Valid from the 24th of November 2022
Apostrophy (“Aphy”) is committed to protecting and respecting your privacy; for this reason, we collect and manage your personal data carefully and take specific measures to keep it safe.
Below you will find information on how we collect, gather and use your personal data in relation to your browsing of or subscribing to via our website www.aphy.io.
1. Data controller
Via Losanna 4, 6900 Lugano, Switzerland
+41 91 924 9003
VAT ID: CHE-317.269.345
Company registration number: CH-501.3.023.341-1
2. Information we collect
The categories of personal data that Aphy collects and processes when you browse or subscribe via aphy.io, are:
Your email address when you subscribe or sign up for updates on our services, along with your name and surname if you contact us;
Upon consent, we collect and use your personal data for marketing purposes;
Upon your consent, by analyzing your personal data, we can process information regarding your interests and preferences with respect to our products and services, in order to customize proposals and offers in line with your interests;
In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; we may use software tools to measure and collect session information, including page response times, length of visits to site pages, page interaction information, and methods used to browse away from the page and store this information to improve the process.
Aphy does not process personal data relating to minors. By accessing aphy.io and using the services offered by Aphy you are declaring that you are of legal age.
3. How we use personal information
Your personal data is collected and processed by Aphy for the following purposes:
Registration to the site and use of services reserved for registered users. Registration on the site is possible through the submission of your e-mail address information necessary to ensure your identification and the execution of services reserved for registered users;
Statistical analysis and surveys. We use some information about your use of the site to perform statistical analysis and surveys in order to improve our offer and our services, the data is processed in anonymized aggregate form;
Marketing contact: sending communications following the subscription to our services;
Only with your consent, we may use the contact details you have provided, for commercial communications on our products and services, in order to update you on news, new arrivals, exclusive products, our offers and promotions and we may use your contact information as part of market researches and satisfaction surveys for the sole purpose of improving our services and the relationship with our Users. These communications will take place exclusively through the means chosen by you (email);
If you wish to authorize the activities referred to in points 7. and 8. and subsequently you no longer wish to receive further communications from Aphy or you want to limit the means by which you are contacted, you can stop these communications at any time by simply clicking on the "unsubscribe" link present at the bottom of each communication, or by contacting Aphy through the email address specified in this document.
In relation to all the activities indicated above, we shall process your personal data mainly using IT and electronic tools; the tools we use guarantee high safety standards in full compliance with current legislation.
4. How and why we use your personal information
We use your personal data only for:
The registration to the site and use of services reserved to registered Users.
We ensure that we exclusively use the minimum information necessary for the execution of this service.
You are free to communicate your data or not, but in the absence of the requested data, it will not be possible to provide or operate the Services and we will not be able to contact you with general or personalized service-related notices and messages;
Comply with any applicable laws and regulations.
Based on your consent.
We shall carry out the following only if you have given us your express consent:
Carrying out marketing activities, conducting opinion polls and for market research;
Analysis of your browsing and subscribing activities in the context of your Aphy profile, in order to personalize your experience on our Site.
Providing your personal data for these activities is absolutely optional.
The site is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to provide services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
5. Who your data is processed by
Your personal data will be processed by staff specifically trained by Aphy.
Your personal data will also be transmitted to third parties that we use to provide our services; these third parties have been appropriately selected and are certified as GDPR-compliant. These third parties have been appointed as data controllers and carry out their activities according to the instructions given by Aphy and under its control. The third parties in question belong to the following categories: internet providers, companies specialized in IT and telematics; companies specialized in market research and data processing.
The list of data processors and sub-processor is available upon written request to our email address: firstname.lastname@example.org;
Your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow Aphy to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
6. Extra-EU data transfer
Some of the third parties may be located in countries outside the European Union that nevertheless (i) offer an adequate level of data protection, as established by specific decisions of the European Commission or (ii) is made with the relevant Standard Contractual Clauses in place, along with additional technical, contractual and organizational safeguards, regardless of any lesser legal requirements which may apply in their jurisdiction.
7. How long do we retain your data?
We retain your personal data for a limited period of time, which is different depending on the type of activity that involves the processing of your personal data.
After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way.
Your personal data is stored in compliance with the following terms and criteria:
Data of the registered user and collected in the context of the use of the services: the data will be stored until the termination of the service or you request the cancellation of your subscription to the service;
Data used for carrying out market research and surveys for satisfaction surveys: up to the request by the user to interrupt the activity. In any case, for technical reasons, the termination of the processing and the subsequent ultimate cancellation or irreversible anonymization of the related personal data will be finalized within thirty days from the terms specified above.
8. Your rights
You can exercise your rights at any time with reference to the specific processing of your personal data by Aphy:
Access your data and modify it: you have the right to access your personal data and to request that it be corrected, modified or integrated with other information. Upon your request, we shall provide you with a copy of your data in our possession;
Revoke your consent: you can revoke the consent you have given for the processing of your personal data in relation to any service at any time. In this regard, we remind you that services are considered as the sending of communications, the conduct of market research and satisfaction surveys for the customization of the website and commercial offers according to your interests. Once we receive your request, we undertake to promptly cease to use your personal data based on this consent, while different usage or that which is based on other grounds, will continue to be carried out in full compliance with the provisions in force.
Opposition to the processing of your data: you have the right to object at any time to the processing of your personal data made on the basis of our legitimate interest, explaining the reasons that justify your request; before accepting it, we shall have to evaluate the reasons for your request.
Delete your data: you may request the cancellation of your personal data in the cases provided for by current legislation. Once your request has been received and examined and if it is legitimate, it will be our duty to promptly cease to process your personal data and to delete it.
Request that the processing of your personal data is temporarily limited: in this case Aphy will continue to retain your personal data but will not use it, unless otherwise specified by you, and subject to the exceptions established by law.
The request of your data or data transfer to other parties than Aphy ("right to data portability"). You can ask to receive your data that we process based on your consent or on the basis of an agreement with you in a standard format. If you wish, where technically possible, we may transfer at your request your data directly to a third party that you indicate.
In order to exercise any of your rights described above you can contact us by writing to email@example.com (please enter “Privacy” in the subject field), or by writing to the Data Controller at the above physical address.
9. Security measures
We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudo-anonymization or the encryption of your data; the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach.
If you believe that the processing of your personal data has been carried out unlawfully, you can lodge a complaint to one of the supervisory authorities responsible for compliance with the rules on personal data protection.
11. Legislative references
The processing of your personal data is carried out by Aphy in full compliance with the regulations on the matter pursuant to the Regulation (EU) 2016/679 General Data Protection Regulation (“GDPR”).