Privacy Policy

JOPLA FOR YOU – JOPLA PRO

pursuant to European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, relating to the protection of individuals with regard to the processing of personal data (in short “GDPR”)

_{JPL-POL-N1-V1}

For your convenience, we have provided an English translation of this page.
This translation is for informational purposes only, and the definitive version of this page is the Italian version.

Jopla , in the person of its legal representative pro-tempore in the person of its legal representative pro-tempore , as Data Controller personal data collected directly from the data subject, user of the Applications, web and mobile, called “ Jopla Pro ” and “ Jopla For You ” of Jopla S.r.l. (hereinafter: “ App “), in accordance with what is described in the General Conditions relating to the use of applications, provides this information pursuant to article 13, GDPR (in short, “ Disclosure “).

In any case, the logical and physical security of the data and, in general, the confidentiality of the personal data processed will be guaranteed, putting in place all the necessary technical and organizational measures to guarantee their security.

1. Identity and contact details of the Data Controller

Jopla S.r.l. SB
Registered office in via Dante di Nanni, 29
Santarcangelo di Romagna (47822 – RN)
VAT number: 04498150400
privacy @ jopla.it

2. What data we collect and how

While using the Jopla App and Services, we may ask you to provide us with certain personal data or personal information that can be used to identify you, for example via email or online form, via the support function incorporated in the App and in our Services or through another form of inquiry.

This information may include what is necessary for the registration procedure and use of the Services.

(i) Data collected automatically

For the purpose of operating the services offered, the Application during its normal operation will automatically collect some data relating to the user, namely:

data whose transmission is implicit in the use of Internet communication protocols and cellular telephony (so-called log files),

information on the type of device, operating system and IT environment, resolution, application version, mobile device identifiers (such as device ID, advertising ID), language, time zone and IP address (IP addresses or domain names, addresses in URI notation – Uniform Resource Identifier),

technical data relating to requests (time, method, size, status, outcome, etc.),

information about your activity through our Services, such as the date and time you used a service, the features you used, the history of in-app purchases, and the data generated when you use our Services (for example, the profile saved and the data uploaded);

information about you from our third party service provider, which collects this information via tram it and our Services in accordance with their privacy policies. A list of third parties operating on our Services is available below:

AWS
Facebook
Freshworks
MongoDB
Google
Sendbird

Stripe

Twilio

data collected automatically by the Application tools, cookies and similar technologies, such as “SDK” for mobile devices (eg SDK Social Networks), for the proper functioning of the App ;

if you use social sharing to access our Services, any information you provide or authorize to provide to us via Facebook / Google / AppleID. This information may include your user ID and email address in case you wish to contact us for assistance. The information we receive depends on the Services you are using, the terms of service and privacy policy of the social channel, your privacy settings and, if applicable, your friends’ privacy settings. If you are unsure of the information the social channel shares with us, please visit its website to learn more about the privacy practices observed by those social channels. The Application may also request certain data sharing permissions via social networks (eg. Facebook, Google, Apple ID) that allow it to perform actions with the relevant User accounts and to collect information, including personal data, from it. In this case, reference must also be made to the terms of use, permissions, settings and privacy policy of the individual social network.The information we receive from social media and other third parties is stored and used by us in accordance with this Privacy Policy.

information collected automatically such as precise geolocation (latitude and longitude) using information including GPS, Bluetooth or Wi-Fi connections,

other behavioral and professional detailed information aimed at the functionality of the system research of professionals through systems integrated with the Application;The configuration of some features is left to the settings of the individual device and the permissions required by the Application itself . This information is necessary in order to provide the services related to the Application, and failure to collect them would make it impossible to provide the aforementioned services or the partial functioning of the Application.

(ii) Data collected thanks to information directly provided by the user

For the purpose of functioning of the services offered, the Application during its normal operation will require the User to provide certain related data, through a compilation form, banner or other method containing a specific request, namely:

personal account information, such as detailed information, profession, educational qualification, telephone number, postal and e-mail address, photographs, training, diplomas, points of interest, languages spoken, information economic and financial order, information and identification documents, work authorization / permit;

information relating to personal life (lifestyle habits, family situation, work situation);

information relating to payment method with referral to the online payment manager.

The mandatory or optional character of the data to be provided is indicated during the various operations performed through the Application.

(iii) Shared Documents
The User can send some personal documents (such as CVs, Diplomas, Reference Letters, images, etc…), by uploading them to their profile.
In this case, the User grants Jopla the right to memorize the documents and disclose them to third parties in the exercise and compliance with the General Conditions of Use for the purposes indicated below.
The user can decide to delete the transmitted document at any time.

(iv) Publication and/or dissemination of personal data and images
The personal data and images provided by the User may be published and/or disseminated on the Jopla social channels, on the Site or on the App.
In this case, the User will be expressly requested to authorize publication and/or dissemination.
The release of the authorization is always optional and does not affect the provision of the Services.

3. Purpose of the processing for which the personal data are intended and related legal basis

Personal data will be processed:

(i) without obligation of consent for the following purposes:

use of the features of the Application, account registration, service management, subscription management, pro and customer research management, order management, purchases, service monitoring,

customer service management, payment management, customer contact management, voucher management, loyalty programs, vouchers and discounts, management and sharing of documents transmitted by the User;

administrative-accounting management and related obligations (issuing of receipts, invoices, preparation of payments);

complete and correct functioning of the App and compliance with the Conditions of use, internal statistics, business analysis and economic management, software use analysis and satisfaction of products and services.

