Privacy Policy of www.8flow.agency

Welcome to the privacy policy of www.8flow.agency. This policy will help you understand what data we collect, why we collect it, and what your rights are in relation to it.

Latest update: 28 April 2026

Summary

Data we collect automatically

We automatically collect data from you for example when you visit www.8flow.agency.

  • website
  • Trackers
  • Usage Data
  • answers to questions
  • +22

Trusted third parties help us to process it

How we use them

  • Contacting the User
  • Remarketing and behavioural targeting
  • Spam and bots protection
  • Traffic optimisation and distribution
  • Displaying content from external platforms
  • Advertising
  • Analytics
  • Information collection
  • Heat mapping and session recording
  • Tag management
  • Interaction with live chat platforms
  • Handling activities related to compliance

Data you give to us

We collect the data you give to us for example when you interact with our online chat.

  • email address
  • first name
  • last name
  • phone number
  • +15

Trusted third parties help us to process it

  • this Website
  • Cloudflare, Inc.
  • Google Ireland Limited
  • Meta Platforms, Inc.

How we use them

  • Contacting the User
  • Spam and bots protection
  • Building and running this Website
  • Interaction with live chat platforms

Owner and Data Controller

8 Flow Agency Sagl
Via Marcetto 6
CH-6883 - Novazzano
VAT: CHE-149.733.676
www.8flow.agency

Owner contact email: contatta@8flow.agency

Type of Data we collect

Among the types of Personal Data that this Website collects, by itself or through third parties, there are:

  • email address
  • first name
  • last name
  • phone number
  • country
  • ZIP/Postal code
  • city
  • physical address
  • company name
  • website
  • Trackers
  • Usage Data
  • answers to questions
  • clicks
  • keypress events
  • motion sensor events
  • mouse movements
  • scroll position
  • touch events
  • date of birth
  • profession
  • fax number
  • state
  • county
  • Tax ID
  • number of Users
  • session statistics
  • Universally unique identifier (UUID)
  • session duration
  • scroll-to-page interactions
  • device information
  • interaction events
  • diagnostic events
  • page events
  • layout details
  • positional information
  • Data communicated while using the service
  • user content
  • contents of the email or message
  • profile picture
  • date of the message
  • time the message was sent
  • sender of the message

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.
Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools — by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Website.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following:

  • Contacting the User
  • Remarketing and behavioural targeting
  • Spam and bots protection
  • Traffic optimisation and distribution
  • Displaying content from external platforms
  • Advertising
  • Analytics
  • Information collection
  • Heat mapping and session recording
  • Building and running this Website
  • Tag management
  • Interaction with live chat platforms
  • Handling activities related to compliance

Detailed information on the processing of Personal Data

Advertising

This type of service allows User Data to be utilised for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests. This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below. Some of the services listed below may use Trackers to identify Users or they may use the behavioural retargeting technique, i.e. displaying ads tailored to the User’s interests and behaviour, including those detected outside this Website. For more information, please check the privacy policies of the relevant services. Services of this kind usually allow Users to opt out of such tracking. Users may learn how to opt out of interest-based advertising more generally by visiting the relevant opt-out section in this document.

Meta Platforms, Inc.

Meta ads conversion tracking (Meta pixel)

Company: Meta Platforms, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
Google Ireland Limited

Google Ads conversion tracking

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Ads conversion tracking is an analytics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this Website.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California

Analytics

The services contained in this section enable the Owner to monitor and analyse web traffic and can be used to keep track of User behaviour.

Google Ireland Limited

Google Analytics 4

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: number of Users +3

Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • number of Users
  • session statistics
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
Meta Platforms Ireland Limited

Meta Events Manager

Company: Meta Platforms Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Meta Events Manager is an analytics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner insights into the traffic and interactions on this Website.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California

Building and running this Website

Key components of this Website are built and run directly by the Owner by making use of the software listed below.

this Website

WordPress (self-hosted)

Company: this Website

Personal Data processed: Data communicated while using the service

This Website is built and run by the Owner via a CMS software (Content Management System) called WordPress.

Personal Data processed:
  • Data communicated while using the service
Service provided by:
  • this Website
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sharing in California

Contacting the User

this Website

Mailing list or newsletter

Company: this Website

Personal Data processed: city +9

By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up to this Website or after making a purchase.

Personal Data processed:
  • city
  • company name
  • country
  • email address
  • first name
  • last name
  • phone number
  • physical address
  • website
  • ZIP/Postal code
Service provided by:
  • this Website
Category of Personal Information collected according to the CCPA
  • identifiers
  • commercial information
  • internet information
This processing constitutes:
  • a Sale in the United States

Contact form

Personal Data processed: city +15

By completing the contact form with their information, the User authorises this Website to use these details to respond to the inquiries (like quotes, and any other requests).

Personal Data processed:
  • city
  • company name
  • country
  • county
  • date of birth
  • email address
  • fax number
  • first name
  • last name
  • phone number
  • physical address
  • profession
  • state
  • Tax ID
  • website
  • ZIP/Postal code
Category of Personal Information collected according to the CCPA
  • identifiers
  • commercial information
  • internet information
  • employment related information
This processing constitutes:
  • a Sale in California

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. Such services are often referred to as widgets, which are small elements placed on a website or app. They provide specific information or perform a particular function and often allow for user interaction. This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Google Ireland Limited

Google Fonts

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Fonts is a typeface visualisation service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
Google LLC

Google Maps Widget

Company: Google LLC

Place of processing: United States

Personal Data processed: Trackers +1

Google Maps is a maps visualisation service provided by Google LLC that allows this Website to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
Fonticons, Inc.

Font Awesome

Company: Fonticons, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Font Awesome is a typeface visualisation service provided by Fonticons, Inc. that allows this Website to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
Google Ireland Limited

YouTube Video Widget (Privacy Enhanced Mode)

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +2

YouTube is a video content visualisation service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages. This widget is set up in a way that ensures that YouTube won't store information and cookies about Users on this Website unless they play the video.

