retention period

Personal Data is processed and stored for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law, or the User has provided valid consent allowing longer storage.

4. Purpose of the processing of the collected data

The Data concerning the User is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or executive actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Interaction with external social networks and platforms, Tag Management, Traffic optimization and distribution, Statistics, Platform services and hosting, Registration and hosting, Registration and information, Contacting us and Contact us, Contact us, Contact us at hand, Registration and content of the, Contact Us, Contactness and contentmenting, All-page content of the website.
To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.

5. Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

5.1. Commercial Affiliation

This type of service allows this Application to display advertisements for products or services offered by third parties. Ads can be displayed in both advertising links and banner form in various graphic forms.
The click on the icon or banner published on this Application are tracked by the third-party services listed below and are shared with this Application.
To know what data is collected, please refer to the privacy policies of each service.

5.1.1. Amazon Affiliates (Amazon EU S.à r.l.)

This Application participates in the Amazon EU Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn fees by advertising and linking to Amazon websites. When Users click on affiliate links, Amazon may place cookies or similar technologies in order to attribute purchases and track conversions.
The Owner does not receive any personally identifiable information about Users from Amazon as part of this programme. All processing of tracking data is carried out by Amazon in accordance with its privacy policy.
Personal Data processed by Amazon: Usage Data; technical identifiers; interaction with affiliate links.
Place of processing: European Union - Privacy Policy.

5.2. Geolocalization

This type of service allows this Application to determine the User’s country in order to customize content, such as directing the User to the appropriate store, displaying relevant currency, or adjusting tax settings. The geolocation is limited to detecting the country and does not involve the transfer of the User’s IP address to third parties, as the lookup is performed locally on this server.

5.2.1. MaxMind Geolite2 (Maxmind, INC.)

MaxMind GeoLite2 is a geolocation service provided through WooCommerce, which uses a locally installed MaxMind database to determine the User’s country. The service is limited to deriving the country code from the User’s IP address and does not transmit personal data to MaxMind.
Personal Data collected: country code derived from IP address.
Place of processing: European Union (local installation). Company headquarters: United States - Privacy Policy.

5.3. E-commerce management (WooCommerce)

WooCommerce is an open-source e-commerce platform installed directly on this website’s servers.
It enables the Owner to manage product listings, carts, checkout processes, customer accounts, orders and invoicing.
WooCommerce does not transfer Personal Data to Automattic Inc. or WordPress.com, as all processing takes place locally within this Application’s infrastructure.
Personal Data processed: first name; last name; email address; billing address; shipping address; phone number;
company name; VAT number; tax code; PEC address; SDI recipient code; order details; order notes; cart information;
IP address; browser information; session identifiers; and any other Data necessary for processing orders, preventing fraud, and complying with legal obligations.
Purpose of processing: managing customer accounts; enabling purchase workflows;
processing and fulfilling orders; generating invoices; handling communications related to purchases;
detecting fraudulent activity; complying with tax and accounting requirements.
Legal basis for processing: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR);
compliance with legal obligations regarding invoicing and tax records (Art. 6(1)(c) GDPR);
legitimate interest in securing the platform and preventing fraud (Art. 6(1)(f) GDPR).
Data retention: order and invoice data are retained for the period required by applicable tax and accounting laws (10 years in Italy). Customer account data may be deleted or anonymised after a period of inactivity, unless further retention is required by law.
Place of processing: European Union (local server infrastructure) - Privacy Policy.

