Privacy Policy

Who is this policy for?

This privacy notice is intended for those using the services provided by the website www.techaway.cloud, specifically:

• Individuals browsing the website, even for consultation purposes only;
• Individuals contacting Cosmobile S.r.l. via the “Contact Us” form;
• Individuals requesting a demo of the software.

Throughout this notice, they will be referred to as the Data Subjects.

Who is responsible for processing the data?

The Data Controller for all processing activities related to the use of the website www.techaway.cloud is COSMOBILE S.R.L. (VAT number 02864441205), an Italian company headquartered in Minerbio (BO), Italy, represented by its legal representative.

For any data processing activities described in this privacy policy, you can contact the Data Controller at:

Via Europa, 6 • 40061 Minerbio (BO) • Italy
Tel: +39 051 6601019

Data processing is conducted by employees and collaborators of the Data Controller, who have been authorized and instructed accordingly.

What data is processed?

For the management of services provided through www.techaway.cloud, the following data is processed:

• IP address, location, and site activity, for website navigation;
• Name and surname, email, device used (mandatory), company, job title, address, phone number (optional) for contacting Cosmobile S.r.l.;
• Name and surname, phone number, email, company, city, job title (mandatory) for requesting a demo of the software;
• Name and surname, email, device used (mandatory), company, job title, address (optional) for subscribing to the newsletter;
• Name, surname, phone number, mobile number, email, company, job title, address (optional) for subscribing to marketing communications via WhatsApp and other communication tools.

Where is the data processed?

The data collected through the website www.techaway.cloud is processed by the Data Controller at its offices in Italy, and by any external parties responsible for administrative, organizational, or technological management—previously appointed as Data Processors—within the European Union.

How is the data processed?

Data is collected directly from the Data Subject via cookies or submitted by the Data Subject through online forms for contacting the company.

Once acquired, the Data Subject’s data is digitally stored in the IT systems of the Data Controller and/or its Data Processors.

For what purposes is the data processed?

The data collected by the Data Controller is used for the following purposes:

• Improving the use of the site and recording usage statistics, as well as profiling the Data Subjects;
• Responding to inquiries submitted by the Data Subject to Cosmobile S.r.l. via www.techaway.cloud for contact or demo requests;
• Subscribing the Data Subject to the newsletter service.

The phone number provided by users will be used for sending marketing communications via WhatsApp or other communication tools. This includes sending promotional offers, service updates, and other relevant information that may be of interest.

What is the legal basis for processing data?

The Data Controller will process the Data Subject’s personal data only when at least one of the following conditions is met:

• Processing is based on the explicit consent of the Data Subject (navigation, contact requests, demo requests, newsletter subscription).

In any case, the Data Subject can always request that the Data Controller clarify the specific legal basis for each processing activity, particularly to determine whether the processing is based on a contract or consent.

If the Data Subject withdraws consent, the Data Controller may continue to process the data for legal obligations and/or its legitimate interest.

How is the data protected?

Cosmobile S.r.l. has implemented specific IT security measures to ensure the availability, integrity, and confidentiality of the data, including access control systems, credential management, and backup systems.

Is it mandatory to provide data?

Providing data is mandatory for fulfilling the Data Subject’s requests, such as contact or demo requests, as well as newsletter subscriptions. Refusal to provide data will prevent the provision of the requested service.

Who is the data shared with?

The collected data may be shared with public and private entities, in compliance with current laws or for organizational, technical, or informational purposes related to the Data Subject’s requests.

For how long is the data processed?

Data collected through the website www.techaway.cloud will be processed only for as long as the purposes for which they were collected persist:

• For website navigation: Data is processed for the duration specified by each cookie.
• For contact requests: Data is processed until the request is fully answered, but for no more than 12 months.
• For demo requests: Data is processed while the demo is active and for a further 12 months to facilitate a potential purchase.
• For newsletter subscriptions: Data is processed until the data subject withdraws their consent.

At the end of each period, the data will be destroyed or anonymized for statistical purposes.

