Privacy Policy

1. Data Controller

The Data Controller is Flowvenue S.r.l., contact email: info@flowvenue.com.

2. Purpose of Processing

Personal data collected through the website and conversational CRM services are processed for the following purposes:

• Provision of requested services (account management, CRM, customer support).
• Service communications and improvement of user experience.
• Direct marketing activities with prior consent.
• Statistical analysis and profiling, if authorized
• Compliance with legal obligations.

3. Legal Basis

Processing is based on:

• Contract performance (Art. 6.1.b GDPR);
• Legal obligations (Art. 6.1.c GDPR);
• Data subject consent (Art. 6.1.a GDPR) for marketing and profiling activities;
• Legitimate interest of the Controller (Art. 6.1.f GDPR), balanced with data subject rights, for security and service improvement purposes.

4. Types of Data

• Identifying data (name, surname, email, phone, company).
• Navigation data (IP addresses, logs, cookies).
• Data related to conversations managed through the CRM platform.
• Special categories of data (Art. 9 GDPR) only if voluntarily provided by the user during service use and processed with enhanced protection measures.
• Identifying data (name, email, phone), navigation data (IP, cookies), CRM conversation data, special categories only if voluntarily provided.

5. Methods and Security

Data is processed using electronic tools and adequate technical-organizational measures (encryption, pseudonymization, access controls) in compliance with privacy by design and by default principles.

6. Retention

Data will be retained for a period not exceeding that necessary to achieve the purposes:

• Contractual data: up to 10 years from relationship termination (civil and tax obligations).
• Marketing data: until consent withdrawal and in any case not beyond 24 months.
• Profiling data: maximum 12 months.

7. Communication and Transfers

Data may be communicated to:

• IT service providers, hosting, cloud providers.
• External consultants and professionals (legal, tax, technical).
• Public authorities in cases provided by law.
• Any transfers to non-EU countries will only be made to subjects with EU Commission adequacy decisions or through Standard Contractual Clauses (Arts. 44-49 GDPR).

8. Data Subject Rights

Users have the right to:

• Access, rectify and delete their data (Arts. 15-17 GDPR).
• Restrict or object to processing (Arts. 18-21 GDPR).
• Request data portability (Art. 20 GDPR).
• Withdraw consent at any time, without prejudice to the lawfulness of processing based on consent given before withdrawal.
• Lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)

9. Profiling

Flowvenue uses conversational CRM systems that may include profiling processes to improve interaction and provide personalized responses. Such processing occurs only with explicit consent and ensuring the user the possibility to request human intervention.

10. DPO

Flowvenue has appointed a Data Protection Officer (DPO), contactable at: dpo@flowvenue.com

11. Updates

This Privacy Policy may be updated at any time to adapt to regulatory changes or services offered. Updated versions will be published on this page with revision date.