Privacy Policy

Here you will find all the legal information on the subscription terms and conditions, the privacy rules and the contract on the processing of your data

Privacy legislation

We confirm our ongoing commitment to keeping data protected and to guaranteeing the greatest transparency about the way it will be processed and kept safe. Your privacy and your security are very important to us and we are committed to guaranteeing high standards of privacy and data security, including compliance with the European Union General Data Protection Regulation (GDPR).

This privacy notice is intended to give greater transparency about the data we process and the kind of control you have over your data. You will also receive information on how this data will be used and what your rights are. We advise you to read this privacy notice to make sure you are fully informed.

To make reading easier we have divided the document into sections according to your relationship with us (member / visitor). The first and the last two sections, however, apply to everyone.

1. The basics

Data controller

The Data Controller is Poppix S.r.l. (“Poppix”), with offices at Piazza Emile Chanoux 28/A, 11100 Aosta, Italy, email info@poppix.it, and we are the operators of the beebeeboard.com platform/website and www.poppix.it

Definitions

Personal Data (or Data): any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

Special Category Data: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, data concerning health or a person's sex life or sexual orientation.

Processing: any operation or set of operations, performed with or without the help of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction.

Data subject: the natural or legal person to whom the personal data refers.

Data Processor (or Processor): the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Data Controller (or Controller): the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and the means of the processing of personal data; where the purposes and the means of such processing are determined by Union or Member State law, the controller or the specific criteria applicable to its designation may be laid down by Union or Member State law.

Authorised Person: a natural person who processes personal data on behalf of the data controller.

Member: any person or entity registered with us to use the services.

Visitor: anyone who visits one of our websites.

2. Privacy for members

This section applies to the personal data we collect and process if you register or are registered for our online services. If you are not a Member, the Visitors section may be the one that best fits you and your data.

Data processed

The IT systems and software procedures that run this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP address; Operating system; Device; Browser; Place of use; Domain name and the addresses of the websites from which access was made; Sections of the platform visited; Time spent on the platform; Idle time; the time of access.

In addition, while using our services you may give us the following personal data: Name, address or other personal identification details; Economic, commercial, financial and insurance activities; Email address; Contact details (telephone number, email, etc.); Password; Username; Business name.

Purposes

These data are collected in order to sell our services and provide appropriate support, as well as to manage customers and meet accounting and tax obligations.

Legal Basis

The legal basis for this processing is the performance of a contract to which the data subject is party, or pre-contractual measures taken at the data subject's request, and the data subject's consent.

Whether providing the data is mandatory or optional

As regards the data we are required to know in order to comply with obligations laid down by laws, by regulations and by EU legislation, or by provisions issued by Authorities empowered to do so by law and by supervisory and control bodies, your failure to provide them will make it impossible to establish or continue the relationship, to the extent that such data are necessary for its performance. As regards the data we are not required to know, we will assess any failure to obtain them case by case, and this will determine the resulting decisions in proportion to the importance to us of the data requested and not provided by you.

Scope of communication or disclosure

Your personal data may be disclosed: a) to parties who may access the data under a provision of law or of EU legislation, within the limits set by law; b) to our consultants, to the extent necessary to carry out their engagement, subject to our letter of engagement imposing a duty of confidentiality and security in processing the data; c) to consultants and self-employed professionals, individually or in association (e.g. bookkeeping); d) to Cloud services; e) to banks and credit institutions.

The data will also be disclosed to the following parties:

  • LiveChat, Inc as supplier of the platform’s support and monitoring service;
  • Amazon, Inc as provider of the cloud storage services;
  • Google, Inc as provider of email and calendar services, as well as cloud storage;
  • Microsoft Corporation as provider of the data collection service for tracking user behaviour;
  • The Rocket Science Group as provider of the service for sending, tracking and backing up the emails sent;
  • Mobile Solution s.r.l. as provider of the delivery service for sms sent by and through BeebeeBoard;
  • OneSignal, Inc as provider of the push notification service;
  • Stripe, Inc as provider of the online payment management service;

In any case, all data recipients are bound to observe the confidentiality required by the GDPR
The data will never be disclosed.

2. Privacy for visitors

This section applies to the personal data we collect and process through our website, including in connection with our marketing activity.

Data processed

The IT systems and software procedures that run this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This category of data includes: IP address; Operating system; Device; Browser; Place of use; Website from which access originates (Referrer-URL); Name and URL of the pages visited; Time spent on the platform; Idle time; Date and time of access.
In addition, when you visit our websites you may give us the following personal data: Name, address or other personal identification details; E-mail address and Contact data (telephone number, e-mail, etc.)

