Privacy Policy

1. Data controller

[Company name], registered office at [address], VAT no. [00000000000], email kreon.cf@gmail.com ("Kreon Solutions" or "Controller").

2. Data we process

• Data you provide through the demo request and contact forms: full name, business name and sector, email, phone, approximate number of customers, message content.
• Browsing data: IP address, browser type, pages visited, date and time, collected by the site and hosting provider systems for security and operation.
• Cookies and similar tools: see the Cookie Policy.

The Wallet Cards configurator runs entirely in your browser: the name, colours and logo you enter are not sent to our servers.

3. Purposes and legal bases

• Answering your requests and preparing the demo: pre-contractual measures (Art. 6(1)(b) GDPR).
• Keeping the site secure and preventing abuse: legitimate interest (Art. 6(1)(f) GDPR).
• Usage analytics, if enabled: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Legal obligations: Art. 6(1)(c) GDPR.

4. Retention

Request data is kept for [24 months] from the last contact, unless a contract is entered into. Technical logs for [X days]. [Verify and adjust.]

5. Recipients

Data may be processed by providers acting as processors (Art. 28 GDPR): hosting provider [name], form service [name], email service [name]. Data is never disclosed publicly or sold.

6. Transfers outside the EU

Data is stored on servers in the European Union. [If a provider transfers data outside the EU, state the country and safeguards, e.g. Standard Contractual Clauses or the Data Privacy Framework.]

7. Your rights

You may at any time request access, rectification, erasure, restriction, portability and object to processing (Arts. 15–22 GDPR) by writing to kreon.cf@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Data processed on behalf of merchants (Wallet Cards)

For end-customer data collected through Wallet Cards, Kreon Solutions acts as a processor on behalf of the merchant, who is the controller. [Refer to the specific notice and Art. 28 agreement.]