Personal Data processed:
  • Trackers
  • Universally unique identifier (UUID)
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • identifiers
  • internet information
This processing constitutes:
  • a Sale in California
Google Ireland Limited

YouTube Video Widget

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

YouTube is a video content visualisation service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California

Handling activities related to compliance

This type of service allows this Website to handle activities related to compliance.

iubenda srl

iubenda Accessibility Widget

Company: iubenda srl

Place of processing: Italy

Personal Data processed: Trackers +1

iubenda Accessibility Widget is a service that helps websites to comply with accessibility standards and is provided by iubenda srl.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information

Heat mapping and session recording

Heat mapping services are used to display the areas of this Website that Users interact with most frequently. This shows where the points of interest are. These services make it possible to monitor and analyse web traffic and keep track of User behaviour. Some of these services may record sessions and make them available for later visual playback.

Microsoft Corporation

Microsoft Clarity

Company: Microsoft Corporation

Place of processing: Switzerland

Personal Data processed: clicks +11

Microsoft Clarity is a session recording and heat mapping service provided by Microsoft Corporation. Microsoft processes or receives Personal Data via Microsoft Clarity, which in turn may be used for any purpose in accordance with the Microsoft Privacy Statement, including improving and providing Microsoft Advertising.

Personal Data processed:
  • clicks
  • device information
  • diagnostic events
  • interaction events
  • layout details
  • mouse movements
  • page events
  • positional information
  • scroll-to-page interactions
  • session duration
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
  • geolocation data
This processing constitutes:
  • a Sale in California

Information collection

this Website

Bitrix CRM (ENG)

Company: this Website

Personal Data processed: Trackers

A. INTRODUCTION
This Website is operated by Bitrix, Inc., a company organized under the laws of the Commonwealth of Virginia, United States of America, and its affiliates (collectively, "Bitrix24"), with a registered address at 901 N. Pitt St, Suite 325 Alexandria VA 22314 United States. Bitrix, Inc and BITRIX24 LIMITED registered at Poseidonos 1, Ledra Business Center, Egkomi, 2406, Nicosia, Cyprus, ("Bitrix 24", "We", "Us" "Our" or "Bitrix") is committed to keeping your information secure and managing it in accordance with our legal responsibilities under the applicable privacy and data protection laws.

This Privacy Policy provides information about how we process personal information through the websites www.bitrix24.eu, www.bitrix24.com, www.bitrix24.de, www.bitrix24.pl, www.bitrix24.it, www.bitrix24.com.tr, www.bitrix24.cn, www.bitrix24.com.br, www.bitrix24.es, www.bitrix24.fr, www.bitrix24.in, www.bitrix24.co, www.bitrix24.mx, www.bitrix24.uk, mailinternetsub.com ("Website"), our mobile apps and our Products and Services.

Upon reading this Privacy Policy, you will be informed regarding the following:

1. What personally identifiable information of yours or third party personally identifiable information is collected from you through the Website as well as through the Products and Services;
2. The organization collecting the information;
3. How the information is and will be used and disclosed;
4. With whom the information may be shared;
5. What choices are available to you regarding collection, use, and distribution of the information and your right;
6. The kind of security procedures that are in place to protect the loss, misuse, or alteration of information under Bitrix24's control; and
7. How you can access and correct any inaccuracies in the information collected about you.

BITRIX24 PRIVACY POLICY IS INCORPORATED AND MADE A PART OF BITRIX24 TERMS OF SERVICE (WWW.BITRIX24.COM/TERMS/). PLEASE READ THIS DOCUMENT CAREFULLY. IT CONTAINS IMPORTANT INFORMATION THAT YOU SHOULD KNOW BEFORE CONTINUING TO USE OUR WEBSITE OR SERVICES. BY CONTINUING TO USE BITRIX24'S WEBSITE AND SERVICES YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.

Your use of the Bitrix24 website and the products and services provided herein, including any dispute concerning privacy, is subject to this privacy statement ("Privacy Policy") and Bitrix24's Terms of Service (https://www.bitrix24.com/terms/) and Bitrix24 Data Processing Agreement (https://www.bitrix24.eu/upload/DPA/BitrixDPA.pdf). By visiting the Bitrix24 Website or using any of its Products and Services (defined below), you agree to your personal information being used and disclosed in the manner set out in this Policy and in Bitrix24's Terms of Service.

You do not have to provide your personal information to us, but if you do not provide certain information it may affect the service we are able to provide to you.

By continuing to use this Website, you agree to us, as data controllers collecting and using your personal information in accordance with this Privacy Policy and for the purposes of properly running the Site and offering our Products and Services to you.

Changes in the Privacy Policy
We reserve the right to update this Privacy Policy from time to time. Please review this policy periodically for changes. If you do not accept the amended Policy, please stop using this Website.

B. COLLECTED INFORMATION
Personally identifiable information We Collect
Most of the Products and Services offered to visitors of the Website require you to register for a user account with Bitrix24 ("User Account"). When registering for a User Account, Bitrix24 will ask you to voluntarily supply Bitrix24 with certain information about yourself by filling out and submitting an online form. Such information may include your name, phone number, credit card or other billing information, email address and home and business postal addresses. The foregoing information is collected and processed by online payment services, including but not limited to merchant accounts services, which we may utilize for payment processing, including automatic subscription renewals. It is completely optional for you to register for a User Account or engage in activities requiring a User Account.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, job title. In some cases we might request you to provide your identity documents.
Contact Data includes billing address, email address and telephone numbers.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Profile Data includes your username and password, purchases or orders made by you, your preferences, feedback and survey responses.
Usage Data includes information about how you use our website, products and services.
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
You never have to answer any questions, and you can decline this exchange of information at any time. However, if you should choose to withhold requested information, we may not be able to provide you with some or all of the Products and Services. Depending upon the activity, some of the information that we ask you to provide is identified as mandatory and some as optional. If you do not provide the mandatory information with respect to a particular activity or purchase, you will not be able to engage in that activity or make such a purchase. Bitrix24 will inform you of the mandatory and/or optional character of the requested and/or required information.

You may be provided an opportunity to subscribe to a periodic newsletter and product updates. This newsletter allows Bitrix24 to inform you of new Products and Services, updates, as well as other news relevant to the company. The subscription service requires you to provide your first and last name, your email address, and other information. Optionally, you are asked to provide the name of the company you represent.

Browsing websites and mail client interactions
When you request a page from our Website or click an url link included in our email, our servers log the information provided in the HTTP request header, JavaScript or similar technical tools, including the IP number, the time of the request, the URL of your request and other information. We collect this information in order to make the Website function correctly and provide you the functionality that you see on the Website. We also use this information to better understand how visitors use the Website and how we can better adjust the Website, its contents, and functionality to meet the needs of our users.