5.3.1. Electronic invoicing and fiscal data processing

This Application processes personal and fiscal data necessary to issue invoices and fulfil accounting and tax obligations under applicable law. When invoicing is issued in accordance with Italian legislation, the data may include name, last name, company name, VAT number, tax code, billing address, PEC address, SDI recipient code, invoice details and payment information.
This Application integrates with “Fattura Elettronica API”, a service provided by ITALA Tecnologia Informatica S.r.l., to generate, transmit and receive electronic invoices through the Italian Sistema di Interscambio (SDI). The service processes fiscal data exclusively to fulfil legal accounting and tax obligations. Depending on the configuration chosen by the Owner, the provider may act as independent Data Controller or Data Processor, as specified in its privacy documentation.
Personal Data processed: name; last name; company name; billing address; VAT number; tax code; PEC address; SDI recipient code; invoice data; payment-related metadata.
Purpose of processing: issuing and transmitting invoices; fulfilment of accounting and tax obligations; maintaining statutory financial records.
Legal basis for processing: compliance with a legal obligation (Art. 6(1)(c) GDPR); performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
Data retention: fiscal and accounting data are retained for the period required by applicable tax laws (10 years or longer if required by law).
Third-party access: fiscal data are transmitted to ITALA Tecnologia Informatica S.r.l. solely for the purpose of issuing and transmitting electronic invoices and complying with legal obligations.
Place of processing: European Union / Italy - Privacy Policy.

5.4. Management of payments

This website uses external payment processors to handle transactions. Payment details (such as credit card numbers or payment tokens) are collected directly by the selected payment provider and are not stored or processed by this website.
WooCommerce stores only the order metadata strictly necessary for invoicing, accounting, and order fulfillment, in accordance with applicable tax laws.

5.4.1. PayPal (PayPal Europe / PayPal Inc.)

PayPal is a payment service that allows Users to make online payments.
Personal data processed: billing information, email address, transaction details, and other data as specified in PayPal’s privacy policy.
Place of processing: European Union & United States - Data transfers are protected by the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

5.4.2. Stripe (Stripe Payments Europe / Stripe Inc.)

Stripe is a payment service enabling secure credit card payments.
Personal data processed: billing information, email, transaction identifiers, and other data as specified in Stripe’s privacy policy.
Place of processing: European Union & United States - Data transfers are based on Standard Contractual Clauses (SCCs) and Stripe’s Data Processing Agreement.

5.5. Managing contacts and sending messages

This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.
These services may also allow the collection of data relating to the date and time of display of messages by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in messages.

5.5.1. Contact form (This Application)

The User, by filling in the contact form with their Data, consents to their use to respond to requests for information, quotes, or any other nature indicated by the header of the form.
Personal Data collected: email address, first name, last name, city, country and email address.

5.5.2. Automatic Feedback Service from Trustpilot (Trustpilot A/S)

Trustpilot’s Automatic Feedback Service is a message sending service provided by Trustpilot A/S that automates the sending of requests for reviews of products or services by email based on certain actions carried out by Users on this Application.
Personal Data processed: email address; first name; last name
Place of processing: Denmark - Privacy Policy.

5.6. Management of User databases

This type of service allows this Application to manage a database of email contacts and other User data required to communicate with the User. These services may also collect information about the date and time of message delivery, whether messages were opened, and interaction data such as clicks on links contained in messages. Depending on the configuration chosen by the Owner, these services may also support segmentation, automated workflows and analytics.

5.6.1. VBOUT (Vbout Inc.)

VBOUT is a marketing automation and email communication platform used by this Application to manage subscription lists, send email campaigns, automate sequences and track message performance. Depending on the configuration chosen by the Owner, VBOUT may process information related to delivery results, interaction events and communication preferences.
Personal Data processed: email address; communication preferences; Usage Data related to message delivery and interaction; any information voluntarily submitted by the User during subscription or form submission. Email marketing communications are sent only if the User has provided valid consent, where required by applicable law. Users may withdraw consent at any time by using the unsubscribe link included in each message or by contacting the Data Controller.
Place of processing: United States - Privacy Policy.

5.7. Tag management

This type of service is functional to the centralized management of the tags or scripts used on this Application.
The use of these services involves the flow of the User’s Data through them and, if necessary, their retention.

5.7.1. Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage Data.
Place of processing: Ireland - Privacy Policy.

5.8. Management of data collection and online surveys

This type of service allows this Application to manage the creation, implementation, administration, distribution and analysis of forms and online surveys in order to collect, save and reuse the Data of the Users who respond.
The Personal Data collected depend on the information requested and provided by Users in the corresponding online form.
These services can be integrated with a wide range of third-party services to allow the Data Controller to take subsequent actions with the Data processed - for example, contact management, sending messages, statistics, advertising and processing of payments.

