Privacy Policy

Types of Data Collected

Among the Personal Data collected by Geentoo are: Usage Data, first name, last name, email, phone number, date of birth, profession, gender, city, country, Tracking Tools, and other data provided by the user or collected automatically during the use of the service.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the Data is collected. Personal Data can be freely provided by the User or, in the case of Usage Data, collected automatically during the use of Geentoo.

Unless otherwise specified, all Data requested by Geentoo is mandatory. If the User refuses to communicate it, it may be impossible for Geentoo to provide the Service. In cases where Geentoo indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability or operation of the Service.

The possible use of Tracking Tools by Geentoo or the owners of third-party services has the purpose of providing the Service requested by the User and the additional purposes described in this document and in the Cookie Policy.

Method and Place of Processing of the Collected Data

Method of processing

The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization of Geentoo may have access to the Data (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Owner. The updated list of Processors can always be requested from the Data Controller.

Location

The Data is processed at the Owner's operating offices and in any other place where the parties involved in the processing are located. The User's Personal Data may be transferred to a country other than the one in which the User is located. For further information, the User can refer to the section on the details of the processing of Personal Data.

Extra-EU Data Transfers

The Personal Data collected may be transferred to countries outside the European Union. For transfers to the United States, we rely on the adherence of our providers to the EU-US Data Privacy Framework or, in its absence, on the adoption of Standard Contractual Clauses (SCCs) approved by the European Commission, which offer adequate guarantees for data protection.

Retention period

Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to legal obligations (for example, for accounting and tax purposes, for a maximum of 10 years) or based on the consent of the Users.

Purposes of the Processing of the Collected Data

The User's Data is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or executive actions, protect their rights and interests (or those of Users or third parties), identify any malicious or fraudulent activity, as well as for the following purposes: Registration and authentication, Access to accounts on third-party services, User database management, Hosting and backend infrastructure, Statistics, Contacting the User, Advertising, Remarketing and behavioral targeting, Social features, Tag management, and Content and feature performance testing (A/B testing).

For detailed information on the purposes of the processing and the Personal Data processed for each purpose, the User can refer to the "Details on the processing of Personal Data" section.

Additional Information for Users

Legal Basis for Processing

The Owner processes Personal Data relating to the User if one of the following conditions exists:

• the User has given explicit consent for one or more specific purposes (e.g., for non-essential marketing or statistical analysis, via the cookie banner);
• the processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
• the processing is necessary to fulfill a legal obligation to which the Owner is subject;
• the processing is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the Owner;
• the processing is necessary for the pursuit of the legitimate interests of the Owner or a third party.

It is always possible to ask the Owner to clarify the specific legal basis for each processing.

User Rights

Users can exercise certain rights with reference to the Data processed by the Owner. In particular, within the limits provided by law, the User has the right to:

• Withdraw consent at any time;
• Object to the processing of their Data;
• Access their Data to obtain information about the data processed by the Owner and receive a copy of the processed data;
• Verify and request rectification of their Data;
• Obtain the restriction of processing;
• Obtain the erasure or removal of their Personal Data;
• Receive their Data in a structured, commonly used, and machine-readable format or have it transferred to another controller;
• File a complaint with the competent data protection supervisory authority or take legal action.

To exercise their rights, Users can send a request to the contact details indicated in this document or send an email to privacy@geentoo.com.