How are data subjects protected?

Data subjects can protect their personal data rights by exercising the rights provided under the current regulations. They may submit a freeform request to the data controller (Cosmobile S.r.l.). The data controller will respond as soon as possible and, in any case, within one month of receiving the request. If more time is needed to fulfill the request, the data controller may extend the response time to a maximum of two months. In such cases, the data controller will inform the data subject of the reasons for the delay.

If the data controller decides not to proceed with the request, they will notify the data subject of their refusal within one month of receiving the request. The data subject then has the right to file a complaint with the relevant supervisory authority in their country or take legal action.

The exercise of the data subject’s rights is free of charge, except in cases where the requests are manifestly unfounded or repetitive, in which case the data controller may charge a fee or refuse to process the request.

Right of Access

Under Article 15 of EU Regulation 2016/679, the data subject has the right to request confirmation from the data controller as to whether their personal data is being processed. The data subject may also request details such as which data is being processed, for what purposes, how long it will be stored, and whether the data has been or will be communicated to other parties, including the identity of those parties and the country in which they are located. Additionally, they may request information on safeguards for data transfers, the right to correct, restrict, or delete the data, and the right to object to processing. The data subject also has the right to file a complaint with a supervisory authority and request details of any automated decision-making processes, including profiling.

The data subject is entitled to receive a free copy of the personal data being processed, provided this does not violate the rights of others. Any additional copies requested may be provided for a fee.

Right to Rectification

Under Article 16 of EU Regulation 2016/679, the data subject has the right to request the correction of inaccurate data. They may also ask to have the processed data supplemented by providing their own statement to this effect.

Right to Erasure (“Right to be Forgotten”)

Under Article 17 of EU Regulation 2016/679, the data subject may request the erasure of personal data collected and processed by Cosmobile S.r.l. in one of the following cases: if the data is no longer necessary for the purposes for which it was collected; if the data subject has withdrawn their consent for processing; if the data subject has objected to processing; if the data has been unlawfully processed; if the data must be erased to comply with a legal obligation to which the data controller is subject; or if the data subject is under the age of 16 and consent has not been given by a person with parental responsibility.

If the data controller has made the data public and is obligated to erase it, they will inform any third parties processing the data of the erasure request, to the extent that this is technically and economically feasible.

Right to Restriction of Processing

Under Article 18 of EU Regulation 2016/679, the data subject can request that the processing of their data be restricted to storage only, with no further actions allowed by the data controller. This can be requested if the data subject disputes the accuracy of the data, for the time necessary for the data controller to verify it; if the processing is unlawful, and the data subject objects to erasure; if the data controller no longer needs the data but must retain it for legal purposes; or if the data subject has objected to processing, for the time necessary to verify the balance between the rights of the data subject and the legitimate interests of the data controller.

Right to Object

Under Article 21 of EU Regulation 2016/679, the data subject may object to processing at any time, for reasons related to their particular situation. This right can be exercised by sending a communication to the data controller when the processing is based on the data controller’s legitimate interest, or when the data is processed for scientific or statistical purposes.

Complaints to the Supervisory Authority

If the data subject believes their personal data is being processed in violation of EU Regulation 2016/679, they have the right to lodge a complaint with the supervisory authority, in accordance with Article 77 of EU Regulation 2016/679. They may choose to file the complaint with the supervisory authority of their country of residence, employment, or where the alleged violation occurred.

In any case, the data subject can also protect their rights through administrative or judicial action in their country.

Right to Withdraw Consent

The data subject may withdraw their consent to data processing at any time by the same means through which consent was given, or by sending a communication to the data controller. Withdrawing consent does not affect the legality of processing carried out before the withdrawal, but it will result in the cessation of ongoing processing and the destruction of the data.

Legislation and References

This information is provided in accordance with EU Regulation 2016/679, Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, and the General Provision of May 8, 2014, issued by the Italian Data Protection Authority (Garante).

This version is effective as of 12.02.2021.