Mobile Apps
When you download, access, and use the App, it may use technology to automatically collect:

Your Usage Details. When you access and use the App, we may automatically collect certain details of your access to and use of the App, including traffic data, logs and other communication data and the resources that you access and use on or through the App.

Device Information. We may collect information about your mobile device and internet connection, including the IP address, operating system, browser type, mobile network information, and the device's telephone number.

Stored Information and Files. The App also may access metadata and other information associated with other files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts, and address book information.

Location Information. When You instruct Bitrix24 to collect your employees location and subject to their explicit consent this App may collect real-time information about the location of your device.

Files
Bitrix24 collects and stores the files you upload, download, or access via the Products and Services offered through the Website. We understand that these files may be confidential or contain sensitive information. Accordingly, Bitrix24 does not share or permit third parties to access such files. However, no password-protected system of data storage and retrieval can be made entirely impenetrable. Although Bixtrix24 uses a number of security technologies and procedures to make sure that the data on the Website is secure, it may be possible for an unauthorized third party to access, view, copy, modify and distribute the data and files you store on the Website or via Products and Services despite Bitrix24's efforts.

Your User Account and Public profile
As described above, you will be given an opportunity to create a User Account containing your personal information. A User Account is required for using most Products and Services offered on the Website.

Your public profile
Once the User Account is created, you may provide additional information to your profile, access, review and update your account information online via the Website.

Providing additional information about yourself beyond what is minimally required for the account creation is entirely up to you. Any information you provide at registration or in your profile section may be used by us as described in our Terms of Use and this Privacy Policy. You can review the personal information you provide to us and make any desired changes to the information you publish at any time by logging in to your account on the Website.

If you wish to deactivate your User Account, you can do so through the User Account interface or by contacting Bitrix24 at privacy@bitrix24.com. When you deactivate your User Account, all information stored and maintained as part of your account will be deleted from our servers, including the files you stored via the Website or its Products and Services.

Information Relating to Children
We do not knowingly collect personal information from children under 16 without the consent of the child's holder of parental responsibility. You must be 16 years old or the age of majority in your jurisdiction in order to use our Website, Products or Services. If you are under 16 years old, you may only use our website with your parent or legal guardian's permission. Parents and Legal Guardians may request from us to review, delete or stop the collection of the personally identifiable information of their child by contacting us by letter (using the address information provided at the bottom of this page) or email to privacy@bitrix24.com.

Securing the Transmission and Storage of Information
Bitrix24 is committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information.

In particular, we use all reasonable endeavours to ensure that appropriate security measures are in place to protect your Personal Data. We apply the security measures foreseen in the applicable regulations as well as our own technical and organizational security measures including policy, governance, procedures, responsibilities, risk assessment; network and subprocessor security.

Bitrix24 operates secure data networks protected by industry standard firewall and password protection systems. Our security and privacy policies are periodically reviewed and enhanced as necessary, and only authorized individuals have access to the information provided by our users. Bitrix24 takes steps to ensure that your information is treated securely and in accordance with this Privacy Policy.

Unfortunately, the transmission of information via the internet is not completely secure and so we cannot guarantee the security of your Personal Data transmitted through the Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We treat the information you provide to us, including the Files, as confidential information; it is, accordingly, subject to our company's security procedures and corporate policies regarding protection and use of confidential information. After personally identifiable information reaches Bitrix24, it is stored on a server with physical and electronic security features as customary in the industry, including utilization of login/password procedures and electronic firewalls designed to block unauthorized access from outside of Bitrix24. Because laws applicable to personal information vary by country, our offices or other business operations may put in place additional measures that vary depending on the applicable legal requirements. Information collected on the sites covered by this Privacy Policy is processed and stored in the United States and possibly other jurisdictions and also in other countries where Bitrix24 and its service providers conduct business. All Bitrix24 employees are obligated by our privacy and security policies. Your information is only accessible to those employees who perform technical support of the service.

If a password is used to help protect your accounts and personal information, it is your responsibility to keep your password confidential. Do not share this information with anyone. If you are sharing a computer with anyone you should always log out before leaving any site or service to protect access to your information from subsequent users.

C. USE AND DISCLOSURE OF INFORMATION
How Your Personal Information Is Used
On Contract Lawful basis

If you subscribe to a service or register a product, for example, such information is used to register your rights, if any, to technical support or other benefits that may be made available to registered users. We also use your personal information for registering you for an account or for a webinar, sending a confirmation e-mail, responding to your requests and helping to process the purchase or service you have selected, communicating with you when you contact a sales consultant or authorized partner, processing, fulfilling, and following up on transactions for our products and services, support, and training, to process any request by you for information or advice, to manage your account and content that you upload, to deal with enquiries, complaints and feedback from you and our partners;

Based on our Legitimate interests

Bitrix24 may use statistical data for statistical analysis, marketing, or similar promotional purposes to help improve our offerings to you, to help diagnose any problems with our server and administer the Website or to improve your browsing experience by personalising the Website;

We reserve the right to send a one-time registration confirmation email, and infrequent service alert messages to users to inform them of specific changes that may impact their ability to use a service they have previously signed up for, regardless of email contact opt-in status.

Based on our Legitimate interests and Your consent

We use your personal information to develop and conduct our business. Some examples of how we use personal information include: improving our products and services; personalizing communications with you; conducting market research; conducting customer surveys; engaging in more targeted, customer-specific advertising; processing.

Bitrix24 collects your information in order to record and support your participation in the activities you select.

Based on your consent, your personal information also may be used to keep you informed about new products, product upgrades, patches, special offers, and other products and services of Bitrix24 and selected third parties if you have consented to receive such communications.

When you create a User Account with Bitrix24 and/or provide your e-mail address and other personal identification information, based on your personal preferences, we may periodically contact you via e-mail and provide information about special offers and promotions that may be of interest to you. These communications will relate to Bitrix24 offers and/or the promotions of select, reputable third parties with whom Bitrix24 has a strategic marketing relationship because they offer products or services that we believe would be of interest to you. We may use a third party e-mail service provider to send e-mails to you. This service provider is prohibited from using your e-mail address for any purpose other than to send Bitrix24 related e-mail. If you do not wish to receive e-mails with updates and information, please unsubscribe by sending email to: unsubscribe@bitrix24.com. In addition, every time you receive an e-mail you will be provided the choice to opt-out of future e-mails by following the instructions provided in the e-mail. You may also opt-out online by updating your User Account as described in the User Account section of this Privacy Policy (above).

