Privacy Policy
This information is provided in accordance with Articles 13 and 14 of EU Regulation 2016/679 (hereinafter, EU Regulation). This information is valid only for this website and has no value for other websites that may be consulted by the user from links present on our site or on other internet sites.
1. DATA CONTROLLER
In accordance with Articles 4 and 24 of the EU Regulation, the Data Controller is:
YOUEVER S.r.l.
Viale Antonio Gramsci 17/B, 80122 – Napoli (NA)
The list of any Data Controllers can be requested from the Controller.
2. DATA COLLECTED
Among the Personal Data collected by this site, independently or through third parties, there are, for example: cookies, usage data, email, first name and last name.
Personal Data may be entered voluntarily by the user or collected automatically during the use of this Site.
The possible use of cookies – or other tracking tools – by this Site or by the controllers of third-party services used by this Site, unless otherwise indicated, is intended to identify the User and record their preferences for purposes strictly related to the provision of the service requested by the User.
The fact that the User does not provide certain Personal Data could prevent this Site from providing its services.
The User assumes responsibility for third-party Personal Data published or shared via this Site and guarantees having the right to communicate or disseminate them, releasing the Controller from any responsibility towards third parties.
3. METHODS, PURPOSES AND LEGAL BASIS OF PROCESSING
The personal data provided will be processed by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.
Data will be processed on the basis of Articles 6 and 9 of the EU Regulation – legal basis of processing –, in particular when at least one of the following conditions occurs:
- Consent of the data subject;
- Execution of a contract or pre-contractual measures adopted at the request of the data subject;
- Compliance with a legal obligation;
- Safeguarding legitimate interests.
Personal Data is collected and processed to allow the Controller to provide its services, as well as for the following purposes: navigation statistics, contact with the user.
Data is processed exclusively for institutional purposes of the undersigned, i.e., dependent on legal obligations, including the adoption of security measures.
Data may also be processed for marketing and advertising purposes.
4. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS
The personal data you have provided may be communicated to recipients or categories of recipients in order to satisfy the purposes mentioned in the previous point 3. These recipients or categories of recipients will process the data as Data Controllers or Data Processors.
5. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION
The personal data you have provided and which are subject to processing or are intended to be processed after the transfer, may be transferred in full respect by the Data Controller or Data Processor of the conditions provided for in Chapter V of the EU Regulation.
Each data subject may obtain a copy of these conditions by writing an email to the following address:
privacy@youeversrl.com
6. RETENTION PERIOD AND RETENTION CRITERIA
In accordance with what is provided for in Article 13 paragraph 2 letter a) of EU Regulation 2016/679, the personal data you have provided will be kept in a form that allows identification of the data subjects for a period not exceeding the achievement of the purposes for which the personal data were obtained and processed and will finally be destroyed.
7. RIGHTS OF THE DATA SUBJECT
The Data Subject may at any time exercise the rights reserved to them, enshrined in Articles 15 and following of EU Regulation 2016/679. In particular, the data subject has the right to request from the data controller access to personal data and the rectification or erasure of the same or the limitation of the processing of personal data concerning them or to object to their processing, in addition to the right to data portability, to obtain confirmation of the existence or not of personal data concerning them, even if they are not yet recorded and their communication in an intelligible form. If the processing is based on Article 6, paragraph 1, letter a), or on Article 9, paragraph 2, letter a), the Data Subject has the right to withdraw consent at any time without prejudice to the lawfulness of processing based on consent given before withdrawal. The Data Subject has the right to obtain: updating, rectification, or, when there is interest, integration of data; erasure, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed.
The Data Subject also has the right to object in whole or in part: for legitimate reasons to the processing of personal data concerning them, even if they are relevant to the purpose of collection; to the processing of personal data concerning them for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication.
The exercise of these rights can be exercised by writing an email to the following address:
YOUEVER S.r.l.