The above treatments respond respectively to the following legal bases:

fulfillment of a contract or pre-contractual measures, satisfaction of a request from the interested party – condition of lawfulness article 6, letter b) GDPR;

legal obligation to which the Owner – condition of lawfulness article 6, letter c) GDPR – or for the assessment, exercise or defense of a right in court;

pursuit of a legitimate interest of the Owner – condition of lawfulness of article 6, letter f) GDPR

relating to the complete and correct functioning of the App and the pursuit of company policies, direct marketing and customer loyalty, the improvement of company functioning and market surveys , to improve the services provided to its customers.

The provision of data for the purposes referred to in the previous section (i) is mandatory and the lack of data and / or any express refusal to process will make it impossible for the Data Controller to execute the contract or pre-contractual measures, the fulfillment of the obligation with possible non-fulfillment and responsibility of the interested party also to sanctions contemplated by the legal system.

The transmission of files and documents (such as CVs, diplomas, reference letters, images, etc…) is optional.

(ii) with your consent (article 7, GDPR), for the following purposes:

various types of marketing activities, including the promotion of products and services, the sending of promo codes, the distribution of posters and informational and promotional material, invitations, the sending of newsletters and commercial communications via e-mail, sms , push notifications;

various types of profiling activities, including the analysis of behavior for promotional purposes, the creation of lists for promotional purposes, commercial communication and the sending of newsletters, e-mails, text messages, push notifications, the elaboration of profiles for provision of targeted and personalized services for customer needs;

publication and/or dissemination of personal data and images.

The provision of data for the purposes referred to in the previous section (ii) is optional , with the consequence that you may decide not to provide your consent, or to revoke it in any moment, without any consequence on the functionality of the Application.

It is always possible to deactivate the reception of push notifications by deactivating them at the device level through the device settings.

4. Categories of recipients of personal data

For the purposes referred to in the previous paragraph, the personal data you provide may be communicated or made accessible:

1. to employees and collaborators of the Data Controller, in their capacity as employees authorized to process the data (or so-called “persons in charge of processing”);

2. to the developer of the Application, to the developers of Application tools (eg SDK Social Networks), contractual partners of Jopla, who process the data provided by users, as Data Processors;

3. to third parties who carry out outsourced activities on behalf of the Data Controller, in their capacity as Data Processors, including:

service providers for the management of the information system and telecommunications networks and to the company in charge of the management of e-commerce, service providers for the management of the archiving of paper and / or computerized documentation , service providers for the management of customer assistance activities, including through websites (e.g. call centers, help desks, etc.), service providers for the management of commercial communication activities;

banks and credit and insurance institutions for the carrying out of economic activities (payments / collections) and insurance companies;

insurance companies and brokers for the activation of insurance coverage and the management of any claims;

subjects who carry out checks, audits and certifications of the activities carried out by Jopla also in the interest of the customers;

4. to judicial or supervisory authorities, administrations, public bodies and organizations (national and foreign);

The complete and updated list of the data processors is available by written request to privacy@jopla.it.

5. Storage and transfer of personal data abroad

The management and storage of personal data take place in the cloud and on servers located within the European Union owned and / or available to the Data Controller and / or third party companies, duly appointed as Data Processors.

Personal data will not be disseminated.

6. Retention period of personal data

Data category	Period of Conservation
Personal data collected automatically for the use of the App and Jopla Services – Paragraph B Section (i) and (ii)	Linked to the permanent installation of the application and cancellation at the end of their use
Personal documents transmitted directly by the user – Paragraph B section (iii)	Connected to the user’s request and the permanence of application installation and cancellation at the end of their use.
Personal data collected directly by the user for the use of the functionality of the Application, its correct functioning and management of services – Paragraph C section (i)	Linked to the duration of the contractual relationship established and subsequently for the duration of the statutory limitation periods, that is 10 years
Personal data collected directly by the user for marketing and profiling activities – Paragraph C section (ii)	Linked to the time necessary to fulfill the purposes and in any case for a period not exceeding 24 months from the date of issue of consent. The images and photographs are processed and stored for the period of time necessary for the execution of the Services and for the entire duration of any contractual relationship established. From the date of termination of the contractual relationship, they will be automatically canceled and destroyed. Once this retention period has elapsed, the data will be destroyed or made anonymous, or the renewal of consent to their conservation will be required.

7. Exercisable rights

In compliance with the provisions of Chapter III, Section I, GDPR, you can exercise the rights indicated therein and in particular:

Right of access – Obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, receive information relating, in particular, to: purpose of the processing, categories of personal data processed and retention period, recipients to whom they may be communicated (article 15, GDPR),

Right of rectification – Obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (article 16, GDPR),

Right to cancellation – Obtain, without undue delay, the cancellation of personal data concerning you, in the cases provided for by the GDPR (article 17, GDPR),

Right to limitation – Obtain the limitation of processing, in the cases provided for by the GDPR (article 18 , GDPR)

Right to portability – Receive in a structured format ato, in common use and readable by an automatic device, the personal data concerning you, as well as obtaining that the same are transmitted to another holder without impediments, in the cases provided for by the GDPR (article 20, GDPR)

Right to object – Oppose the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing (Article 21, GDPR)

Right to lodge a complaint with the supervisory authority – Propose a complaint to the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM) www.garanteprivacy.it .

You can exercise these rights by simply sending a request via e-mail to the Data Controller’s address privacy@jopla.it .