5.8.1. Contact Attachments for Meta (Meta Platforms, Inc.)

Contact Acquisition Ads from Meta is an advertising and data collection service provided by Meta Platforms, Inc. that allows Users to show users advertisements in the form of already pre-populated forms with the Personal Data of their Facebook profiles, such as names and email addresses. Depending on the type of ad, Users may be required to provide additional information.
The sending of the form involves the collection and processing of this Data by the Data Controller pursuant to this privacy policy and only for the specific purpose indicated in the form and / or within this privacy policy, where applicable.
The User may exercise his rights, at any time, including the right to withdraw consent to the processing of their Data, as specified in the section containing information on the User’s rights in this privacy policy.
Personal Data processed: email address: first name.
Place of processing: United States - Privacy Policy - Opt out.

5.9. Hosting and backend infrastructure

This type of service hosts the Data and files that enable the functioning of this Application, allow its distribution and provide the infrastructure necessary to deliver specific features. Some services may operate on geographically distributed servers, making it difficult to determine the exact location where Personal Data is stored.

5.9.1. Vhosting (Vhosting Solutions S.r.l Unipersonale)

V-Hosting is a hosting and backend service provided by VHosting Solution s.r.l. Unipersonale.
Personal Data collected: Cookies and Usage Data.
Place of processing: Italy - Privacy Policy.

5.9.2. CMS WordPress (Self-Hosted)

Reeview.me uses WordPress, an open-source content management system installed on its own servers. WordPress does not transmit User Data to WordPress.com or Automattic Inc., nor does it host the website on the WordPress.com infrastructure.
Personal Data processed: none beyond what is strictly necessary for the technical operation of the website.

5.9.3. Cloudflare (Cloudflare, Inc.)

Cloudflare is a traffic optimisation and security service provided by Cloudflare, Inc. Cloudflare filters traffic between this Application and the User’s browser and may process Data for security, performance optimisation, caching and content delivery purposes (CDN). Depending on configuration, Cloudflare may collect technical identifiers and security-related information.
Personal Data processed: Cookies; Usage Data; technical identifiers.
Place of processing: United States and European Union - Privacy Policy.

5.10. Interaction with live chat and widget platforms

This type of service allows Users to interact with third-party widget platforms, including live chat or AI-based assistance tools, directly from the pages of this Application. These services enable the Owner to provide support, receive messages and analyse interactions in order to maintain or improve the Application. Depending on the configuration, such services may collect Usage Data, device information and interaction events, and may store or log the content voluntarily submitted by Users. These services may be activated only after the User has provided consent to non-essential tracking technologies, where required by applicable law.

5.10.1. OpenWidget (Text SA)

OpenWidget provides embedded widgets, including live chat and AI-based assistance, on this Application. When the User interacts with the widget, OpenWidget may process the content of messages, as well as Usage Data, technical identifiers and interaction events, in order to deliver the service and maintain security, diagnostics and abuse-prevention processes. Depending on the configuration chosen by the Owner, OpenWidget may log conversations or store interaction data for the purpose of improving service quality and ensuring compliance with applicable legal obligations. These services may be activated only after the User has provided the relevant consent to non-essential tracking technologies, where required by applicable law.
Personal Data processed: content voluntarily provided by Users through the widget; Usage Data; device and browser information; interaction and diagnostic data.
Place of processing: Poland / European Union - Privacy Policy.

5.11. Artificial intelligence services

This type of service allows this Application to process User Data using machine-learning systems and automated models provided by third parties. These services enable features such as automated responses, content generation and AI-assisted communication. Depending on the configuration, such services may process User-provided content, Usage Data and technical identifiers, and may log such data for security, diagnostics, performance monitoring or model improvement purposes in accordance with the provider’s documentation. Activation of these services may be conditioned upon the User’s consent to non-essential cookies or similar tracking technologies, where required by applicable law.

