Privacy Policy of iubenda Privacy Controls and Cookie Solution

Iubenda Privacy Controls and Cookie Solution collects some Personal Data from its Users.

Personal Data processed for the following purposes and using the following services:

    • Hosting and backend infrastructure

      • Amazon Web Services (AWS) and DigitalOcean

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Traffic optimization and distribution

      • Bunny CDN

        Personal Data: Usage Data

      • Akamai Content Delivery Network

        Personal Data: Trackers; Usage Data

Further information about the processing of Personal Data

    • iubenda as Data Controller

      iubenda processes, as Data Controller, the following access data which is strictly necessary for the technical provision of the service:

      * IP address;
      * Web browser info (User Agent/type of device);
      * Referrer (page viewed by the User) and all the information possibly available on the http header.

      The information outlined above is sent to Bunny CDN which, in turn, forwards it to Akamai CDN. This forwarding is done, in the case of users in the European Union, without transmitting their IP address.

      Further information about Akamai CDN and Bunny CDN can be found in the section "Detailed information on the processing of Personal Data" in the present document.

    • US privacy laws

      The iubenda Privacy Controls and Cookie Solution is also designed to apply some privacy laws across the United States, if the "US State laws" option is activated.
      When accessing a website or app, the solution displays the “Your privacy choices/Notice at collection” widget through which users can manage their privacy rights (Sale of my personal information, Share of my personal information, Processing of my personal information for targeted advertising, and Processing of sensitive personal information categories) and read the Notice at collection.

      The preferences expressed by final users are stored in the Cookie and Consent Preference Log (CPL) and can be retrieved at any time.

      Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA), the category of personal information collected by iubenda through the Privacy Controls and Cookie Solution is: internet information.

      The personal information collected by businesses is processed by iubenda as “service provider” (CCPA) and “processor” (under the Virginia Consumer Data Protection Act of 2023 or VCDPA) for the purpose of ensuring a correct execution of the Privacy Controls and Cookie Solution and its functionalities (“business purpose”).

    • Personal Data retention time

      The information collected through the Privacy Controls and Cookie Solution is not normally retained by iubenda.
      However, if necessary to monitor the service, and the proper functioning thereof, the following access data will be stored for a maximum period of time of 15 days: IP address, Web browser information, Referrer.

    • Appointment of iubenda as Data Processor

      The clients acknowledge and accept that by using the Privacy Controls and Cookie Solution they are engaging iubenda to process Personal Data as “processor” pursuant to the European personal data protection legislation. The conditions of engagement are determined by the Data Processing Agreement.

      Such an agreement, the conclusion of which is required by law, therefore forms an integral and binding part of the contractual relationship between iubenda and its clients.

    • Appointment of iubenda as Service Provider

      The clients acknowledge and accept that by using the Privacy Controls and Cookie Solution they are engaging iubenda to process Personal Data as “service provider” pursuant to the California Consumer Privacy Act. The conditions of engagement are determined by the Service Provider Addendum.

      Such an agreement, the conclusion of which is required by law, therefore forms an integral and binding part of the contractual relationship between iubenda and its clients.

    • Description of the service

      The Privacy Controls and Cookie Solution provided by iubenda allows websites and apps to request and manage consent for the use of cookies and similar technologies and to handle the preferences of US users related to their privacy rights.

      Final users can accept or refuse the installation of cookies and similar technologies or personalize the related consent’s preferences through the banner displayed by the solution upon their first visit to a website or app. If the Cookie and Consent Preference Log (CPL) is enabled, the consent preferences for the installation of cookies and similar technologies expressed by final users are stored in the CPL and can be retrieved at any time.

      When final users navigates on a website/application where the iubenda Privacy Controls and Cookie Solution is installed, a technical cookie is injected which contains the following information, for which iubenda acts as data processor:

      * Cookie Policy id number;
      * consent date and time;
      * consent content (accept/reject);
      * how the consent has been given (banner dismissal, button click etc.).

      Depending on the configuration chosen, such technical cookie can be stored either on the iubenda.com domain (if the option enableRemoteConsent is active), or on the client’s domain (default setting).

      From the above information, iubenda retrieves aggregate counters per day which indicate the number of consents given vs. the totality of the consents requested, including the indication of how the consent is given.

Contact information

    • Owner and Data Controller

      iubenda s.r.l.
      Via San Raffaele, 1 - 20121 Milan (Italy)
      Milan Chamber of Commerce
      EU VAT No: IT07347120961
      UK VAT No: GB 370904694
      SC: 12,603.50 Eur (fully paid up)
      Legal Representative: Andrea Giannangelo

      Owner contact email: info@iubenda.com