Data protection

To obtain information about the personal data, the purpose and the parties to which this data is communicated, please contact the Owner

Provider and responsible person

Types of data collected

The Owner does not provide a list of the personal data collected.

Full details of each type of personal data processed are provided in the dedicated sections of this privacy policy or selectively through explanatory texts displayed before data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, the provision of all data requested by this Application is mandatory. If the User refuses to provide the data, this may result in this Application not being able to provide its services to the User. In cases where this Application expressly states that the provision of Personal Data is voluntary, Users may choose not to provide such Data without any consequences for the availability or functionality of the Service.
Users who are unsure about which personal data is mandatory can contact the provider.
Any use of cookies - or other tracking tools - by this Application or the providers of third-party services used through this Application serves the purpose of providing the service requested by the User and any other purposes specified in this document and in the Cookie guidelines are described.

Users are responsible for any third party personal information obtained, published or shared through this Application.

Type and location of data processing

Processing methods

The provider processes user data properly and takes appropriate security measures to prevent unauthorized access, disclosure, alteration or destruction of data.
The Data processing is carried out using computers or IT-based systems, according to organizational procedures and practices specifically tailored to the purposes indicated. In addition to the Owner, in some cases, this Application may be operated by other types of persons, either internal to the Application (human resources, sales, marketing, legal, system administrators) or external to it (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) - and, in some cases, appointed as Data Processors by the Owner, if necessary - who may have access to the Data. An up-to-date list of such parties may be requested from the Owner at any time.

Location

The data is processed at the provider's branch and at all other locations where the entities involved in data processing are located.

Depending on the location of the Users, data transfers may involve the transfer of the Users' Data to a country other than their own. To find out more about the place of processing of the Data transferred, Users can consult the section containing the detailed information on the processing of Personal Data.

Storage period

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as necessary to fulfill the purposes for which it was collected and may be retained even longer to comply with a legal obligation or based on the User's consent.

Cookie Policy

This application uses trackers. Further information can be found in the Cookie Policy.

Further information for users

Legal basis for processing

The provider may only process personal data of users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: In some jurisdictions the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. However, this shall not apply where the processing of Personal Data is subject to European Data Protection Law;
• the data collection is necessary for the fulfillment of a contract with the user and/or for pre-contractual measures therefrom;
• the processing is necessary for compliance with a legal obligation to which the provider is subject;
• the processing is related to a task carried out in the public interest or in the exercise of public authority vested in the provider;
• the processing is necessary to protect the legitimate interests of the provider or a third party.

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for concluding a contract.

Further information on length of stay

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as necessary to fulfill the purposes for which it was collected and may be retained even longer to comply with a legal obligation or based on the User's consent.

Therefore:

• Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been fully fulfilled.
• Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes. Users can obtain more information about the Provider's legitimate interests in the relevant sections of this document or by contacting the Provider.

Furthermore, the Owner is allowed to store Personal Data for a longer period if the User has consented to such processing, as long as the consent is not withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period if this is necessary to fulfill a legal obligation or upon order of an authority.

After the retention period has expired, personal data will be deleted. Therefore, the right to information, the right to deletion, the right to rectification and the right to data portability cannot be exercised after the retention period has expired.

The rights of users

Users can exercise certain rights regarding their data processed by the provider.

In particular, to the extent permitted by law, users have the right to do the following:

• Revoke your consent at any time. If the user has previously consented to the processing of personal data, they can revoke their consent at any time.
• Object to the processing of your data. The user has the right to object to the processing of his or her data if the processing is based on a legal basis other than consent.
• Receive information regarding your data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.
• Have it checked and corrected. The user has the right to check the accuracy of his data and to request that it be updated or corrected.
• Request restriction of the processing of your data. Users have the right to restrict the processing of their data. In this case, the provider will not process the data for any purpose other than storage.
• Request deletion or other removal of personal data. Users have the right to request that the provider delete their data.
• Receive your data and have it transferred to another responsible party. The user has the right to receive his/her data in a structured, common and machine-readable format and, if technically possible, to have it transmitted to another controller without hindrance.
• Give a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Users also have the right to be informed about the legal basis for the transfer of data abroad or to an international organization governed by international law or established by two or more countries, such as the UN, as well as the security measures taken by the provider to protect them to clarify data.

Details on the right to object to processing

Where personal data is processed in the public interest, in the exercise of an official authority vested in the Owner or to safeguard the legitimate interests pursued by the Owner, the User may object to such processing by providing a justification related to his or her particular situation.

Users are informed that they can object to the processing of personal data for direct marketing purposes at any time and free of charge without giving reasons. If the User objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Users can find out whether the Owner processes personal data for direct marketing purposes by checking the relevant sections of this document.

How the rights can be exercised

All requests to exercise user rights can be directed to the provider using the contact details provided in this document. These requests can be made free of charge and will be answered by the provider as early as possible, at the latest within one month, and the legally required information will be made available to users. The provider will inform all recipients to whom personal data has been disclosed, if any, of any correction or deletion of personal data or restriction of processing. Unless this proves to be impossible or involves disproportionate effort. The provider informs the user about these recipients if the user requests this.

Further information on the collection and processing of data

Legal measures

The User's personal data may be processed by the Provider for legal enforcement purposes within or in preparation for legal proceedings arising from improper use of this Application or the associated services.
The user declares that he is aware that the provider could be required by the authorities to release personal data.

Further information about the user’s personal data

In addition to the information set out in this Privacy Policy, this Application may, upon request, provide the User with other contextual information relating to specific Services or to the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.

Information not contained in this privacy policy

Further information regarding the collection or processing of personal data can be requested from the provider at any time using the contact details provided.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within this Application and/or - as far as technically and legally feasible - by sending a notice via any contact details available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last modification indicated at the bottom of the page.

If changes affect data usage based on the user’s consent, the provider will – if necessary – obtain new consent.

Definitions and legal information

Last updated: February 14, 2024