5.11.1. OpenAI API (OpenAI OpCo, LP)

This Application integrates the OpenAI API, via OpenWidget, to provide automated responses and AI-based assistance. When the User interacts with the widget, the content voluntarily submitted may be processed by OpenAI to generate responses. Depending on the configuration of the service, submitted content and Usage Data may be logged temporarily for security, diagnostics or abuse-prevention purposes, and may be used to improve the quality and accuracy of models in accordance with the provider’s documentation. Activation of this service may be conditioned upon the User’s consent to non-essential tracking technologies, where required by applicable law.
Personal Data processed: content voluntarily provided by the User through the widget; Usage Data; device and browser information; interaction and diagnostic data.
Place of processing: as specified in the provider’s documentation - Privacy Policy.

5.12. Managing addresses and sending email messages

This type of service allows this Application to manage a database of email contacts and other communication details used to interact with the User. These services may also collect information regarding the delivery and engagement of messages, such as the date and time of opening, interaction events and clicks on links within messages, for performance monitoring and optimisation purposes.

5.12.1. VBOUT (Vbout Inc.)

VBOUT is a marketing automation and email communication platform that enables this Application to manage subscription lists, send email campaigns, automate sequences and track message performance. Depending on the configuration chosen by the Owner, VBOUT may process information related to delivery results, interaction events and communication preferences.
Personal Data processed: email address; Usage Data related to message delivery and interaction; communication preferences; information voluntarily submitted by the User during subscription or form submission.
Place of processing: United States - Privacy Policy.

5.13. Interaction with external social networks and platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this Application.
The interactions and information acquired by this Application are in any case subject to the User’s privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when the Users do not use it.
It is recommended that you disconnect from the respective services to ensure that the data processed on this Application is not linked to the User’s profile.

5.13.1. LinkedIn button and social widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are services of interaction with the Linkedin social network, provided by LinkedIn Corporation.
Personal data processed: Cookies; Usage Data.
Place of processing: United States - Privacy Policy.

5.13.2. Tweet button and social widgets of X (formerly Twitter) (X)

The X Tweet button and social widgets are services allowing interaction with the X Corp.
Personal Data collected: email address and first name.
Place of processing: USA - Privacy Policy.

5.13.3. “Pin It” button and Pinterest social widgets (Pinterest)

The Pinterest “Pin it” button and social widgets are services of interaction with the Pinterest platform, provided by Pinterest Inc.
Personal Data collected: email address and first name.
Place of processing: USA - Privacy Policy.

5.13.4. Facebook Like button and social widgets (Meta Platforms, Inc.)

The “Like” button and Facebook social widgets are services of interaction with the Facebook social network, provided by Meta Platforms, Inc.
Personal data processed: Cookies; Usage Data.
Place of processing: United States - Privacy Policy.

5.13.5. YouTube button and social widgets (Google Ireland Limited)

The YouTube button and social widgets are services of interaction with the YouTube social network, provided by Google Ireland Limited.
Personal Data processed: Usage Data.
Place of processing: Ireland - Privacy Policy.

5.14. Traffic optimization and distribution

This type of service allows this Application to distribute its contents through servers located in the territory and to optimize its performance.
The Personal Data processed depend on the characteristics and methods of implementation of these services, which by their nature filter the communications between this Application and the User’s browser.
Given the distributed nature of this system, it is difficult to determine the places where the contents are transferred, which may contain Personal Data of the User.

5.14.1. Cloudflare (Cloudflare Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The methods of integration of Cloudflare provide that this filters all the traffic of this Application, i.e. communications between this Application and the User’s browser, also allowing the collection of statistical data on it.
Personal Data processed: Cookies; various types of Data as specified in the privacy policy of the service.
Place of processing: United States - Privacy Policy.

