Privacy & Cookies Policy
Types of Data Collected
Among the Personal Data collected by this Application, either independently or through third parties, there are: email, first name, last name, Cookies, Usage Data, phone number, profession, province, country, ZIP code, date of birth, city, address, company name, website, various types of Data, gender, VAT number, Tax Code, industry, User ID, geographic location, image, "About Me" information, Data communicated during the use of the service, username, Camera Permission, and unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA). Other Personal Data collected may be indicated in other sections of this privacy policy or by specific information texts displayed at the time of Data collection. Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or by specific information texts displayed prior to the data collection. Personal Data may be provided voluntarily by the User, or collected automatically during the use of this Application. Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application specifically states that some Data is optional, Users are free to refrain from communicating such Data without any consequences on the availability or operation of the Service. Users who have doubts about which Data is mandatory are encouraged to contact the Owner. Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, serves to identify the User and remember their preferences for the sole purpose of providing the service required by the User. Failure to provide certain Personal Data may make it impossible for this Application to provide its services. The User assumes responsibility for the Personal Data of third parties published or shared through this Application and declares that they have the right to communicate or disseminate them, releasing the Owner from any liability towards third parties.
Mode and Place of Processing of the Collected Data
Methods of Processing
The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, the Data may be accessible to categories of persons involved in the organization of the site (administrative, sales, marketing, legal, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Data Controller. The updated list of these parties may be requested from the Data Controller at any time.
Legal Basis of Processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
-
The User has given consent for one or more specific purposes; Note: In some jurisdictions, the Data Controller may be allowed to process Personal Data without the User’s consent or any other legal bases specified below, as long as the User does not object (“opt-out”) to such processing. However, this does not apply when the processing of Personal Data is regulated by European legislation concerning the protection of Personal Data;
-
Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations thereof;
-
Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
-
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
-
Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
It is always possible to ask the Data Controller to clarify the specific legal basis that applies to each processing operation and, in particular, to specify whether the processing is based on the law, is provided for by a contract, or is necessary to enter into a contract.
Place
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For more information, contact the Data Controller. The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User can refer to the section containing details on the processing of Personal Data. The User has the right to obtain information regarding the legal basis for Data transfers outside the European Union or to an international organization governed by public international law or constituted by two or more countries, such as the UN, and regarding the security measures taken by the Data Controller to protect the Data. Should any such transfer take place, the User can find out more by checking the relevant sections of this document or by contacting the Data Controller at the contact details provided at the beginning.
Retention Period
Data is processed and stored for the time required for the purposes for which it was collected. Therefore:
-
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
-
Personal Data collected for purposes related to the legitimate interest of the Data Controller shall be retained as long as needed to fulfill such purposes. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User's consent, the Data Controller may retain the Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data shall be deleted. Therefore, the rights of access, erasure, rectification, and the right to data portability can no longer be exercised after the expiration of the retention period.
Purposes of Processing the Collected Data
User Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Access to third-party accounts, Contacting the User, Managing contacts and sending messages, Handling payments, Managing support and contact requests, Hosting and backend infrastructure, Content commenting, Social features, Tag management, Analytics,
Interaction with social networks and external platforms,
Heat mapping and session recording,
Interaction with live chat platforms,
Interaction with support and feedback platforms, Location-based interactions, Permissions for accessing Personal Data on the User's device, SPAM protection, Advertising, Registration and authentication, Remarketing and behavioral targeting, Content and feature performance testing (A/B testing), Data transfer outside the EU, and Displaying content from external platforms. To obtain detailed information on the purposes of the processing and on the Personal Data specifically relevant to each purpose, the User may refer to the relevant sections of this document.
Facebook Permissions Requested by This Application
This Application may request certain Facebook permissions that allow it to perform actions with the User's Facebook account and to retrieve information, including Personal Data, from it. This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook Inc. For more information about the following permissions, refer to the Facebook permissions documentation and Facebook's privacy policy.
Basic Information
The basic information of the User registered on Facebook typically includes the following Data: id, name, picture, gender, and localization language, and, in some cases, the User's “Friends” on Facebook. If the User has made additional Data publicly available, it will also be accessible.