Legal obligation

We may hold some of your information for complying with legal requirements and enforcing our website terms of use or otherwise protecting our legal rights.

We also reserve the right to contact you if compelled to do so as part of a legal proceeding or if there has been a violation of any applicable licensing, warranty and purchase agreements.

Bitrix24 is retaining these rights because in limited cases we feel that we may need to contact you as a matter of law or regarding matters that will be important to you. These rights do not allow us to contact you to market a new or existing service if you have asked us not to do so, and issuance of these types of communications is rare.

Disclosure of your personal data to Third Parties
Bitrix24 uses services of third parties, such as e-mail service providers and hosting providers that act as independent contractors on behalf of Bitrix24. We will not share your information with any third parties for the purposes of direct marketing.

We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organization apart from us. They will hold it securely and retain it for the period we instruct.

The data processing consisting in hosting provider services (storage and maintenance of databases containing your personal data, protected by password) is performed on our behalf and under written confidentiality agreements by our authorized data processor Amazon Web Services, (“AWS”), Frankfurt, Germany. As Amazon Web Services (“AWS”) is part of a global organization with local operating companies in a number of countries worldwide.

Bitrix24 may disclose your personally identifiable information if we believe in good faith that we are required to do so in order to comply with applicable law, a subpoena, or other legal process. Bitrix24 may also disclose personally identifiable information when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be violating this Privacy Policy, the terms of your agreements with the Company (such as the Terms of Service) or to protect the safety of our users and the public or under confidentiality and licensing agreements with certain third parties which assist us in developing, operating and maintaining the Website and its content.

Bitrix24 may be required by law enforcement or judicial authorities to provide personally identifiable information to appropriate governmental authorities. If requested by law enforcement or judicial authorities, Bitrix24 will provide this information upon receipt of appropriate documentation. Bitrix24 may also provide information to law enforcement to protect its property and the health and safety of individuals as permitted by statute.

In the event that all or substantially all of Bitrix24's stock and/or all or substantially all assets are transferred or sold to another entity, Bitrix24 may transfer personally identifiable information to the acquiring entity. If, as a result of such a business transition, your personally identifiable information will be used in a materially different manner, you will be given choice consistent with our policy regarding notification of changes.

Where we store your personal data
Data storage geography depending on Bitrix24 domain zone is described in the Bitrix24 Infrastructure, Sub-processors and joint controllers section.

Personal Data obtained via Bitrix24.eu, Bitrix24.de, Bitrix.it, Bitrix24.pl, Bitrix24.uk and Bitrix24.fr domain zones is processed by BITRIX24 LIMITED registered on Republic of Cyprus inside the European Union Economic Area and stored inside the European Union in Frankfurt, Germany by Amazon Web Services data centers, which are fully GDPR compliant.

For more information about data processing activities related to Users registered through the domain names Bitrix24.com, Bitrix24.in, Bitrix24.tr, Bitrix24.cn, Bitrix24.mx, Bitrix24.co please consult Bitrix24 Infrastructure, Sub-processors and joint controllers section.

Bitrix24 may process User Personal Data outside European Union area subject to appropriate safeguards under article 46 GDPR (specifically by the standard data protection clauses adopted by the European Commission in accordance with the examination procedure).

D. YOUR CHOICES, RIGHTS AND PRIVACY-RELATED INQUIRIES AND COMPLAINTS
Choices Available to You
You can always choose whether or not to disclose personally identifiable information and that choice will not prevent you from using the Website. Please note, however, if you should choose to withhold requested information, we may not be able to provide you with some of the services dependent upon the collection of this information and you will be given an opportunity to "opt-in" and make your preference choices for any items that are optional and which are not prerequisite for our rendering such services.

You can choose at any time to opt out of receiving emails from Bitrix24 or from having your personally identifiable information shared with selected companies. If you wish to opt out, you can do so by editing your User Account preferences with respect to e-mail or the sharing of information. If you elect to "opt out" we will not, as applicable, share your personal information with third parties or send you emails. However, we may continue to use your personal information for internal purposes, to enhance your user experience or as necessary to administer the site or comply with applicable law.

California Privacy Rights
We will not share any Personal Data with third-parties for their direct marketing purposes to the extent prohibited by California law. If our practices change, we will do so in accordance with applicable laws and will notify you in advance.


In European Union and some other jurisdictions you may have the following rights concerning our processing of your personal data:

Right to access. You have the right to ask us for copies of your personal information. This right always applies;
Right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies;

Right to erasure. This right is applicable when one of the following applies:

(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) the data subject withdraws consent on which the processing is based or where there is no other legal ground for the processing;
(c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
(d) the personal data have been unlawfully processed;

Right to restriction of processing. When processing is restricted, we will store your personal data, but not further process it;

Right to data portability. Is your right to receive the personal data which you have given to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another controller from the current controller applicable if: The processing is based on consent or on a contract, and the processing is carried out by automated means;

Right to object. You have the right to object to processing (on grounds relating your particular situation) if we process your information in our legitimate interests. The only reasons we will be able to deny your request is if we can show compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of a legal claims or if the processing of data is necessary for the performance of our contract with you;

Right to withdraw your consent at any time in case of any consent-based processing of your personal data without affecting the lawfulness of processing based on consent before your withdrawal; and

Right to lodge a complaint with a supervisory authority.


You may exercise your legal rights by contacting us via email to privacy@bitrix24.com. This request must include at least the following information: the link to your portal and your administrator registration email address.

Bitrix24 takes and addresses its users' privacy concerns with utmost respect and attention. If you believe that there was an instance of non-compliance with this Privacy Policy with regard to your personal information or you have other related inquiries or concerns, you may write or contact Bitrix24 at email: privacy@bitrix24.com.

In your message, please describe in as much detail as possible the nature of your inquiry or the ways in which you believe that the Privacy Policy has not been complied with. We will investigate your inquiry or complaint promptly.

Please note that if you provide Bitrix24 with inconsistent privacy preferences (for example, by indicating on one occasion that third parties may contact you with marketing offers and indicating on another occasion that they may not), Bitrix24 cannot guarantee that your most recent privacy preference will be honored.