5.15. Advertising

This type of service allows you to use the User’s Data for commercial communication purposes. These communications are shown on this Application in the form of banners and other forms of advertising, also in relation to the interests of the User.
This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.
Some of the services listed below may use Tracking Tools to identify the User or use the technique of behavioral retargeting, i.e. displaying advertisements tailored to the interests and behavior of the User, also detected outside this Application. For more information on this, we suggest you check the privacy policies of the respective services.
Generally, such services offer the possibility to disable such tracking. In addition to any opt-out feature provided by any of the services listed in this document, you may read more about how to opt-out of interest-based advertisements in the “How to opt-out of interest-based advertising” in this document. These services are activated only after the User has expressed consent to marketing cookies, where required by applicable law.

5.15.1. Similar audience of Meta (Meta Platforms, Inc.)

Meta’s similar public is an advertising and behavioral targeting service provided by Meta Platforms, Inc. that uses the Data collected through Meta’s Customized Public Service in order to display advertisements to Users with similar behavior to Users who are already in a personalized Public list based on their previous use of this Application or their interaction with relevant content through Meta’s applications and services.
Based on this Data, personalized ads will be shown to users suggested by Meta’s Similar Public.
Users may choose not to use the Meta Tracking Tools for the personalization of ads by visiting this opt-out page.
Personal data processed: Cookies; Usage Data.
Place of processing: United States - Privacy Policy - Opt out.

5.15.2. Google Ads conversion monitoring (Google Ireland Limited)

Google Ads conversion tracking is a statistics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed within this Application.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland - Privacy Policy.

5.15.3. Google Ad Manager (Google Ireland Limited)

Google Ad Manager is an advertising service provided by Google Ireland Limited with which the Data Controller may conduct advertising campaigns in conjunction with external advertising networks with which the Owner, unless otherwise specified in this document, has no direct relationship.
For an understanding of Google’s use of the Data, please see the policies for Google partners.
This service uses the “DoubleClick” Cookie, which tracks the use of this Application and the behavior of the User in relation to the advertisements, products and services offered.
The User can decide at any time to disable all DoubleClick cookies by going to: Ads Settings.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Ireland - Privacy Policy.

5.15.4. Meta Ads conversion monitoring (Meta Platforms Ireland Limited)

Meta Ads conversion monitoring (pixel) is an analytics service provided by Meta Platforms Ireland Limited that connects data from the Meta advertising network with actions performed within this Application. The Meta pixel records conversions that can be attributed to ads displayed on Meta’s platforms, enabling aggregated reporting and performance measurement.
Personal Data processed: Usage Data; technical identifiers where enabled.
Place of processing: Ireland - Privacy Policy - opt-out available through User settings.

5.15.5. TikTok Conversion Monitoring (TikTok Inc.)

TikTok conversion tracking is an analytics service provided by TikTok Inc. that connects data from the TikTok ad network with the actions performed within this Application. The TikTok pixel tracks the conversions that can be attributed to TikTok ads and allows you to identify as target groups of Users based on their previous use of this Application.
Personal Data processed: Usage Data.
Place of processing: United States - Privacy Policy.

5.15.6. LinkedIn Ads (LinkedIn Ireland Unlimited Company)

LinkedIn Ads is an advertising service provided by LinkedIn Ireland Unlimited Company.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland - Privacy Policy - Opt out.

5.15.7. LinkedIn (LinkedIn Insight Tag) (LinkedIn Corporation) conversions

LinkedIn’s (LinkedIn Insight Tag) conversion tracking is a statistics and behavioral targeting service provided by LinkedIn Corporation that connects data from the LinkedIn ad network with actions performed within this Application. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and allows you to identify groups of Users as a target based on their previous use of this Application.
Users can opt-out from behavioral advertising features through their device settings, their LinkedIn account settings, or by visiting the AdChoices opt-out page.
Personal Data processed: Usage Data; device information; Tracking Tools.
Place of processing: United States - Privacy Policy.

5.16. Registration and authentication

By registering or authenticating, the User allows this Application to identify him and give him access to dedicated services.
Depending on the following, registration and authentication services may be provided with the help of third parties. If this happens, this Application may access some Data stored by the third-party service used for registration or identification.
Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to learn more, please refer to the description of each service.

