Homizy App - Privacy Policy
Homizy S.p.A. (hereinafter also “Homizy”), acting as Data Controller (the “Controller”), considers compliance with applicable personal data protection laws as a primary objective.
In accordance with Regulation (EU) No. 679/2016 (GDPR) and Italian Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018, we wish to inform you, as a user of the Homizy App and therefore as a data subject (hereinafter the “Data Subject”), about the processing of personal data provided during your interactions with the App.
The processing carried out by the Controller is based on the principles set out by the GDPR, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
1. DATA CONTROLLER AND CONTACT DETAILS
The Data Controller is:
Homizy S.p.A.
Registered office: Via degli Olivetani, 10/12, 20123 – Milan (MI), Italy
Email: info@homizy.com
2. PERSONAL DATA PROCESSED
The Controller processes the following categories of data:
-
Identification and contact data (such as first name, last name, email address, phone number, and residential address) voluntarily provided by the Data Subject while interacting with the App’s features or requesting services offered through it;
-
Usage data, meaning information implicitly related to the use of the App, such as device information, IP address, logs, access times, and interactions with the App. This information is not collected to be associated with identified individuals and is therefore processed anonymously.
-
The Controller does not process special categories of personal data pursuant to Article 9 of the GDPR (i.e., data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation).
Furthermore, no data relating to criminal convictions or offences pursuant to Article 10 of the GDPR is processed.
3. PURPOSES OF DATA PROCESSING
The Controller processes personal data provided by the Data Subject during interactions with the App for the following purposes:
-
To provide, manage, and improve the services offered through the App;
-
To manage bookings, requests, and participation in events or services;
-
To send communications related to services, updates, or relevant information;
-
To ensure the security and technical maintenance of the App.
4. NATURE OF DATA PROVISION, CONSEQUENCES OF REFUSAL, AND LEGAL BASIS
Considering the purposes outlined above, personal data are processed without the explicit consent of the Data Subject, as such processing is necessary for the provision of services and activities requested through the App.
The provision of data for these purposes is therefore mandatory. Failure to provide data, or providing incomplete or inaccurate data, may result in the Controller being unable to perform the requested services.
All personal data are processed on the following legal basis:
-
Article 6(1)(b) GDPR, as processing is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at the Data Subject’s request.
In particular, all data provided through interactions with the App’s features are strictly necessary to manage and fulfill the Data Subject’s requests.
5. METHODS OF DATA PROCESSING
Data processing is carried out using manual, electronic, and telematic tools, following organizational and processing logics strictly related to the purposes for which the data are processed and in any case ensuring the security, integrity, and confidentiality of the data, in compliance with applicable organizational, physical, and logical security measures.
6. DISCLOSURE OF PERSONAL DATA
Personal data may be disclosed to or shared with the following categories of recipients, for the purposes described above:
-
Data processors appointed from time to time;
-
Individuals, companies, or professional firms providing accounting, administrative, legal, tax, financial, or debt recovery assistance to the Controller in connection with the provision of services;
-
Entities necessary for the provision of services (e.g., hosting providers);
-
Entities entrusted with technical maintenance activities (including network and electronic communication system maintenance);
-
Third-party service providers, including international providers, supporting the Controller;
-
Companies and professionals engaged to protect the Controller’s rights;
-
Public authorities or entities where disclosure is required by law, regulation, or authority order, or to prevent and/or detect fraudulent activities or misuse of services;
-
Persons authorized by the Controller to process personal data necessary for activities strictly related to the services, who are bound by confidentiality obligations (e.g., employees or collaborators).
7. DATA RETENTION PERIOD
Personal data will be processed for the entire duration of the relationship with the Controller and thereafter for the period required by applicable laws, or as necessary due to:
-
Specific legal obligations;
-
Orders from public authorities;
-
Accounting obligations;
-
Judicial requirements.
Where no specific retention period is defined, personal data will not be retained for more than 10 years from the termination of the relationship with the Company.
8. DATA SUBJECT’S RIGHTS
At any time, the Data Subject may exercise the following rights:
-
Right of access, to obtain confirmation as to whether personal data are being processed and related information;
-
Right to rectification, to request correction of inaccurate or outdated data;
-
Right to restriction of processing, where applicable under the law;
-
Right to erasure, to request deletion of personal data;
-
Right to object, to request cessation of data processing;
-
Right to lodge a complaint with the supervisory authority.
These rights may be exercised by:
-
Sending an email to info@homizy.com
-
Sending a written request to Homizy S.p.A., Via degli Olivetani, 10/12, 20123 – Milan (MI), Italy
9. COMPLAINT
If the Data Subject believes that the processing of personal data through this App violates the GDPR, they have the right to lodge a complaint with the Italian Data Protection Authority pursuant to Article 77 of the GDPR, or to seek judicial remedies pursuant to Article 79 of the GDPR.