You may exercise your legal rights by contacting our representative in European Union Area and Data Protection Officer Elena Riazanova via email to info@quick-gdpr.co.uk.

Cookies and Tracking pixels
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

We use the following cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Choices About cookie usage

You can opt out from any not strictly necessary cookie installation on your first visit of our web sites.

Additionally, you can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.

You may setup your privacy preferences at your Facebook account privacy settings.

You can opt-out of having your site activity available to Google Analytics by installing the Google Analytics opt-out browser add-on:

You may set your browser to block cookies (consult the instructions for your particular browser on how to do this), although doing so may adversely affect your ability to perform certain transactions, use certain functionality and access certain content on our Website.

Bitrix24 Integrations, Third Party Links And Extensions Privacy Statement
1. Introduction. This Privacy Statement describes how the Personal Data is processed under Bitrix24 Third Party integrations, Third Party links and Non-Bitrix Applications.
2. Definitions

2.1 “Bitrix24,” “we,” “us” “our” means Bitrix Inc and its affiliates;
2.2 “Customer”, “You” means the organization that subscribes to the Services and through whom you, the end user of such Services, are provided access to the Bitrix24 Services;
2.3 “Customer Data” means electronic data and information submitted by or for Customer to the Services;
2.4 “Personal data” means any information relating to an identified or identifiable natural person;
2.5 “Services” means products and services that are ordered by our Customers and made available online by Bitrix24 as described in Bitrix24's Terms of Service;
2.6 “Third Party Services” means services that are provided to the Customer by a third party and/or listed on an online directory, catalog or marketplace of applications that interoperate with Bitrix24 Services (“Non-Bitrix Applications”).

3. Limited Use disclosure

Bitrix24 use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. What data is collected?

4.1 Google Services Integrations

If you connect your Bitrix24 account to apps or services provided by other parties, such as Google, certain Customer Data may be collected from your device by Google. This data may be collected automatically through the use of application programming interfaces such as the Google API Services or Gmail's API (OAuth), and may include:

The contents, metadata and related information of emails, Google calendar events and stored files when you choose to sync your App with Gmail, calendar and cloud storage services (Google Drive);
Email addresses of your Inbox and Sent folders, when you choose to sync your Bitrix24 account and Gmail with your device’s address book; and
Customer Data that you send from your Bitrix24 account to Google, or data that you request from any of the Google services, automatically or otherwise. Note that, as a security precaution, if you choose to connect your Bitrix24 account to apps or services provided by Google and you request data from any of the Google services, information that identifies you or your device may also be sent in order to authenticate the request. You can revoke access at any time.
App's use of information received, and App's transfer of information to any other app, from Google APIs will adhere to Google's Limited Use Requirements.
App’s use of information received from Gmail APIs will adhere to Google's Limited Use Requirements.
4.2 Bitrix24 Two-way synchronization:

Two-way synchronization between Bitrix24 and Gmail means that even if you work with emails in Gmail, you’ll have copies of those in Bitrix24 CRM or Webmail. Also, you can send emails directly from inside Bitrix24 using Gmail when this integration is enabled. If you’d like more information about this integration, please see https://helpdesk.bitrix24.com/open/8236675/;
Calendar Two-way synchronization between Bitrix24 and Google Calendars means all events created in Google Calendar are automatically synched with Bitrix24 calendars and vice-versa. If you’d like more information about this integration, please see https://helpdesk.bitrix24.com/open/12506218/;
Google Docs: Google Docs can be used inside Bitrix24 account for viewing and editing documents online. If you’d like more information about this integration, please see https://helpdesk.bitrix24.com/open/2154445/
4.3 In certain countries, for example on the bitrix24.com related websites, Third parties such as Microsoft may collect or receive Personal Data from individuals visiting Our websites in accordance with its privacy policy: https://privacy.microsoft.com/en-us/privacystatement. To access and control this data collection please visit Microsoft opt out page: https://account.microsoft.com/privacy/ad-settings/signedout

5. How Your Personal Information Is Used via the Third party integrations:

5.1 Based on our legitimate interests or as necessary to perform our contract with you, to administer, improve and provide to you our extended integration Services upon your request.

5.2 Legal obligation
We may hold or request some of your information for complying with legal requirements and enforcing our website terms of use or otherwise protecting our legal rights.

In order to comply with the United States and European Union export controls and economic sanctions laws and regulations, including but not limited to, the United States Export Administration Regulations (“EAR”), regulations promulgated by the US Department of the Treasury’s Office of Foreign Assets Control (“OFAC”), and regulations promulgated by the Council of the European Union (“EU”), in certain cases Bitrix24 might request you to provide your identity documentation.

We also reserve the right to contact you if compelled to do so as part of a legal proceeding or if there has been a violation of any applicable licensing, warranty and purchase agreements.

Bitrix24 is retaining these rights because in limited cases we feel that we may need to contact you as a matter of law or regarding matters that will be important to you. These rights do not allow us to contact you to market a new or existing service if you have asked us not to do so, and issuance of these types of communications is rare.

6. Disclosure of your personal data to Third Parties

Bitrix24 is not responsible for the data processing practices of any Third Party Providers. We encourage you to review your Third Party Providers’ respective privacy notices before enabling a Third Party Service integration.

7. Choices Available to You

You can always choose whether or not to disclose personally identifiable information and that choice will not prevent you from using our Services. Please note, however, if you should choose not to make available some of your personal information, we may not be able to provide you with some of the services described in this Integrations, Third Party links and extensions privacy statement.

8. Data Retention

Bitrix24 may retain your Personal Data for a period of time consistent with the original purpose of collection (see the section “4. How Your Personal Information Is Used via the Third party integrations”).

9. Your rights

In European Union and some other jurisdictions you may have the following rights concerning our processing of your personal data:

Right to access. You have the right to ask us for copies of your personal information. This right always applies;

Right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies;


Right to erasure. This right is applicable when one of the following applies:

(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) the data subject withdraws consent on which the processing is based or where there is no other legal ground for the processing;
(c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
(d) the personal data have been unlawfully processed;

Right to restriction of processing. When processing is restricted, we will store your personal data, but not further process it;

Right to data portability. Is your right to receive the personal data which you have given to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another controller from the current controller applicable if: The processing is based on consent or on a contract, and the processing is carried out by automated means;

Right to object. You have the right to object to processing (on grounds relating your particular situation) if we process your information in our legitimate interests. The only reasons we will be able to deny your request is if we can show compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of a legal claims or if the processing of data is necessary for the performance of our contract with you;

Right to withdraw your consent at any time in case of any consent-based processing of your personal data without affecting the lawfulness of processing based on consent before your withdrawal; and

Right to lodge a complaint with a supervisory authority.