5.17. Registration and authentication provided directly by this Application

By registering or authenticating, the User allows this Application to identify him and give him access to dedicated services. Personal Data is collected and stored exclusively for the purpose of registration or identification. The Data collected are only those necessary to provide the service requested by the User.

5.17.1. Direct registration (this Application)

The User registers by filling out the registration form and providing this Application with their Personal Data directly.
Personal Data processed: city; company name; email address; first name; last name; phone number.

5.18. Protection from the SPAM

This type of service analyzes the traffic of this Application, potentially containing Users’ Personal Data, in order to filter it from parts of traffic, messages and content recognized as SPAM.

5.18.1. Cloudflare Turnstile (Cloudflare, Inc.)

Cloudflare Turnstile is a SPAM protection and bot mitigation service provided by Cloudflare, Inc.
It performs behavioral and browser integrity checks to verify that requests originate from human users rather than automated scripts or bots.
The use of Turnstile is subject to Cloudflare’s privacy policy and terms of service.
Personal Data processed: Cookies; Usage Data; browser information; device information; interaction data; anonymized identifiers.
Place of processing: United States and European Union - Privacy Policy.

5.19. Remarketing and behavioral targeting

This type of service allows this Application and its partners to communicate, optimize and serve advertising based on past use of this Application by the User.
This activity is facilitated by tracking Usage Data and the use of Tracking Tools to collect information that is then transferred to partners that handle remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
In addition to the opt-out features offered by the services below, the User can opt-out by visiting the opt-out page of the Network Advertising Initiative.
Users may also choose not to participate in certain advertising features through the corresponding device configuration options, such as mobile device advertising configuration options or generic ad configuration. These services are activated only after the User has expressed consent to marketing cookies, where required by applicable law.

5.19.1. Custom Audience of Meta (Meta Platforms, Inc.)

Meta is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. that connects the activity of this Application with the Meta advertising network.
Users may choose not to use the Meta Tracking Tools for the customization of ads by visiting this opt-out page.
Personal data processed: Cookies; email address.
Place of processing: United States - Privacy Policy - Opt out.

5.19.2. Facebook Remarketing (Meta Platforms, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms, Inc. that connects the activity of this Application with the Meta advertising network.
Personal data processed: Cookies; Usage Data.
Place of processing: United States - Privacy Policy - Opt Out.

5.19.3. Google Ad Manager Audience Extension (Google Ireland Limited)

Google Ad Manager Audience Extension is a remarketing and behavioral targeting service provided by Google Ireland Limited that tracks visitors to this Application and allows selected advertising partners to show them personalized ads within the web.
For an understanding of Google’s use of the Data, please see the policies for Google partners.
Personal Data processed: Usage Data; Tracking Tool.
Place of processing: Ireland - Privacy Policy - Opt Out.

5.19.4. Remarketing TikTok ( TikTok Information Technologies UK Limited )

Remarketing TikTok is a remarketing and behavioral targeting service provided by TikTok Information Technologies UK Limited that connects the activity of this Application with the TikTok advertising network.
Personal Data processed: Usage Data.
Place of processing: United Kingdom - Privacy Policy.

5.19.5. LinkedIn Website Retargeting (LinkedIn Corporation)

LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that links the activity of this Application with the LinkedIn advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States - Privacy Policy - Opt Out.

5.20. Platform and hosting services

These services are intended to host and operate key components of this Application, making it possible to provide this Application from a single platform. These platforms provide the Data Controller with a wide range of tools such as, for example, analytical tools, for the management of user registration, for the management of comments and databases, for electronic commerce, for the processing of payments etc. The use of these tools involves the collection and processing of Personal Data.
Some of these services work through servers located geographically in different places, making it difficult to determine the exact place where the Personal Data is stored.

5.21. Statistics

The services contained in this section allow the Owner to monitor and analyze traffic data and are used to keep track of User behavior. Where required by applicable law, statistical and marketing services are activated only after the User has expressed consent through the cookie banner. Users can manage or withdraw consent at any time via the Cookie Policy or the consent settings.

