Privacy Policy of iubenda Consent Database

Iubenda Consent Database collects some Personal Data from its Users.

Personal Data processed for the following purposes and using the following services:

    • Hosting and backend infrastructure

      • Amazon Web Services (AWS)

        Personal Data: various types of Data as specified in the privacy policy of the service

      • MongoDB Cloud and Scaleway

        Personal Data: Usage Data

    • Traffic optimization and distribution

      • ClouDNS

        Personal Data: Usage Data

Further information about the processing of Personal Data

    • Description of the service

      The Consent Database makes it possible to keep track of Users’ consent activities and to store the information necessary to record evidence of that consent.

      The tool consists of an API and a JavaScript library optimized for this purpose. The JavaScript library can be integrated into sites. Alternatively, it may be accessed by API via HTTPS.

      For each User, the Consent Database allows obtaining the last preferences expressed, proof of their consent, and their full consent history.

      iubenda may process Personal Data related to Users if they are shared by the client with the Consent Database. In this case, it will be the client's duty to specify the nature of the Personal Data processed, within their privacy policy. When using iubenda's JavaScript library, the Personal Data processed are as follows: IP address.

    • Personal Data retention time

      The Personal Data collected are retained until the contract between the client and iubenda has been fully performed.

      Upon termination of the contract, such Personal Data are deleted or returned to the client, subject to compliance with legal obligations that require the retention of Personal Data beyond the termination of the contract, in accordance with the statutory retention periods.

    • Appointment of iubenda as Data Processor

      Clients acknowledge and accept that by using the Consent Database they are engaging iubenda to process Personal Data as “processor” pursuant to the European personal data protection legislation. The conditions of engagement are determined by the Data Processing Agreement.

      Such an agreement, the conclusion of which is required by law, therefore forms an integral and binding part of the contractual relationship between iubenda and its clients.

    • Appointment of iubenda as Service Provider

      Clients acknowledge and accept that by using the Consent Database they are engaging iubenda to process Personal Data as “service provider” pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA). The conditions of engagement are determined by the Service Provider Addendum.

      Such an agreement, the conclusion of which is required by law, therefore forms an integral and binding part of the contractual relationship between iubenda and its clients.

Contact information

    • Owner and Data Controller

      iubenda s.r.l.
      Via San Raffaele, 1 - 20121 Milan (Italy)
      Milan Chamber of Commerce
      EU VAT No: IT07347120961
      UK VAT No: GB 370904694
      SC: 12,603.50 Eur (fully paid up)
      Legal Representative: Andrea Giannangelo

      Owner contact email: info@iubenda.com