Privacy Policy

Data controller

Essensitive S.r.l. – REA MI 2612391 – VAT / Tax ID 11579100964
Via Claudio Monteverdi 18, 20131 Milan, Italy
Email info@essensitive.com

Types of data we collect

The Data Controller does not provide an exhaustive list of Personal Data categories.

Full details are shown in the dedicated sections of this Essensitive Privacy Policy or in specific notices displayed before data are gathered.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Application. Unless otherwise specified, all data requested by this Application are mandatory; failure to provide them may make it impossible to supply the Service. Where data are marked as optional, Users may choose not to communicate them without affecting Service availability.
Any doubts? Please contact the Data Controller.
The use of cookies or other tracking tools by this Application or by third‑party services serves to provide the Service requested by the User and for the other purposes described here and in the Cookie Policy.

Users assume responsibility for any third‑party Personal Data obtained, published or shared through this Application.

Methods and place of processing

Security measures

We apply technical and organisational safeguards to prevent unauthorised access, disclosure, alteration or destruction of Personal Data.

Processing tools

Data are processed by IT and telematic means, strictly related to the stated purposes. In some cases, data may be accessible to internal staff (administration, sales, marketing, legal, system administration) or external parties (technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Processors. An updated list of Processors is always available on request.

Location

Data are processed at the Controller’s operating offices and in any other place where the parties involved are located. They may be transferred to a country other than the User’s. For details see the relevant sections below.

Retention

Unless stated otherwise, Personal Data are kept for as long as required by the purpose for which they were collected and may be stored for a longer period to meet legal obligations or with the User’s consent.

Cookie policy

This Application uses tracking tools. See the Cookie Policy for details.

Legal basis for processing (EU Users)

Legal basis of the processing

The Controller processes Personal Data only when one of the following conditions applies:

• Consent – the User has given consent for one or more specific purposes;
• Contract – processing is necessary for a contract with the User or pre‑contractual obligations;
• Legal obligation – processing is needed to comply with legal duties;
• Public interest – processing is related to a task in the public interest;
• Legitimate interest – processing is necessary for the legitimate interests pursued by the Controller or a third party.

Users may request clarification of the legal basis at any time.

Retention details

• Contract‑related data are kept until the contract is fully performed.
• Data processed under legitimate interest are retained until that interest is satisfied.
• Where processing is based on consent, data are kept until consent is withdrawn.
• The Controller may be obliged to store data longer to comply with a legal obligation or an order from an authority.

When the retention period ends, Personal Data will be deleted and rights such as access, erasure, rectification and portability can no longer be exercised.

GDPR rights of the User

Within the limits of law, Users have the right to:

• Withdraw consent at any time.
• Object to processing based on grounds other than consent.
• Access their data and receive a copy.
• Rectify inaccurate or incomplete data.
• Restrict processing under certain circumstances.
• Erase their data (“right to be forgotten”).
• Port their data to another controller.
• Lodge a complaint with the competent supervisory authority.

Users may also request information on international data transfers and on the safeguards applied.

How to exercise rights

Requests should be sent to the Controller using the contact details above. We respond free of charge within one month. Any rectification, erasure or restriction will be communicated to each recipient unless this proves impossible or involves disproportionate effort.

Additional information

Legal defence – The Controller may use Personal Data in court, or in stages leading to legal action, for defence against misuse of the Application or related Services.

Specific notices – On request, Users may receive additional privacy notices for particular Services.

System logs and maintenance – For operation and maintenance purposes, this Application and any third‑party services may collect system logs (files that record interactions and may contain Personal Data such as IP addresses).

Changes to this Essensitive Privacy Policy – We reserve the right to modify this policy at any time. Updates will be posted on this page and, where technically and legally feasible, notified to Users. Please check this page regularly, referring to the “Last updated” date. Where changes affect processing whose legal basis is consent, we will request new consent if required.

Definitions

• Personal Data – Any information that identifies or makes identifiable a natural person.
• Usage Data – Information collected automatically (e.g., IP address, URI addresses, request time, browser characteristics, pages visited).
• User – The individual using this Application, normally the Data Subject.
• Data Subject – The natural person to whom Personal Data refer.
• Processor – The natural or legal person processing Personal Data on behalf of the Controller.
• Controller – The entity that determines the purposes and means of processing Personal Data.
• Service – The service provided by this Application as described in the relevant terms.
• Application – The hardware or software tool by which Personal Data are collected and processed.
• European Union – All current EU Member States and the European Economic Area unless otherwise specified.

If you require any further information about this Essensitive Privacy Policy, please contact us at info@essensitive.com.