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Access to Third-Party Accounts
This type of service allows this Application to access Data from your accounts on third-party services and perform actions with it. These services are not activated automatically but require the express authorization of the User.
Content Commenting
Commenting services allow Users to make and publish their comments regarding the content of this Application. Depending on the settings chosen by the Data Controller, Users may also leave anonymous comments. If there is an email address among the Personal Data provided by the User, it may be used to send notifications of comments regarding the same content. Users are responsible for the content of their own comments. If a comment system provided by third parties is installed, it may collect traffic data related to the pages where the comment service is installed, even when Users do not use the comment service.
Contacting the User
Mailing List or Newsletter (this Application)
By registering to the mailing list or newsletter, the User’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, related to this Application may be transmitted. The User's email address might also be added to this list as a result of registering to this Application or after making a purchase. Personal Data collected: ZIP code, city, last name, Cookies, date of birth, Usage Data, email address, address, country, first name, phone number, profession, province, company name, and website.
Contact by Phone (this Application)
Users who have provided their phone number may be contacted for commercial or promotional purposes related to this Application, as well as to fulfill support requests. Personal Data collected: phone number.
Contact Form (this Application)
By filling in the contact form with their Data, the User authorizes this Application to use these details to respond to requests for information, quotes, or any other kind of request as indicated by the form’s header. Personal Data collected: ZIP code, city, Tax Code, last name, date of birth, email, User ID, address, country, first name, phone number, VAT number, profession, province, company name, gender, industry, website, and various types of Data.
Managing Contacts and Sending Messages
This type of service allows managing a database of email contacts, phone contacts, or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the User viewed the messages, as well as the User’s interaction with them, such as information about clicks on links included in the messages.
Payment Processing
Payment processing services allow this Application to process payments by credit card, bank transfer, or other means. The data used for payment is acquired directly by the requested payment service provider without being processed in any way by this Application. Some of these services may also allow for the sending of scheduled messages to the User, such as emails containing invoices or notifications concerning the payment.
PayPal (PayPal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments. Personal Data collected: various types of Data as specified in the service's privacy policy. Place of processing: Please refer to PayPal’s privacy policy – Privacy Policy.
Hosting and Backend Infrastructure
This type of service has the purpose of hosting Data and files that enable this Application to function, allow its distribution, and provide a ready-to-use infrastructure to deliver specific functionalities of this Application. Some of these services operate through servers located in different geographical locations, making it difficult to determine the exact location where Personal Data is stored.
Google Cloud Storage (Google Ireland Limited)
Google Cloud Storage is a hosting service provided by Google Ireland Limited. Personal Data collected: various types of Data as specified in the service's privacy policy. Place of processing: Ireland – Privacy Policy. Participant in the Privacy Shield.
Interaction with Live Chat Platforms
This type of service allows Users to interact with live chat platforms managed by third parties, directly from the pages of this Application. This allows the User to contact the support service of this Application or for this Application to contact the User while they are browsing its pages. If a service for interacting with live chat platforms is installed, it may collect Usage Data relating to the pages where the service is installed, even if Users do not actively use the service. Additionally, live chat conversations may be recorded.
Interaction with Social Networks and External Platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this Application. The interactions and information acquired by this Application are always subject to the User’s privacy settings for each social network. If a service allowing interaction with social networks is installed, it may collect traffic data related to the pages where the service is installed, even if Users do not use the service.
Facebook Like Button and Social Widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services that allow interaction with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy. Participant in the Privacy Shield.
PayPal Button and Widget (PayPal Inc.)
The PayPal button and widget are services that allow interaction with the PayPal platform, provided by PayPal Inc. Personal Data collected: Cookies and Usage Data. Place of processing: Please refer to PayPal’s privacy policy – Privacy Policy.
Location-based Interactions Non-continuous Geolocation (this Application)
This Application may collect, use, and share User location data in order to provide location-based services. Most browsers and devices provide tools by default to deny geographic tracking. If the User has expressly authorized this possibility, this Application may receive information about their actual geographic location. The geographic location of the User is determined in a non-continuous manner, either upon specific request by the User or when the User does not indicate their current location in the appropriate field and allows the application to detect the location automatically. Personal Data collected: geographic location.
