This Website collects some Personal Data from its Users.
Personal Data: Trackers; Usage Data
Personal Data: Tracker; Usage Data
Personal Data: session statistics; Trackers; Usage Data
Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data as specified in the privacy policy of the service
Personal Data: Trackers; Usage Data
Personal Data: company name; email address; first name; last name; phone number
Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service
Personal Data: Tracker; Usage Data
Personal Data: Data communicated in order to use the Service; Data communicated while using the service
Personal Data: email address; Trackers; Usage Data
Personal Data: Usage Data
Personal Data: Tracker; Usage Data
Personal Data: Tracker; Usage Data
Personal Data: company name; email address; first name; last name; phone number
In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.
1. Data Retention Period
"Personal Data shall be processed and stored for as long as required by the purpose they have been collected for:
Contractual and Fiscal Data: Stored for a period of 10 years after the termination of the relationship, in compliance with statutory legal and tax obligations (Italian Civil Code).
Navigation Data and Technical Logs: Stored for the time strictly necessary to ensure website security and improve service quality, generally not exceeding 12 months.
Marketing Data (if applicable): Stored until the user withdraws consent or for a maximum of 24-36 months from the last interaction, depending on the specific service activity."
2. User Rights (Data Subject Rights)
"Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following:
Withdraw their consent at any time.
Object to processing of their Data.
Access their Data and obtain a copy.
Verify and seek rectification or the erasure of their Data (Right to be Forgotten).
Receive their Data and have it transferred to another controller (Data Portability)."
3. Right to Lodge a Complaint
"Users have the right to bring a claim before their competent data protection authority. In Italy, the supervisory authority is the Garante per la Protezione dei Dati Personali, located at Piazza Venezia n. 11, 00187, Rome (www.gpdp.it)."
For each processing purpose described in this policy, the applicable legal basis under Article 6 of the EU General Data Protection Regulation (GDPR) is as follows.
Advertising (Google Ads conversion tracking, X Ads conversion tracking): the legal basis is the User's consent (Art. 6(1)(a) GDPR).
Analytics (Google Analytics, Google Analytics 4, Google Analytics Advertising Reporting Features, HubSpot Analytics): the legal basis is the User's consent (Art. 6(1)(a) GDPR).
Contacting the User (Contact form): the legal basis is the legitimate interest of the Owner in responding to enquiries submitted by Users (Art. 6(1)(f) GDPR).
Displaying content from external platforms (Google Fonts, YouTube video widget, YouTube Data API): the legal basis is the User's consent (Art. 6(1)(a) GDPR), given that these services may involve the transfer of personal data to third-party servers.
Managing contacts and sending messages (HubSpot Email): the legal basis is the User's consent (Art. 6(1)(a) GDPR).
Platform services and hosting (Webflow): the legal basis is the legitimate interest of the Owner in operating and maintaining the website (Art. 6(1)(f) GDPR).
Remarketing and behavioral targeting (LinkedIn Website Retargeting): the legal basis is the User's consent (Art. 6(1)(a) GDPR).
Tag Management (Google Tag Manager): the legal basis is the legitimate interest of the Owner in efficiently managing the technical configuration of the website (Art. 6(1)(f) GDPR).
User database management (HubSpot CRM): the legal basis is the legitimate interest of the Owner in managing business contacts and relationships (Art. 6(1)(f) GDPR).
Data Retention by Service
Google Analytics (usage data, trackers): 14 months, as configured in Google Analytics settings.
HubSpot CRM and HubSpot Email (name, email address, company name, phone number): until the contact is deleted or 36 months from the last interaction, whichever comes first.
Contact form (name, email address, company name, phone number): 24 months from the date of submission.
LinkedIn Website Retargeting (trackers): for the duration of the advertising campaign plus 90 days.
Google Ads and X Ads conversion tracking (trackers): for the duration of the advertising campaign plus 90 days.
Webflow hosting (technical logs, usage data): 12 months.
YouTube video widget and YouTube Data API (trackers, usage data): as determined by Google Ireland Limited in accordance with its own retention policies.
Google Tag Manager (trackers): as determined by the individual tags managed through the service.
Additional Data Subject Rights
In addition to the rights listed elsewhere in this policy, Users have the right to restrict processing of their Personal Data (Art. 18 GDPR). In this case, the Owner will not process the Data for any purpose other than storing it, except with the User's consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.
Users also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning them (Art. 22 GDPR). This right does not apply where the automated decision is necessary for entering into or performing a contract, is authorised by EU or Member State law, or is based on the User's explicit consent.
Wonderflow BV — Nieuwezijds Voorburgwal 296-298, 1012 RT Amsterdam, The Netherlands
Owner contact email: security@wonderflow.ai