The purpose of this document (hereinafter “Privacy Policy”) is to inform Users about personal data, defined as any information that allows for the identification of a natural person (hereinafter “Personal Data”), collected by the website Website (hereinafter “Application”).
The Data Controller, as identified below, may modify or simply update this Policy, in whole or in part, by informing Users. Changes and updates will be binding as soon as they are published on the Application. The User is therefore invited to read the Privacy Policy at each access to the Application.
In the event of non-acceptance of the changes made to the Privacy Policy, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data.
1. Personal Data collected by the Application
The Controller collects the following types of Personal Data:
A. Content and information voluntarily provided by the User
• Contact details and content: these are the Personal Data that the User voluntarily provides to the Application during its use, such as personal details, contact information, access credentials for the services and/or products provided, personal interests and preferences, and other personal content, etc.
Failure by the User to provide Personal Data, for which there is a legal or contractual obligation, or where it constitutes a necessary requirement for the use of the service or for the conclusion of the contract, will result in the Controller’s inability to provide its services in whole or in part.
The User who communicates Personal Data of third parties to the Controller is directly and exclusively responsible for its origin, collection, processing, communication, or dissemination.
B. Data and content acquired automatically during the use of the Application:
• Technical data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified Users, but by its very nature, it could, through processing and association with Data held by third parties, allow Users to be identified. This category includes IP addresses, or domain names used by Users connecting to the Application, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.
• Usage data: Personal Data relating to the User’s use of the Application may also be collected, such as the pages visited, actions performed, and the features and services used.
• Geolocation data: the Application may collect Personal Data on the User’s location, which may be GNSS data (Global Navigation Satellite System, such as GPS), in addition to data identifying the nearest cell tower, Wi-Fi hotspots, and Bluetooth, communicated when location-based products or features are enabled.
C. Personal data collected through cookies or similar technologies:
The Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect Personal Data on the pages, visited links, and other actions performed when using our services. These are stored to be retransmitted at the next visit by the same User.
The User can view the complete Cookie Policy at the following address: https://dragflowsud.it/cookie-policy/
2. Purposes
The Personal Data collected may be used for the execution of contractual and pre-contractual obligations and for legal obligations, as well as for the following purposes:
• Support and contact with the User: to respond to User requests and assist them in case of problems.
• Communication via live chat: to allow the User to interact with a live chat on the Application.
• External management of payments via credit card, bank transfer, or other instruments: to manage User payments through external platforms that acquire payment data without the Application owner having access.
• Internal management of payments via credit card, bank transfer, or other instruments: to manage payments by acquiring payment data directly from the User.
• Statistics with anonymous data only: to perform statistical analysis based on aggregated data or data that does not allow for the identification of the User.
Personal Data is communicated to https://policies.google.com/privacy?hl=it
• Sending emails or newsletters and mailing list management: to contact the User with emails containing commercial and promotional information related to the Application.
3. Processing methods
The processing of Personal Data is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes.
In some cases, subjects involved in the Controller’s organization (such as personnel management staff, sales staff, system administrators, etc.) or external subjects (such as IT companies, service providers, postal couriers, hosting providers, etc.) may also have access to Personal Data. These subjects may be appointed as Data Processors by the Controller if necessary, and they may access Users’ Personal Data whenever required and will be contractually obligated to keep Personal Data confidential.
The updated list of Processors can be requested via email at dragflowsud@gmail.com
4. Legal basis for processing
The processing of Personal Data relating to the User is based on the following legal grounds:
• the consent provided by the User for one or more specific purposes;
• processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
• processing is necessary to comply with a legal obligation to which the Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
• processing is necessary for the pursuit of the legitimate interest of the Controller or third parties;
• processing is necessary for the pursuit of a vital interest of the Controller or third parties.
It is always possible to request the Controller to clarify the legal basis of each processing activity at dragflowsud@gmail.com
5. Location
Personal Data is processed at the Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Controller at the following email address dragflowsud@gmail.com or at the following postal address: Via Argine dx Annunziata, 97 – 89122 Reggio Calabria.
6. Security measures
Processing is carried out according to methods and with tools suitable to guarantee the security and confidentiality of Personal Data, as the Controller has adopted appropriate technical and organizational measures that guarantee, and allow for the demonstration, that the Processing is carried out in compliance with the relevant legislation.
7. Data retention period
Personal Data will be kept for the period of time necessary to fulfill the purposes for which it was collected.
In particular, Personal Data will be kept for the entire duration of the contractual relationship, for the execution of the related and consequent fulfillments, for compliance with applicable legal and regulatory obligations, as well as for the Controller’s or third parties’ defensive purposes.
If the processing of Personal Data is based on the User’s consent, the Controller may keep the Personal Data until the consent is revoked.
Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.
All Personal Data will be deleted or stored in a form that does not allow for the identification of the User within 30 days from the end of the retention period. Upon expiration of this term, the right of access, deletion, rectification, and the right to portability of Personal Data can no longer be exercised.
8. Automated decision-making processes
All Personal Data collected will not be subject to any automated decision-making process, including profiling, that may produce legal effects for the person or significantly affect them.
9. User Rights
Users may exercise certain rights regarding the Personal Data processed by the Controller. In particular, the User has the right to:
• withdraw consent at any time;
• object to the processing of their Personal Data;
• access their Personal Data;
• verify and request rectification;
• obtain the restriction of processing;
• obtain the deletion of their Personal Data;
• receive their Personal Data or have it transferred to another controller;
• lodge a complaint with the personal data protection supervisory authority and/or take legal action.
To exercise their rights, Users may submit a request using the contact information for the Data Controller provided in this document or by filling out this form:
Requests are made free of charge and processed by the Controller as soon as possible, in any case within 30 days.
10. Data Controller
The Data Controller is DragFlow Sud srl, with registered office in Via Argine dx Annunziata, 97 – 89122 (RC), Tax Code/VAT Number 02751270808, REA 187971, email address dragflowsud@gmail.com.
Last updated: 2026-01-24