SPAM Protection
This type of service analyzes the traffic of this Application, potentially containing Users’ Personal Data, with the purpose of filtering it from parts of traffic, messages, and content recognized as SPAM.
Google reCAPTCHA (Google Ireland Limited)
Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited. The use of the reCAPTCHA system is subject to Google’s privacy policy and terms of use. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy. Participant in the Privacy Shield.
Registration and Authentication
By registering or authenticating, the User allows this Application to identify them and give them access to dedicated services. Depending on what is described below, third parties may provide registration and authentication services. In such cases, this Application will be able to access some Data, stored by these third-party services, for registration or identification purposes.
Log In with PayPal (PayPal Inc.)
Log In with PayPal is a registration and authentication service provided by PayPal Inc. and connected to the PayPal network. Personal Data collected: various types of Data as specified in the service’s privacy policy. Place of processing: Please refer to PayPal’s privacy policy – Privacy Policy.
Analytics
The services contained in this section enable the Data Controller to monitor and analyze web traffic and can be used to keep track of User behavior.
Wix Stats
Wix provides a statistics service that analyzes and displays personal data of users who visit websites. Personal Data collected: Cookies and Usage Data. Place of processing: United States. Participant in the Privacy Shield.
Data Transfer Outside the EU
The Data Controller may transfer Personal Data collected within the EU to third countries (i.e., any countries not part of the EU) only in accordance with a specific legal basis. Therefore, such Data transfers are performed according to one of the legal bases described below. The User can inquire with the Data Controller regarding the applicable legal basis for each specific service.
Transfer to Third Countries Based on Standard Contractual Clauses (this Application)
When this is the legal basis, the transfer of Personal Data from the EU to third countries is carried out based on standard contractual clauses for the protection of Personal Data adopted by the European Commission. In such cases, the recipients of the Data have agreed to process the Personal Data in compliance with the protection levels required by the legislation. Users can request further information by contacting the Data Controller at the contact details provided in this document.
Transfer to Third Countries Based on Consent (this Application)
When this is the legal basis, the transfer of Personal Data from the EU to third countries occurs only when the User has expressly consented to such transfer after being informed of the risks due to the absence of an adequacy decision and the adequate safeguards adopted. In such cases, the Data Controller informs the Users and collects their consent through this Application. Personal Data collected: various types of Data.
Transfer of Data to Countries that Guarantee European Standards (this Application)
When this is the legal basis, the transfer of Personal Data from the EU to third countries is based on an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions concerning specific third countries that it considers to provide a level of protection of Personal Data comparable to that set out in European legislation on Personal Data protection. The User can view the updated list of adequacy decisions on the European Commission's website. Personal Data collected: various types of Data.
Transfer of Data from the EU and/or Switzerland to the United States Based on the Privacy Shield (this Application)
When this is the legal basis, the transfer of Personal Data from the EU or Switzerland to the United States occurs based on the EU–US Privacy Shield or the Swiss–US Privacy Shield agreement. In particular, the Personal Data is transferred to entities that have self-certified under the Privacy Shield framework, thereby ensuring an adequate level of protection for the transferred Data. The services involved in the Data transfer are listed in the respective sections of this document. Among them, those that adhere to the Privacy Shield can be identified by consulting the relevant privacy policy or verifying their status on the official Privacy Shield list. The rights of Users under the Privacy Shield are described in an always updated form on the website of the US Department of Commerce. The transfer of Personal Data from the EU or Switzerland to the United States to entities not (or no longer) registered under the Privacy Shield is permissible only based on another valid legal basis. Users can inquire with the Data Controller regarding such legal bases. Personal Data collected: various types of Data.
Displaying Content from External Platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them. If such a service is installed, it may collect web traffic data related to the pages where the service is installed, even if Users do not actively use the service.
Google Fonts (Google Ireland Limited)
Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Application to incorporate content of this kind on its pages. Personal Data collected: Usage Data and various types of Data as specified in the service’s privacy policy. Place of processing: United States – Privacy Policy. Participant in the Privacy Shield.
