Privacy notice
This document informs natural persons ("Data Subjects") about the processing of their personal data ("Personal Data") collected by the data controller, OllSpark s.r.l. (being incorporated), registered office at Cagliari, Italy, VAT number being assigned, e-mail info@ollspark.com (the "Controller"), through the website www.ollspark.com (the "Application").
Changes and updates become binding as soon as they are published on the Application. If Data Subjects do not accept the changes to this Privacy Notice, they should stop using the Application and may ask the Controller to delete their Personal Data.
1. Categories of Personal Data processed
Personal Data provided voluntarily by the Data Subject:
- Contact data and content of communications: e-mail address and information included in messages sent to info@ollspark.com.
Personal Data collected automatically:
- Technical data: Personal Data generated by the devices, applications, tools and protocols used, such as device information, IP addresses, browser type, Internet service provider. Such data may leave traces that, especially when combined with unique identifiers and other information received by servers, could be used to create profiles of natural persons.
- Browsing and usage data: such as pages visited, number of clicks, actions performed, session duration.
Failure to provide Personal Data required by law or contract, or necessary to enter into a contract with the Controller, will make it impossible for the Controller to establish or continue the relationship. Data Subjects who provide Personal Data of third parties are solely responsible for its origin, collection, processing, communication or disclosure.
2. Cookies and similar technologies
The Application uses cookies, unique identifiers and similar technologies. Cookies other than technical ones, in particular Google Analytics statistics cookies, are set only with consent; without consent Google Analytics works in cookieless mode, as described in the Cookie Policy. The full Cookie Policy is available at https://ollspark.com/en/cookie-policy.
3. Legal basis and purposes
- Performance of a contract or pre-contractual steps with the Data Subject, including replying to e-mail requests;
- Compliance with legal obligations, in particular tax and accounting rules;
- Legitimate interest of the Controller in statistics with anonymous data (aggregate analysis of the hosting service's technical logs, to improve products and services), in statistics through Google Analytics 4 in cookieless mode (signals without cookies or persistent identifiers, used only for aggregate statistics about the website, with the right to object at any time) and in the security of the Application;
- Consent of the Data Subject for statistics through Google Analytics 4 (statistics cookies), enabled only if the "Statistics" category is accepted in the cookie banner; consent can be withdrawn at any time.
Personal Data may also be used by the Controller to defend its rights in court.
4. Processing methods and recipients
Processing is carried out with paper and IT tools, with organisational methods strictly related to the purposes above and appropriate security measures. Personal Data is processed only by: persons authorised by the Controller and bound by confidentiality; independent controllers or processors appointed by the Controller, in particular Google Ireland Limited / Google LLC (Firebase hosting, Cloud Logging technical logs and Google Analytics 4) and Proton AG (e-mail); and parties to whom disclosure is required by law or by order of the authorities. These parties must use appropriate safeguards and may access only the data they need. Personal Data will not be disclosed indiscriminately.
5. Place
Personal Data may be transferred outside the European Economic Area (EEA): to the United States, for Google services (hosting, technical logs and Google Analytics), on the basis of the adequacy decision for the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission; and to Switzerland, for e-mail (Proton AG), a country recognised by the European Commission as adequate.
6. Retention
- Contract-related purposes: for the duration of the relationship and then for the ordinary limitation period of 10 years, or for the duration of any litigation;
- Legitimate interest: until that interest is fulfilled; hosting technical logs are kept for 30 days;
- Legal obligations, orders of authorities and legal defence: for the periods set by those obligations and in any case until the applicable limitation period expires;
- Consent-based purposes: until consent is withdrawn; Google Analytics 4 data, including data collected without cookies, is in any case kept for no longer than 2 months.
At the end of the retention period, Personal Data will be deleted or kept in a form that does not allow identification.
7. Rights of Data Subjects
Data Subjects have the right to: be informed; withdraw consent at any time (for cookies: ); restrict processing; object to processing; access their data; verify and request rectification; obtain erasure; data portability; lodge a complaint with a supervisory authority (in Italy, the Garante per la protezione dei dati personali) and/or take legal action. Requests can be sent to info@ollspark.com and will be handled as soon as possible, in any case within 30 days.
This English version is provided for convenience; in case of discrepancy, the Italian version prevails.