Purposes

This data is collected in order to send informational or promotional material, in line with your marketing preferences, to respond to requests and provide information, to manage the website (ensuring the security and stability of the system) and to improve navigation and the content of our websites.

Legal Basis

The legal basis for this processing is the data subject's consent.

Whether providing the data is mandatory or optional

Apart from what is specified for browsing data, you are free to provide personal data in order to request the newsletter, information material or other communications.
Failure to provide them may make it impossible to obtain what you have requested.

Scope of communication or disclosure

We do not disclose the data we collect.

Your data, however, may be disclosed to the following parties:

  • LiveChat, Inc as supplier of the platform’s support and monitoring service;
  • Amazon, Inc as provider of the cloud storage services;
  • Microsoft Corporation as provider of the data collection service for tracking user behaviour;

In any case, all recipients of the data are bound to respect the confidentiality required by the GDPR and by the current rules on mediation.

3. General information

How data is processed

Personal data are processed by the Data Controller using manual, IT and electronic tools, for specified, explicit and legitimate purposes, in the following ways: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of the data. The Data Controller processes personal data by adopting appropriate security measures designed to prevent unauthorised access, disclosure, modification or destruction of the data.

Place of processing

The data are processed at the Controller's premises and at any other place where the parties involved in the processing are located.

Retention period

We keep personal data for as long as is strictly necessary to carry out the stated purposes, and our retention periods will vary depending on the type of data involved, but in general we will use these criteria to determine the retention period:

Browsing data, if recorded, will be kept for a period of 3 months;
Where legally or contractually necessary, the data will be kept for 10 years;
The data needed to provide our services will be kept for the whole duration of the subscription and in any case for no longer than a maximum of 12 months;
Data needed to send communications for which you have given consent will be kept for 24 months, unless the consent given is withdrawn, which you can do within your account, by clicking the unsubscribe link or by sending us an email to say you no longer wish to receive such communications.

In all other cases personal data will be erased or anonymised, or, where this is not possible (for example because your personal information has been stored in backup archives), kept securely. Such data will not be usable in further processing and will be  erased as soon as possible.

Data transfer outside the EU

Poppix may transfer your personal data to Third Parties located in States outside the European Union or the European Economic Area. In that case, the Controller ensures that adequate safeguards are adopted (adoption of the standard data protection clauses adopted by the Commission) with the foreign company receiving the data.

Existence of automated decision-making

Personal data is processed without the use of automated processes, including profiling.

Right of the Data Subject

  • the right to ask the Data Controller to confirm whether or not personal data concerning them is being processed and, if so, to obtain access to such data;
  • the right to obtain the rectification or erasure of the data and the restriction of processing concerning him or her;
  • the right to object to the processing of the data for reasons connected with your particular situation, save in the cases of mandatory processing expressly provided for by the laws in force;
  • the right, where consent has been given for one or more specific purposes, to withdraw that consent at any time without affecting the lawfulness of processing based on the consent given before its withdrawal;
  • right to lodge a complaint with the Garante per la protezione dei dati personali (Italy's data protection authority);
  • the right to data portability and to request a copy of the data.

You can exercise your rights or request information by sending your request to the Data Controller by PEC (Italy's certified email), recorded delivery or email. To ensure that the rights listed above are exercised by you and not by unauthorised third parties, the Data Controller may ask you to provide any further information needed for that purpose.

4. Data security

All the data you give us is encrypted to the TLS (Transport Layer Security) security standard. TLS is a secure, tested standard, used for example in online banking. You can recognise a protected TLS connection, for example, by the “s” after “http” in the URL shown in the browser (so https: // ..) or by the padlock symbol shown in the browser tab.

In order to avoid accidental or deliberate manipulation of data, partial or complete loss, or its destruction, we adopt adequate technical and organisational security measures, among which the configuration of databases with mirroring stands out (data is always stored in two separate locations). We also update and store data in off-site and online backups.

As for your password, it is stored through a secure encrypted process and is not known to us.

We have no influence over GDPR compliance and data protection, and the related security standards, outside our own website or the services we provide. In those cases, it is you, or the third party you have granted access to your data, who is responsible.

Cookie Policy

We are deeply committed to maintaining the trust and confidence of our Customers/Users, so we believe it is important to explain, as clearly as possible, how and when we use cookies and similar technologies on our website to collect and use your information. Some of the purposes for installing cookies may also require the User's consent, which can be freely withdrawn at any time.

