1. Introduction
The protection of personal data is a fundamental aspect for Flexmoo by Giorgio Mazzei (hereinafter, "Flexmoo" or the "Controller"). This policy explains the methods and purposes with which we collect, use, and protect the personal data of individuals who interact with us, in compliance with Regulation (EU) 2016/679 (GDPR) and the applicable national laws.
2. Data Controller
The Data Controller is Flexmoo by Giorgio Mazzei, with registered office at Via della Costituzione 17, 57016 Rosignano Solvay, Livorno, Italy, VAT IT02003550494. For any questions or requests regarding this policy, please contact the Controller at the email address info@flexmoo.com or via PEC at giorgiomazzei@pec.it.
3. Types of Data Processed
Flexmoo processes different categories of personal data that may be collected through interaction with the website or other communication channels:
- Identification and contact data: Name, surname, email address, phone number, and any other information voluntarily provided via contact forms or email.
- Browsing data: Information automatically collected by the website’s computer systems, such as IP address, device type, operating system, browser type, and data related to the user’s interaction with the site.
- Cookies and tracking tools: For analytics and marketing purposes, we use technical and profiling cookies (e.g., via Google Analytics and Google Tag Manager).
4. Purposes and Legal Basis of Processing
The personal data collected is processed for the following purposes:
- Managing requests and communications: The data provided is used to respond to requests for information, support, and to provide requested consultations. The legal basis for this processing is the performance of pre-contractual or contractual measures requested by the data subject.
- Website analytics and service improvement: We use analytics tools such as Google Analytics to collect statistical data on site visits and improve our services. This data is processed in an aggregated and anonymized form, and users may opt out of these tools via our cookie banner. The legal basis for this processing is the user's explicit consent, where required.
- Remarketing and personalized advertising: Flexmoo uses remarketing to display relevant ads to users who have visited the site. To this end, we collect information about the user’s visits and interactions with our site through tracking tools like Google Tag Manager, subject to user consent. The legal basis is user consent, which can be withdrawn at any time.
- Promotional and marketing communications via email: We use email marketing tools, such as GetResponse and Aweber, to send promotional communications about Flexmoo’s services. These communications are personalized based on user interests. Users may withdraw their consent at any time to stop receiving communications. The privacy policies of these providers are available here: GetResponse and Aweber.
- Compliance with legal obligations: Personal data may be processed to fulfill obligations required by laws, regulations, or European Union rules. The legal basis is compliance with a legal obligation to which the Controller is subject.
5. Processing Methods and Security
Flexmoo processes personal data mainly electronically, adopting all necessary security measures to protect data from unauthorized access, accidental loss, destruction, or damage. Security measures include:
- Access controls and authentication: To restrict access to personal data to authorized personnel only.
- Encryption: Where possible, we use encryption methods to protect data.
- System and device protection: Continuous updates and monitoring of our systems to prevent intrusions and abuse.
6. Data Communication and Transfer
Flexmoo does not share or sell users' personal data to third parties for marketing or commercial purposes without specific consent. However, personal data may be shared with third parties in the following circumstances:
- Third-party service providers: Data may be transferred to IT service providers, hosting providers, marketing and analytics tools providers, but only to the extent necessary to provide the service. These providers are designated "Data Processors" and are contractually bound to ensure data security and confidentiality.
- Public authorities or supervisory bodies: When required by law, personal data may be shared with competent authorities for compliance with legal obligations or in response to legitimate requests.
7. International Transfers
Where necessary, data may be transferred outside the European Economic Area (EEA), particularly to countries where service providers are based (e.g., Google). Such transfers will only occur to countries that ensure an adequate level of data protection or through the adoption of appropriate safeguards, such as the standard contractual clauses approved by the European Commission. Google's privacy policy is available here: Google Privacy Policy.
8. Data Retention
Personal data will be retained for the period strictly necessary for the purposes of the processing and in accordance with applicable law. Specifically:
- Data for contractual purposes and request management: Retained for the time required to manage requests and subsequently for the periods provided by law.
- Data collected for marketing purposes: Retained until user consent is withdrawn or a deletion request is made.
9. Data Subject Rights
Users have the right to:
- Access: Obtain confirmation of the processing of their personal data and access such data.
- Rectification: Request the correction of inaccurate or incomplete data.
- Erasure: Request the deletion of their data, where applicable.
- Restriction of processing: Restrict the processing of data under conditions provided by law.
- Data portability: Receive personal data in a structured, machine-readable format.
- Objection: Object to data processing for legitimate reasons, including marketing activities.
- Withdrawal of consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, you may contact the Controller at the provided contact details. Additionally, if you believe your rights have been violated, you have the right to file a complaint with the Data Protection Authority.
10. Changes to the Privacy Policy
Flexmoo reserves the right to update this privacy policy at any time to reflect regulatory, technological, or operational changes. Users will be informed of any such changes via a notice posted on this page and, where possible, through direct notification. It is recommended to review this policy periodically.
