Privacy
policy.

This policy explains how KeyApp Soc. Coop. collects, processes and protects the personal data of people who visit keyapp.it, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Italian Privacy Code).

01Data we collect

We only collect the data strictly needed to provide our services and answer your requests. Specifically:

• Contact data — the name, email and message you choose to enter in the "Let’s talk" form.
• Technical data — IP address, browser type, operating system, pages visited, length of visit.
• Essential cookies — needed for the site to work (session, preferences).
• Optional analytics — if you consent, PostHog collects browsing events to help us improve the site.

02Purposes of processing

Your data is processed only to:

• answer requests sent through the contact form;
• provide and deliver the services you request (Gaudia, Ocarina and related services);
• meet our legal, accounting and tax obligations;
• improve the browsing experience through optional analytics, enabled only with your consent.

03Legal basis

We process data on the basis of:

• Consent of the data subject (Art. 6(1)(a) GDPR) — for contact requests and non-essential cookies;
• Performance of a contract or pre-contractual measures (Art. 6(1)(b)) — for clients;
• Legal obligation (Art. 6(1)(c)) — for regulatory compliance;
• Legitimate interest of the controller (Art. 6(1)(f)) — for IT security and abuse prevention.

04Data retention

Data collected through the contact form is kept for as long as needed to handle your request and, in any case, no longer than 24 months from the last contact. Client data is kept for the duration of the contract and then for 10 years to meet tax obligations. Technical logs are kept for 30 days.

05Recipients of data

Your data is not disclosed publicly, but it may be shared with third parties appointed as data processors under Art. 28 GDPR, including:

• cloud and hosting providers (servers located in the EU);
• form management services (e.g. Formspark);
• optional analytics services (PostHog), enabled only after cookie consent;
• legal and tax advisers, where necessary.

Data is not transferred outside the European Economic Area without appropriate safeguards (e.g. standard contractual clauses approved by the European Commission).

06Your rights

You can exercise the rights set out in Articles 15-22 GDPR at any time, including:

• Access to your personal data;
• Rectification of inaccurate or incomplete data;
• Erasure ("right to be forgotten");
• Restriction of processing;
• Objection to processing;
• Portability of your data;
• Withdrawal of consent at any time;
• Complaint to the Italian Data Protection Authority (garanteprivacy.it).

To exercise these rights, write to info@keyapp.it. We will reply within 30 days.

07Cookies

This site only uses essential cookies, needed for the pages to work properly and to remember your preferences (e.g. the active page, your cookie banner choice). We do not use profiling cookies or third-party tracking tools.

You can withdraw your cookie consent at any time by clearing your browser data. For more information on cookies and how to manage them, check your browser settings.

08Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure: encrypted connections (HTTPS/TLS), regular backups, access limited to authorised staff, and monitoring of security incidents.

09Changes

This policy may be updated to reflect changes in the law or in our services. The current version will always be available on this page, with the date of the latest revision.

10Contact

For any question about how your personal data is processed, email us at info@keyapp.it or use the form in the "Let’s talk" section.