User Data Analysis and Profiling
The Data Controller may process usage data collected through this Application to create or update User profiles. This type of processing allows the Data Controller to evaluate User choices, preferences, and behavior for the purposes specified in the respective sections of this document.
User profiles may also be created through automated tools, such as algorithms, which may also be offered by third parties. To obtain further information about profiling activity, the User can refer to the respective sections of this document. The User has the right to object to this profiling activity at any time. To learn more about the User’s rights and how to exercise them, the User can refer to the relevant section of this document.
Personal Data Collected from Sources Other Than the User
The Data Controller of this Application may have legitimately collected Personal Data relating to the User without their involvement, by drawing on sources provided by third parties, in compliance with the legal bases described in the section on the legal basis for processing. If the Data Controller has collected Personal Data in this way, the User may find specific information regarding the sources in the respective sections of this document or by contacting the Data Controller.
Sale of Goods and Services Online
The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to finalize the payment can include the credit card details, the account used for the bank transfer, or other payment instruments provided. The payment data collected by this Application depends on the payment system used.
User Rights
Users may exercise certain rights regarding their Data processed by the Data Controller. In particular, Users have the right to:
-
Withdraw their consent at any time. Users have the right to withdraw their consent where they have previously given their consent to the processing of their Personal Data.
-
Object to the processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
-
Access their Data. Users have the right to learn if Data is being processed by the Data Controller, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
-
Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
-
Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Data Controller will not process their Data for any purpose other than storing it.
-
Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Data Controller.
-
Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract in which the User is involved, or on pre-contractual obligations thereof.
-
Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.
Details About the Right to Object
When Personal Data is processed for a public interest, in the exercise of an official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing by providing a ground related to their particular situation to justify the objection. Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn whether the Data Controller is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to Exercise These Rights
Any requests to exercise User rights can be directed to the Data Controller through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Data Controller as early as possible and always within one month.
Further Information About Personal Data Sale of Goods and Services Online
The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to finalize the payment may include the credit card details, the account used for the bank transfer, or other payment instruments provided. The payment data collected by this Application depends on the payment system used.
Further Information About Data Processing
Legal Defense
The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages leading to possible legal action arising from improper use of this Application or the related services. The User declares to be aware that the Data Controller may be required to reveal Personal Data upon request of public authorities.
Specific Information
Upon the User's request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific services or the collection and processing of Personal Data.
System Logs and Maintenance
For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
Information Not Contained in This Policy
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.
Exercising the Rights of Users
Users have the right to obtain confirmation at any time as to whether or not Personal Data concerning them is being processed by the Data Controller, to know its content and origin, to verify its accuracy, or to ask for it to be supplemented, deleted, updated, corrected, transformed into an anonymous format, or to block any data held in violation of the law, as well as to oppose its processing for any legitimate reasons. Requests should be sent to the Data Controller. For any requests regarding the processing of your data on stockmarketstatistic.com, please write to info@stockmarketstatistic.com. This Application does not support “Do Not Track”
Usage Data
Usage Data is information collected automatically through this Application (or third-party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the User who uses this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the browser and operating system used by the visitor, the various time details per visit (e.g., the time spent on each page) and the details about the path followed within the Application, with particular reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.
User
The individual using this Application, who must coincide with or be authorized by the Data Subject, to whom the Personal Data refers.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Data Supervisor)
The natural person, legal entity, public administration, or any other body, association, or organization authorized by the Data Controller to process the Personal Data in compliance with this privacy policy.
Data Controller (or Owner)
The natural person, legal entity, public administration, or any other body, association, or organization with the authority, even jointly with another Data Controller, to make decisions regarding the purposes, methods of processing of Personal Data, and the means used, including the security measures concerning the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.
This Application
The hardware or software tool by which the Personal Data of the Users is collected.
Cookies
Small pieces of data stored in the User's device.
Legal References
This privacy statement has been prepared based on provisions of multiple legislations, including Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation). This privacy policy relates exclusively to this Application.
Contacts
For any questions regarding this Privacy Policy, please contact us at info@stockmarketstatistic.com.
Last Updated: 20/08/2022