Privacy Policy - youmans.ai

01.Data Controller

Youmans AI S.r.l., with registered office in Via Vittor Pisani 20, 20124 Milan (MI), Italy, C.F., P.IVA and registration number in the Register of Companies of MILANO 14376670965, email: privacy@youmans.ai(hereinafter, "Youmans AI" or the "Controller") is the Data Controller.

02.Category of Data being Processed

a) Navigation data

Browsing the Site and accessing related services involve the acquisition of some Data related to navigation, such as, for example, the IP addresses or domain names of the computers used by the user, as the party interested in the processing (hereinafter, the "Data Subject") for the connection to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the computer environment used by the Data Subject. This is information that is not collected to be associated with identified Data Subjects, but which by its very nature could, through processing and association with Data held by third parties, allow such Data Subjects to be identified.

b) Personal Data provided by the Data Subject

The Controller processes Personal Data that the Data Subject provides when registering on the Site, accessing related services, purchasing a Product or interacting with the customer service; these are common Data, identifying Data and contact Data.

c) Cookies

The Site uses so-called cookies, consisting of small text files capable of storing the visit paths on the Site of the Data Subjects (language settings, preferences or login information) through browsers.

For more information on cookies and their use on the Site, check the "Cookie Policy" page.

03.Purpose, legal basis and retention period

The Processing of Data takes place for the purposes of managing the Site, registering on the Site and creating a personal account, as well as for profiling and marketing activities related to the sale of products offered on the Site (the "Products" and each individually intended as the "Product").

a)Site Navigation

The purpose is to allow the Data Subject to browse the Site and access related services, in particular, to obtain anonymous statistical information on the use of the Site and to monitor its correct functioning. The legal basis is the Controller's legitimate interest; the retention period is that necessary to process the Data required for navigation, as specified in the "Cookie Policy".

b)Registration on the Site

The Site allows the Data Subject to register in the Reserved Area to create a personal account. Sections include: i) "Favorites", ii) "My Products", iii) "Profile Settings" and iv) "Change Password". The legal basis is the Data Subject's consent: retention is 24 months from account creation.

c)"Estimation" section

The Site allows the Data Subject to enter their Data in the "Estimation" section to obtain a quote for the buy-out value of their Product by the Controller. The legal basis is the Data Subject's consent: retention is 24 months from registration.

d)Financing Feasibility

The Site allows the Data Subject to enter their Data in the "Financing Feasibility" section to obtain an estimate of possible financing and applicable rates. The legal basis is the Data Subject's consent: retention is 24 months from registration.

e)"Incentives" section

The Site allows the Data Subject to request incentives in relation to the purchase of Products. The legal basis is the Data Subject's consent: retention is 24 months from registration.

f)Contact Request

Various sections allow requesting contact with the Controller, sometimes only providing an email address. The legal basis is the Data Subject's consent: retention is 24 months from when consent was granted.

g)Profiling

The Site may carry out profiling activities for the analysis of preferences and personal interests based on Product booking requests and activities. The legal basis is consent expressed through cookie acceptance: retention is 12 months.

h)Newsletter

The Site offers the possibility to register for the Controller's newsletter and other informative/promotional communications. The legal basis is consent via registration: retention is 24 months.

i)Direct Marketing

Users who have accepted marketing cookies may receive newsletters or promotional communications via automated or traditional tools. The legal basis is consent through marketing cookies: retention is 24 months.

j)Product Booking

The Site offers the possibility to book Products. Payment data is not processed by the Controller, as the Site redirects directly to bank operators. The legal basis is consent: retention is 10 years from the invoice date for legal compliance.

04.Nature of data provision

The provision of Data in fields not marked with an asterisk is optional and its failure to provide it does not affect the obtaining of the requested services; the entry of Data in fields marked with an asterisk is necessary for the provision of the services that the Site offers where entry is requested.

05.Scope of data communication

Data Processing will be based on principles of correctness, lawfulness, transparency, in a suitable way and in compliance with the rules of confidentiality and security.

The Processing of Data is carried out electronically by the Controller and other parties who performs instrumental operations. Data may also be processed by external Processing Managers appropriately instructed pursuant to Articles 28 and 29 of the GDPR.

06.Transfer of Data to Third Countries

Any transfer of Data outside the European Economic Area will take place in the presence of adequacy conditions in the country of transfer or anyway following the signing of agreements with standard contractual clauses approved by the European Commission for Data protection.

07.Social buttons and widgets

Following clicks on social buttons/widgets (such as Facebook, Twitter, Instagram, etc.), the social network may collect Data related to the visitor's Site visit. The Controller does not disseminate or share any personal data with the social network unless provided or shared by the Data Subject spontaneously through clicks.

08.Subject Rights

Data Subjects have the right to access their Personal Data at any time pursuant to arts. 15-22 of the GDPR and exercise the legal rights aimed at verifying the existence of Processing and receiving detailed information.

Support Email

privacy@youmans.ai

Privacy Policy.