Viale Antonio Gramsci 17/B, 80122 – Napoli (NA)
E-mail privacy@youeversrl.com
In accordance with what is provided for in Article 15 letter f) of the cited EU Regulation, the Data Subject has the right to lodge a complaint with the Data Protection Authority. In accordance with what is provided for in Article 20 of the same EU Regulation, in case of request for data portability, the Data Controller will provide you with the requested data in a structured, commonly used and machine-readable format.
8. REGULATORY REFERENCES
The complete text of the EU Regulation and the other relevant national legislation in the field of data protection can be consulted on the website of the Authority accessible at the following link www.garanteprivacy.it
9. CHANGES TO THIS DATA PROTECTION INFORMATION
If there are substantial changes regarding the way the Data is processed, we will promptly inform you of such changes.
10. LOCAL MEMORIAL NOTIFICATIONS WITH GEOLOCATION
10.1. Introduction and context
This notice describes the methods of processing personal data carried out by YouEver S.r.l. as part of the local memorial notifications service, based on geofencing functionality and user-configurable notification preferences. Processing takes place in compliance with Regulation (EU) 2016/679 ("GDPR"), Legislative Decree 196/2003 as amended ("Privacy Code"), and the guidelines and measures of the Data Protection Authority.
10.2. Legal basis and impact assessment
The legal basis for processing is the explicit consent of the user pursuant to Art. 6(1)(a) GDPR, given when activating the service, as well as the execution of pre-contractual or contractual measures requested by the data subject pursuant to Art. 6(1)(b) GDPR.
Given the use of geolocation data, a Data Protection Impact Assessment (DPIA) pursuant to Art. 35 GDPR has been carried out, identifying and mitigating potential risks to the rights and freedoms of data subjects. Measures adopted include data minimization, timely anonymization, strict retention limits, encryption, and differentiated access controls.
10.3. Privacy by design and by default
The system has been designed according to the principles of privacy by design and privacy by default (Art. 25 GDPR), processing only the data strictly necessary for service provision and setting by default the most protective options for the user (e.g., minimum geographic radius, reduced notification frequency, 'Do Not Disturb' mode enabled).
10.4. Personal data processed
The platform processes exclusively the following categories of personal data:
- User's geographic coordinates (latitude/longitude) to enable geofencing;
- Notification preferences (search radius, frequency, 'Do Not Disturb' mode);
- Contact data necessary to send notifications (email address or push token).
No special categories of data under Art. 9 GDPR are processed.
10.5. Purpose of processing
The sole purpose of the processing is to inform the user, according to the preferences set, when a new memorial is created near their geographic location. The notifications sent are not commercial or promotional in nature.
10.6. Data retention period
Location coordinates are retained for the time strictly necessary to provide the notification service and in any case for a maximum of 24 hours from the last update, after which they are anonymized or deleted. Contact data and notification preferences are retained until consent is withdrawn or the service is deactivated.
10.7. Security measures
Data are protected by appropriate technical and organizational measures pursuant to Art. 32 GDPR, including:
- Encryption of data in transit and at rest;
- Access limited to authorized personnel with strong authentication;
- Logging and monitoring of access;
- Secure, periodic backups stored in the EU.
10.8. Rights of data subjects
Users may exercise at any time the rights provided by Arts. 15–22 GDPR, including access, rectification, erasure, restriction, portability, and objection. Pursuant to Art. 2-terdecies of the Privacy Code, rights related to the personal data of deceased persons may be exercised by those who have a legitimate interest, act to protect the data subject, or for family reasons worthy of protection, unless otherwise expressed by the deceased.
To exercise rights, you may contact the DPO at the indicated contact details.
10.9. Data Protection Officer (DPO)
YouEver S.r.l. has appointed a Data Protection Officer (DPO) who can be contacted at privacy@youeversrl.com for any information or complaint. The right to contact the Data Protection Authority remains unaffected.
10.10. Updates to this notice
This notice may be updated to reflect regulatory changes or changes in processing methods. In such cases, users will be informed with adequate notice.