Data controller

The Data Controller is Poppix S.r.l. (“Poppix”), with offices at Piazza Emile Chanoux 28/A, 11100 Aosta, Italy, email info@poppix.it, and we are the operators of the beebeeboard.com platform/website and www.poppix.it

Cookies are unique identifiers, normally made up of small pieces of text or code, that are sent by the website and stored by the internet browser on the user's computer or other device (for example a tablet or a mobile phone).
By default almost all web browsers are set to accept cookies automatically.
Cookies can typically be installed:
directly by the owner and/or manager of the website (so-called first-party cookies);
by processors outside the website visited by the user (so-called third-party cookies). Unless otherwise specified, please note that these cookies fall under the direct and exclusive responsibility of that operator. Further information on privacy and on their use can be found directly on the websites of the respective operators.

Cookies are classified as “Session” or “Persistent.”
The former are cookies that are not stored persistently on the user's computer and are deleted when the browser is closed; they are strictly limited to transmitting the session identifiers needed to allow safe, efficient browsing of the site, avoiding the use of other techniques that could be harmful to the privacy of users' browsing.
The second type are the cookies that stay stored on the computer's hard disk until they expire or are deleted by the users/visitors. Through persistent cookies, visitors who access the site (or any other users of the same computer) are automatically recognised on every visit.

This website uses the following types of cookie, including in combination with each other:
A) First-party cookies

  • Technical/Necessary: these are the cookies needed to transmit communications over an electronic communications network, or cookies strictly necessary for the provider to deliver the service requested by the customer. For these types of cookie the user's prior informed consent is not required.

B) Third-party cookies

  • Statistics: these are the cookies used to collect and analyse statistical information on access to and visits to the website.
  • Google Analytics: a web analytics service provided by Google Inc. that uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with the other services developed by Google.
    Personal Data collected: Cookie and Usage Data.
    Place of processing: United States – Privacy Policy – opt out. Subject adhering to the Privacy Shield.
  • Marketing: this category includes cookies used to display advertising within a site.
    • DoubleClick by Google: is a data collection service that
      tracks the user’s behaviour in relation to adverts
      advertising, to the products and services offered, to measure
      the efficiency of the ads shown or selected and displays ads
      targeted.
      Personal Data collected: Cookie and Usage Data.
      Place of processing: United States – Privacy Policy. Entity adhering to the Privacy Shield.
    • Microsoft Clarity: is a data collection service that
      tracks the user’s behaviour in relation to adverts
      advertising, to the products and services offered, to measure
      the efficiency of the ads shown or selected and displays ads
      targeted.
      Personal Data collected: Cookie and Usage Data.
      Place of processing: United States – Privacy Policy. Entity adhering to the Privacy Shield.
  • Preferences: Preference cookies allow a website to remember information that changes the way the site behaves or looks, such as your preferred language or the region you are in.
    • LiveChat: it is a service that collects publicly accessible social information (email address, gender, company, job title, photo, website URL, physical addresses, etc…) to improve the User's experience.
      Personal Data collected: Cookie and Usage Data.
      Place of processing: United States – Cookie Policy. Subject adhering to the Privacy Shield.
  • Widgets: cookies relating to a user interface whose purpose is to help the user interact with the program itself.
    • LiveChat: is a communication service, by e-mail or through messages inside our products.
      Personal Data collected: Cookie and Usage Data.
      Place of processing: United States – Cookie Policy. Subject adhering to the Privacy Shield.

The user can manage, that is, request the general deactivation or deletion of cookies, by changing the settings of their internet browser and preventing – for example – third parties from installing them. That deactivation, however, may slow down or prevent access to some parts of the site.
Through your browser settings you can also delete cookies installed in the past, including any cookie storing your consent to the installation of cookies by this site.
The settings for managing or disabling cookies can vary depending on the internet browser used, so, for more information on how to carry out these operations, we suggest that the User consult the manual of their device or the “Aiuto” or “Help” function of their internet browser.
Below are the links that explain to Users how to manage or disable cookies in the most common internet browsers:

With reference to cookies installed by third parties, the User can also manage their settings and withdraw consent by visiting the relevant opt-out link (where available), using the flags in the banner, the tools described in the third party's privacy policy or by contacting the third party directly.
Finally, you can visit the website https://www.youronlinechoices.eu/ and refuse certain cookies through the ‘Scegli tu’ (‘Your Ad Choices’) page.

Given the objective complexity of the subject, the User is invited to contact the Controller should they wish to receive any further details.