5.21.1. Google Analytics 4 (Google Ireland Limited)

Google Analytics 4 is a web analytics service provided by Google Ireland Limited (“Google”). The service enables this Application to analyse aggregated traffic and understand how Users interact with the website. To accomplish this, Google processes Usage Data, which may include identifiers associated with devices and interactions, and may create aggregated statistical reports for the Owner.
In GA4, IP addresses are used at the time of collection solely to derive geolocation metadata and are then deleted before data is stored in any Google data center, as described in Google’s documentation. Depending on the configuration chosen by the Owner, Google may also use data for the purpose of improving its services and systems.
Personal Data processed: Usage Data.
Place of processing: Ireland - Privacy Policy - Opt-out.

5.21.2. Meta Events Manager (Meta Platforms Ireland Limited)

Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited that enables the Owner to measure the performance of content and understand how Users interact with the website. By integrating the Meta pixel or Event API, interactions on this Application may be associated with Meta’s analytics and reporting features.
Personal Data processed: Usage Data; technical identifiers where enabled.
Place of processing: Ireland - Privacy Policy - Opt-out available through User settings.

5.21.3. Matomo (self-hosted web analytics)

Matomo is an open-source web analytics platform used by this Application to measure aggregated traffic and understand how Users interact with the website. The software is installed on servers controlled by the Owner, so analytics data is not shared with third-party advertising networks. Depending on the configuration, Matomo may process truncated IP addresses, timestamps, visited pages, referrer URLs, device and browser information, and technical identifiers. Matomo can be configured to use IP anonymisation and to disable cookies to comply with applicable data protection and ePrivacy rules.
Personal Data processed: Usage Data; technical identifiers (such as cookies or similar technologies, where enabled); truncated IP address; referrer and interaction data; device and browser information.
Place of processing: same as the hosting environment of this Application - further information at Privacy Policy.

5.22. Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them.
This type of service may still collect web traffic data about the pages where the service is installed, even when users are not using it.

5.22.1. Widget Video YouTube (Google Ireland Limited)

YouTube is a video content visualization service provided by Google Ireland Limited that allows this Application to incorporate content of this kind on its pages.
Personal data processed: Cookies; Usage Data.
Place of processing: Ireland - Privacy Policy.

5.22.2. Widget YouTube Video (Advanced Privacy Mode) (Google Ireland Limited)

YouTube is a video content visualization service provided by Google Ireland Limited that allows this Application to incorporate content of this kind on its pages.
This widget is set to keep YouTube not saving information and cookies about Users on this Application, unless they play the video.
Personal Data processed: Usage Data; Universal Unique Identification (UUID); Tracking Tools.
Place of processing: Ireland - Privacy Policy.

6. Learn how to opt out of interest-based advertisements

In addition to any opt-out function provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertisements in the appropriate section of the Cookie Policy.

7. Cookie Policy

This Application uses Tracking Tools. For more information, Users may refer to the Cookie Policy.

8. Additional information for Users

8.1. Legal basis for processing

The Owner processes Personal Data when one of the following conditions applies:

the User has given consent for one or more specific purposes;
processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
processing is required to comply with a legal obligation to which the Owner is subject;
processing is carried out in connection with a task in the public interest or in the exercise of official authority vested in the Owner;
processing is necessary for the purposes of the legitimate interests pursued by the Owner or by third parties.

Users may always contact the Owner to clarify the specific legal basis that applies to each processing activity and, in particular, whether the processing is legally required, contractually mandated, or necessary in order to enter into a contract.

8.2. Further information on retention time

Unless otherwise stated in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected, and may be retained for a longer period due to legal obligations or on the basis of the User’s consent.
Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully executed.
Personal Data collected for purposes connected to the legitimate interests of the Owner will be retained until such interests have been satisfied. Users may obtain further details regarding the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.
Where processing is based on the User’s consent, the Owner may retain Personal Data for a longer period until such consent is withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period in order to comply with a legal obligation or upon order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, once this period has expired, the rights of access, erasure, rectification, and data portability can no longer be exercised.