Personal Data processed:
  • Trackers
Service provided by:
  • this Website

Interaction with live chat platforms

This type of service allows Users to interact with third-party live chat platforms directly from the pages of this Website, in order to contact and be contacted by this Website‘s support service. If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even if the Users do not actively use the service. Moreover, live chat conversations may be logged.

Meta Platforms, Inc.

WhatsApp Business Chat Widget

Company: Meta Platforms, Inc.

Place of processing: United States

Personal Data processed: answers to questions +11

WhatsApp Business Chat Widget is a service for interacting with the WhatsApp instant messaging app and platform provided by Meta Platforms, Inc.

Personal Data processed:
  • answers to questions
  • contents of the email or message
  • Data communicated while using the service
  • date of the message
  • first name
  • last name
  • phone number
  • profile picture
  • sender of the message
  • time the message was sent
  • Trackers
  • user content
Service provided by:
Category of Personal Information collected according to the CCPA
  • identifiers
  • internet information
  • sensorial information
  • inferred information

Remarketing and behavioural targeting

This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User. This activity is facilitated by tracking Usage Data and by using Trackers to collect information which is then transferred to the partners that manage the remarketing and behavioural targeting activity. Some services offer a remarketing option based on email address lists. Services of this kind usually allow Users to opt out of such tracking. Users may learn how to opt out of interest-based advertising more generally by visiting the relevant opt-out section in this document.

Google Ireland Limited

Google Ads Remarketing

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Ads Remarketing is a remarketing and behavioural targeting service provided by Google Ireland Limited that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.

In order to understand Google's use of Data, consult Google's partner policy.

Users can opt out of Google's use of Trackers for ads personalisation by visiting Google's Ads Settings.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
  • a Sharing in California
Google Ireland Limited

Remarketing with Google Analytics

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Remarketing with Google Analytics is a remarketing and behavioural targeting service provided by Google Ireland Limited that connects the tracking activity performed by Google Analytics and its Trackers with the Google Ads advertising network and the Doubleclick Cookie.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
This processing constitutes:
  • a Sale in California
  • a Sharing in California

Spam and bots protection

This type of service analyses the traffic of this Website, potentially containing Users' Personal Data, with the purpose of filtering it from unwanted parts of traffic, messages and content that are recognised as spam or protecting it from malicious bots activities.

Automattic Inc.

Akismet

Company: Automattic Inc.

Place of processing: United States

Personal Data processed: Usage Data

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data processed:
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
Google Ireland Limited

Google reCAPTCHA

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: answers to questions +8

Google reCAPTCHA is a spam protection service provided by Google Ireland Limited.

Personal Data processed:
  • answers to questions
  • clicks
  • keypress events
  • motion sensor events
  • mouse movements
  • scroll position
  • touch events
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information
  • inferred information

Tag management

This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralised fashion. This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.

Google Ireland Limited

Google Tag Manager

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: Trackers +1

Google Tag Manager is a tag management service provided by Google Ireland Limited.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Category of Personal Information collected according to the CCPA
  • internet information

Traffic optimisation and distribution

This type of service allows this Website to distribute their content using servers located across different countries and to optimise their performance. Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their function is to filter communications between this Website and the User's browser. Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents that may contain Personal Information of the User are transferred.

Cloudflare, Inc.

Cloudflare

Company: Cloudflare, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Cloudflare is a traffic optimisation and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between this Website and the User's browser, while also allowing analytical data from this Website to be collected.

Personal Data processed:
  • Trackers
  • various types of Data as specified in the privacy policy of the service
Service provided by:
Category of Personal Information collected according to the CCPA
  • identifiers
  • internet information
This processing constitutes:
  • a Sale in California

Further Information for Users in the European Union

This section applies to all Users in the European Union, according to the General Data Protection Regulation (the “GDPR”), and, for such Users, supersedes any other possibly divergent or conflicting information contained in the privacy policy. Further details regarding the categories of Data processed, the purposes of processing, the categories of recipients of the Personal Data, if any, and further information about Personal Data can be found in the section titled “Detailed information on the processing of Personal Data” within this document.

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

  • Users have given their consent for one or more specific purposes.
  • provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
  • processing is necessary for compliance with a legal obligation to which the Owner is subject;
  • processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;
  • processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Further information about retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
  • Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to fulfil a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

The rights of Users based on the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following, to the extent permitted by law:

  • Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
  • Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
  • Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
  • Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
  • Restrict the processing of their Data. Users have the right to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
  • Have their Personal Data deleted or otherwise removed. Users have the right to obtain the erasure of their Data from the Owner.
  • Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance.
  • Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or enquire with the Owner using the information provided in the contact section.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time, free of charge and without providing any justification. Where the User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month, providing Users with the information required by law. Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient, if any, to whom the Personal Data has been disclosed unless this proves impossible or involves disproportionate effort. At the Users’ request, the Owner will inform them about those recipients.

Further information for Users in Switzerland

This section applies to Users in Switzerland, and, for such Users, supersedes any other possibly divergent or conflicting information contained in the privacy policy.

Further details regarding the categories of Data processed, the purposes of processing, the categories of recipients of the personal data, if any, the retention period and further information about Personal Data can be found in the section titled “Detailed information on the processing of Personal Data” within this document.

The rights of Users according to the Swiss Federal Act on Data Protection

Users may exercise certain rights regarding their Data within the limits of law, including the following:

  • right of access to Personal Data;
  • right to object to the processing of their Personal Data (which also allows Users to demand that processing of Personal Data be restricted, Personal Data be deleted or destroyed, specific disclosures of Personal Data to third parties be prohibited);
  • right to receive their Personal Data and have it transferred to another controller (data portability);
  • right to ask for incorrect Personal Data to be corrected.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible, providing Users with the information required by law.

