Privacy Policy

Information on the processing of personal data

(pursuant to Arts. 13 and 14 of Regulation EU 2016/679 – GDPR)

Last update: March 2026

1. Data Controller

The data controller is:

Widder Italia SRL
Via Ippodromo 61
20151 Milan (MI) – Italy

Email: info@widderlab.com
Privacy email: privacy@widderlab.com

The Data Controller determines the purposes and means of processing personal data collected through this website and through connected digital platforms.

2. Scope of application

This information applies to the processing of personal data carried out via:

• the Widder Lab website;
• le piattaforme software sviluppate da Widder Italia SRL;
• the digital services offered online;
• the platforms ProntoEasy and SocialStream;
• any related services.

3. Types of data processed

During the use of the site or services, various types of personal data may be collected.

Data voluntarily provided by the user

The user can voluntarily provide personal data through:

• contact forms;
• account registration;
• requests for information;
• sending applications;
• use of the platforms.

Among the collected data may be:

• name and surname;
• email address;
• phone number;
• username;
• company data;
• content entered in the services.

Automatically collected usage data

During navigation, technical information may be collected, including:

• IP address;
• browser type;
• operating system;
• date and time of access;
• pages visited;
• visit duration;
• device identifiers;
• approximate geographic location.

This data is mainly used for technical and statistical purposes.

4. Purpose of processing

Personal data may be processed for the following purposes:

Provision of services

To enable the functioning of the website and platforms.

Account management

To allow access to digital services.

Customer support

To respond to user requests or communications.

Legal and fiscal obligations

To comply with legal obligations.

Statistical analysis

To improve the services offered.

Marketing and advertising

Prior user consent.

5. Legal basis for processing

Data processing is based on one of the following conditions:

• user consent;
• performance of a contract or pre-contractual measures;
• compliance with legal obligations;
• pursuit of the legitimate interest of the data controller.

6. Methods of processing

Data is processed using:

• electronic;
• IT;
• telematic;
• manual methods.

The Data Controller adopts appropriate technical and organizational measures to ensure the security of personal data and prevent unauthorized access, disclosures or modifications.

7. Data retention

Personal data is kept for the time necessary to achieve the purposes for which it was collected.

Specifically:

• contract data: up to 10 years for fiscal and accounting obligations;
• marketing data: until consent is revoked;
• technical navigation data: up to 24 months;
• account-related data: for the entire duration of the service.

8. Data communication to third parties

Personal data may be processed by third parties acting on behalf of the Data Controller.

These may include:

• cloud service providers;
• IT infrastructure providers;
• payment platforms;
• marketing services.
• Technical and administrative consultants.

These subjects operate as Data Controllers.

9. Technological Infrastructure Used

For service delivery, the Data Controller may use technological infrastructures from third-party providers, including:

• Amazon Web Services (AWS) for hosting and cloud infrastructures;
• CDN and content distribution services;
• online payment services (e.g., Stripe);
• social media platforms.

10. Data Transfer Outside the EU

Some technological providers may process personal data outside the European Economic Area.

In such cases, the transfer occurs in compliance with the GDPR through:

• Standard Contractual Clauses (SCC) approved by the European Commission;
• adequate security measures.

11. Cookies and Tracking Tools

The website uses cookies and tracking tools to enhance the browsing experience.

Among these, there may be:

• technical cookies;
• statistical cookies;
• marketing cookies.

The full details are available in the Cookie Policy.

12. Meta Pixel

For marketing and conversion analysis purposes, the Meta Pixel provided by Meta Platforms Ireland Ltd. can be used.

The Pixel allows monitoring the effectiveness of advertising campaigns and creating custom audiences.

Processing only occurs after user consent via the cookie banner.

13. User Rights

Users can exercise at any time the rights provided by the GDPR, including:

• right of access to data;
• right to rectification;
• right to erasure;
• right to restrict processing;
• right to data portability;
• right to object to processing.

Requests can be sent to: privacy@widderlab.com.

The Data Controller will respond within 30 days.

14. Complaint to the Data Protection Authority

Users have the right to file a complaint with the Guarantor for the Protection of Personal Data if they believe that the data processing violates current regulations.

15. Changes to the Privacy Policy

The Data Controller reserves the right to modify this privacy notice at any time.

Changes will be published on this page.

Users are encouraged to periodically review the privacy policy.

16. Definitions

Personal data: any information that allows the identification of a physical person.

User: the person using the site or services.

Data Controller: the entity that determines purposes and means of processing.

Data Processor: the entity that processes data on behalf of the controller.