8.3. Rights of the User on the basis of the General Data Protection Regulation (GDPR)

Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, within the limits established by law, the User has the right to:

revoke the consent at any time. The User can revoke the consent to the processing of their Personal Data previously expressed.
oppose the processing of their Data.The User may object to the processing of their Data when it is done by virtue of a legal basis other than consent.
access to their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
verify and request rectification. The User can verify the correctness of their Data and request its updating or correction.
obtain the limitation of the processing. The User may request the restriction of processing of their Data. In this case, the Data Controller will not process the Data for any other purpose other than its conservation.
obtain the cancellation or removal of their Personal Data. The User can request the cancellation of their Data by the Owner.
to receive their Data or have them transferred to another owner.The User has the right to receive their Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain the transfer without hindrance to another owner.
propose a complaint. The User may lodge a complaint with the competent personal data protection supervisory authority or act in court.

Users have the right to obtain information about the legal basis for the transfer of Data abroad including to any international organization governed by international law or consisting of two or more countries, such as the UN, as well as about the security measures taken by the Owner to protect their Data. Users also have the right to object to profiling and automated decision-making, including profiling carried out for direct marketing purposes.

8.3.1. Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their Data are processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any reason. If Users oppose the processing for direct marketing purposes, the Personal Data are no longer processed for these purposes. To find out if the Data Controller processes with direct marketing purposes, Users may refer to the respective sections of this document.

8.3.2. How to exercise rights

Any requests to exercise the rights of the User can be addressed to the Owner through the contact details provided in this document. The request is free and the Owner will respond as soon as possible, in any case within a month, providing the User with all the information required by law. Any corrections, cancellations or limitations of the processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or involves a disproportionate effort. The Owner informs the User of these recipients if he requests it.

8.4. International transfers of Personal Data

Personal Data may be transferred to third countries outside the European Economic Area in connection with the services described in this document. Where such transfers occur, the Data Controller ensures that an adequate level of protection is provided according to applicable data protection law.
Transfers may be based on:

adequacy decisions issued by the European Commission;
Standard Contractual Clauses (SCCs) adopted by the European Commission; or
other appropriate safeguards as allowed under applicable law.

More information on applicable safeguards may be requested from the Data Controller using the contact details provided in this document.

9. Further information on the treatment

9.1. Defense in court

Legal action The User’s Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services.
The User declares to be aware that the Owner may be obliged to disclose the Data by order of public authorities.

9.2. Specific information

At the request of the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services or the collection and processing of Personal Data.

9.3. System and maintenance logs

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) use other Personal Data (such as the IP Address) for this purpose.

9.4. Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time to the Data Controller using the contact details.

9.5. Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to you. Therefore, please consult this page frequently, referring to the date of the last modification indicated at the bottom. If the changes concern treatments whose legal basis is consent, the Owner will collect the User’s consent again if necessary.

9.6. Definitions and legal references

9.6.1. Personal Data (or Data)

Personal data is any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes an individual identified or identifiable.

9.6.2. Usage Data

These are the information automatically collected through this Application (also from third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects with this Application, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in linking the request to the server, the size of the file obtained in response, the numerical code indicating the status of the answer from the server.

9.6.3. User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

9.6.4. Interested

The natural person to whom the Personal Data refers.

9.6.5. Responsible for the treatment (or responsible)

The natural person, legal person, public administration or any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

9.6.6. Data Controller (or Owner)

The natural or legal person, public authority, service or other body that, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.

9.6.7. This Application

The hardware or software tool through which the Personal Data of Users are collected and processed.

9.6.8. Service

The service provided by this Application as described in the relative terms (if any) on this site/application.

9.6.9. European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document is intended to be extended to all current member states of the European Union and the European Economic Area.

9.6.10. Cookies

Cookies are Tracking Tools that consist of small pieces of data stored in your browser.

9.6.11. Tracking Tool

Tracking Tool means any technology - e.g. Cookies, unique identifiers, web beacons, integrated scripts, e-tags and fingerprinting - which allows Users to be tracked, for example by collecting or saving information on the User’s device.