Further information for Users in Brazil

This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the entity running this Website and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
This section applies to all Users in Brazil (Users are referred to below, simply as “you”, “your”, “yours”), according to the "Lei Geral de Proteção de Dados" (the "LGPD"), and for such Users, it supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal information“ as it is defined in the LGPD.

The grounds on which we process your personal information

We can process your personal information solely if we have a legal basis for such processing. Legal bases are as follows:

  • your consent to the relevant processing activities;
  • compliance with a legal or regulatory obligation that lies with us;
  • the carrying out of public policies provided in laws or regulations or based on contracts, agreements and similar legal instruments;
  • studies conducted by research entities, preferably carried out on anonymised personal information;
  • the carrying out of a contract and its preliminary procedures, in cases where you are a party to said contract;
  • the exercising of our rights in judicial, administrative or arbitration procedures;
  • protection or physical safety of yourself or a third party;
  • the protection of health – in procedures carried out by health entities or professionals;
  • our legitimate interests, provided that your fundamental rights and liberties do not prevail over such interests; and
  • credit protection.

To find out more about the legal bases, you can contact us at any time using the contact details provided in this document.

Categories of personal information processed

To find out what categories of your personal information are processed, you can read the section titled “Detailed information on the processing of Personal Data” within this document.

Why we process your personal information

To find out why we process your personal information, you can read the sections titled “Detailed information on the processing of Personal Data” and “The purposes of processing” within this document.

Your Brazilian privacy rights, how to file a request and our response to your requests

Your Brazilian privacy rights

You have the right to:

  • obtain confirmation of the existence of processing activities on your personal information;
  • access to your personal information;
  • have incomplete, inaccurate or outdated personal information rectified;
  • obtain the anonymization, blocking or elimination of your unnecessary or excessive personal information, or of information that is not being processed in compliance with the LGPD;
  • obtain information on the possibility to provide or deny your consent and the consequences thereof;
  • obtain information about the third parties with whom we share your personal information;
  • obtain, upon your express request, the portability of your personal information (except for anonymised information) to another service or product provider, provided that our commercial and industrial secrets are safeguarded;
  • obtain the deletion of your personal information being processed if the processing was based upon your consent, unless one or more exceptions provided for in art. 16 of the LGPD apply;
  • revoke your consent at any time;
  • lodge a complaint related to your personal information with the ANPD (the National Data Protection Authority) or with consumer protection bodies;
  • oppose a processing activity in cases where the processing is not carried out in compliance with the provisions of the law;
  • request clear and adequate information regarding the criteria and procedures used for an automated decision; and
  • request the review of decisions made solely on the basis of the automated processing of your personal information, which affect your interests. These include decisions to define your personal, professional, consumer and credit profile, or aspects of your personality.

You will never be discriminated against, or otherwise suffer any sort of detriment, if you exercise your rights.

How to file your request

You can file your express request to exercise your rights free from any charge, at any time, by using the contact details provided in this document, or via your legal representative.

How and when we will respond to your request

We will strive to promptly respond to your requests.
In any case, should it be impossible for us to do so, we’ll make sure to communicate to you the factual or legal reasons that prevent us from immediately, or otherwise ever, complying with your requests. In cases where we are not processing your personal information, we will indicate to you the physical or legal person to whom you should address your requests, if we are in the position to do so.

In the event that you file an access or personal information processing confirmation request, please make sure that you specify whether you’d like your personal information to be delivered in electronic or printed form.
You will also need to let us know whether you want us to answer your request immediately, in which case we will answer in a simplified fashion, or if you need a complete disclosure instead.
In the latter case, we’ll respond within 15 days from the time of your request, providing you with all the information on the origin of your personal information, confirmation on whether or not records exist, any criteria used for the processing and the purposes of the processing, while safeguarding our commercial and industrial secrets.

In the event that you file a rectification, deletion, anonymization or personal information blocking request, we will make sure to immediately communicate your request to other parties with whom we have shared your personal information in order to enable such third parties to also comply with your request – except in cases where such communication is proven impossible or involves disproportionate effort on our side.

Transfer of personal information outside of Brazil permitted by the law

We are allowed to transfer your personal information outside of the Brazilian territory in the following cases:

  • when the transfer is necessary for international legal cooperation between public intelligence, investigation and prosecution bodies, according to the legal means provided by the international law;
  • when the transfer is necessary to protect your life or physical security or those of a third party;
  • when the transfer is authorised by the ANPD;
  • when the transfer results from a commitment undertaken in an international cooperation agreement;
  • when the transfer is necessary for the execution of a public policy or legal attribution of public service;
  • when the transfer is necessary for compliance with a legal or regulatory obligation, the carrying out of a contract or preliminary procedures related to a contract, or the regular exercise of rights in judicial, administrative or arbitration procedures.

Further information for Users in the United States

This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Website and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana.
For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term Personal Information (and Sensitive Personal Information).

Notice at collection

The following Notice at collection provides you with timely notice about the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.
While such categorization of Personal Information is mainly based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.

Identifiers

Sold or Shared

Targeted Advertising

Personal Data processed: Email address; First name; Last name; Phone number + 22

Personal Information collected or disclosed:
  • email address
  • first name
  • last name
  • phone number
  • country
  • ZIP/Postal code
  • city
  • physical address
  • company name
  • website
  • various types of Data as specified in the privacy policy of the service
  • Trackers
  • date of birth
  • profession
  • fax number
  • state
  • county
  • Usage Data
  • Universally unique identifier (UUID)
  • Data communicated while using the service
  • answers to questions
  • user content
  • profile picture
  • date of the message
  • time the message was sent
  • sender of the message
Sensitive Personal Information collected or disclosed

Tax ID, contents of the email or message

Purposes:
  • Contacting the User
  • Traffic optimisation and distribution
  • Displaying content from external platforms
  • Interaction with live chat platforms
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Third-parties:

Cloudflare, Inc., Google Ireland Limited, Meta Platforms, Inc.

Service providers or contractors:

this Website

Commercial information

Sold or Shared

Targeted Advertising

Personal Data processed: Email address; First name; Last name; Phone number + 11

Personal Information collected or disclosed:
  • email address
  • first name
  • last name
  • phone number
  • country
  • ZIP/Postal code
  • city
  • physical address
  • company name
  • website
  • date of birth
  • profession
  • fax number
  • state
  • county
Sensitive Personal Information collected or disclosed

Tax ID

Purposes:
  • Contacting the User
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Service providers or contractors:

this Website

Internet or other electronic network activity information

Sold or Shared

Targeted Advertising

Personal Data processed: Email address; First name; Last name; Phone number + 38

Personal Information collected or disclosed:
  • email address
  • first name
  • last name
  • phone number
  • country
  • ZIP/Postal code
  • city
  • physical address
  • company name
  • website
  • Trackers
  • Usage Data
  • various types of Data as specified in the privacy policy of the service
  • answers to questions
  • clicks
  • keypress events
  • motion sensor events
  • mouse movements
  • scroll position
  • touch events
  • date of birth
  • profession
  • fax number
  • state
  • county
  • number of Users
  • session statistics
  • Universally unique identifier (UUID)
  • session duration
  • scroll-to-page interactions
  • device information
  • interaction events
  • diagnostic events
  • page events
  • layout details
  • positional information
  • Data communicated while using the service
  • user content
  • profile picture
  • date of the message
  • time the message was sent
  • sender of the message
Sensitive Personal Information collected or disclosed

Tax ID, contents of the email or message

Purposes:
  • Contacting the User
  • Remarketing and behavioural targeting
  • Spam and bots protection
  • Traffic optimisation and distribution
  • Displaying content from external platforms
  • Advertising
  • Analytics
  • Heat mapping and session recording
  • Building and running this Website
  • Tag management
  • Interaction with live chat platforms
  • Handling activities related to compliance
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Third-parties:

Google Ireland Limited, Automattic Inc., Cloudflare, Inc., Meta Platforms, Inc., Google LLC, Fonticons, Inc. , Meta Platforms Ireland Limited, Microsoft Corporation, this Website, iubenda srl

Service providers or contractors:

this Website

Inferences drawn from other personal information

Sold or Shared

Targeted Advertising

Personal Data processed: Usage data; Trackers; Answers to questions; Clicks + 14

Personal Information collected or disclosed:
  • Usage Data
  • Trackers
  • answers to questions
  • clicks
  • keypress events
  • motion sensor events
  • mouse movements
  • scroll position
  • touch events
  • first name
  • last name
  • phone number
  • Data communicated while using the service
  • user content
  • profile picture
  • date of the message
  • time the message was sent
  • sender of the message
Sensitive Personal Information collected or disclosed

contents of the email or message

Purposes:
  • Spam and bots protection
  • Interaction with live chat platforms
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Third-parties:

Google Ireland Limited, Meta Platforms, Inc.

Employment related information

Sold or Shared

Targeted Advertising

Personal Data processed: First name; Last name; Date of birth; Phone number + 11

Personal Information collected or disclosed:
  • first name
  • last name
  • date of birth
  • phone number
  • company name
  • profession
  • physical address
  • fax number
  • country
  • state
  • county
  • email address
  • ZIP/Postal code
  • city
  • website
Sensitive Personal Information collected or disclosed

Tax ID

Purposes:
  • Contacting the User
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Geolocation data

Sold or Shared

Targeted Advertising

Personal Data processed: Trackers; Session duration; Scroll-to-page interactions; Clicks + 8

Personal Information collected or disclosed:
  • Trackers
  • session duration
  • scroll-to-page interactions
  • clicks
  • device information
  • Usage Data
  • mouse movements
  • interaction events
  • diagnostic events
  • page events
  • layout details
  • positional information
Purposes:
  • Heat mapping and session recording
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Third-parties:

Microsoft Corporation

Audio, electronic, visual, thermal, olfactory, or similar information

Sold or Shared

Targeted Advertising

Personal Data processed: First name; Last name; Phone number; Data communicated while using the service + 7

Personal Information collected or disclosed:
  • first name
  • last name
  • phone number
  • Data communicated while using the service
  • answers to questions
  • user content
  • profile picture
  • date of the message
  • time the message was sent
  • sender of the message
  • Trackers
Sensitive Personal Information collected or disclosed

contents of the email or message

Purposes:
  • Interaction with live chat platforms
Retention period:

for the time necessary to fulfill the purpose

Sold or Shared:

Yes

Targeted Advertising:

Yes

Third-parties:

Meta Platforms, Inc.

ℹ️ You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy.

To know more about your rights in particular to opt out of certain processing activities and to limit the use of your sensitive personal information (“Limit the Use of My Sensitive Personal Information”) you can refer to the “Your privacy rights under US state laws” section of our privacy policy.

For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.

We won’t process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.

What are the sources of the Personal Information we collect?

We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use this Website.

For example, you directly provide your Personal Information when you submit requests via any forms on this Website. You also provide Personal Information indirectly when you navigate this Website, as Personal Information about you is automatically observed and collected.

Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Website and features thereof.

Your privacy rights under US state laws

You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:

  • the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
  • the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
  • the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
  • the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
  • the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
  • the right to non-discrimination.

Additional rights for Users residing in California

In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have:

  • The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
  • The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.

Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana

In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana you have

  • The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
  • The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer. In Maryland, your Sensitive Personal Information will be collected or processed only if strictly necessary to provide or maintain a specific product or service requested by you.

In Minnesota and Maryland Users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer's personal data

* Note that in some states like Minnesota you have the following specific rights connected to profiling:

  • The right to question the results of the profiling;
  • The right to be informed of the reason that the profiling resulted in the decision; if feasible
  • The right to be informed of what actions the consumer might have taken to secure a different decision and the actions that the consumer might take to secure a different decision in the future;
  • The right to review personal data used in the profiling;
  • If inaccurate, the right to have the data corrected and the profiling decision reevaluated based on the corrected data;

Additional rights for users residing in Utah and Iowa

In addition to the rights listed above common to all Users in the United States, as a User residing in Utah and Iowa, you have:

  • The right to opt out of the processing of your Personal Information for Targeted Advertising;
  • The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.

How to exercise your privacy rights under US state laws

To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.

For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.

If you are an adult, you can make a request on behalf of a child under your parental authority.

How to exercise your rights to opt out

In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on this Website.

If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC”), you are free to do so and we will abide by such request in a frictionless manner.

How and when we are expected to handle your request

We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need.

Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law you may then contact the relevant authority to submit a complaint).

We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive and in all other cases where it is permitted by the applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Website or the related Services.
The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, this Website and any third-party services may collect files that record interaction with this Website (System logs) or use other Personal Data (such as the IP Address) for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Website and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.