Verse logo

Privacy Policy

INDIGO AI S.r.l., as “controller”, according to Article 13 Regulation (EU) 2016679 (hereinafter “GDPR”), wishes to provide the following specific information as regards the processing[[1]](https://indigo.ai/en/privacy-policy/#_ftn1)of personal data of the chatbot service users.

1. Data controller

The Data Controller is INDIGO AI S.r.l. with registered office in via Torino n. 61, postcode 20123, Milan (MI), Italy, e-mail admin@ndg.ai. The appointed DPO, according to Art. 37, Regulation EU 2016679, is Mr. Aldo Benato lawyer, e-mail:aldobenato@pec.it.

2. Types of data processed

Indigo AI S.r.l. processes personal data provided voluntarily by users, through registration and use of the chatbot, or acquired by Indigo AI S.r.l. through the Facebook platform, in particular: name, surname, fiscal code, VAT number, e-mail, telephone number (“personal data”). Indigo AI S.r.l. can also handle particular data relating to health and sex life, racial and ethnic origin of an individual, his or her religious, political and philosophical beliefs and membership, voluntarily provided by users [eg in the context of the use of the service] to be able to satisfy users’ requests (“particular data”). Indigo AI S.r.l. can process the data collected through the use of technical cookies.

3. Purpose of the processing

Personal data will be processed for the following purposes:

  1. Purposes related to the performance of the requested services, ie to answer the questions asked by users and to send them the requested information.
  2. Purposes related to the fulfillment of obligations established by law, by a regulation, by EU legislation or by an order of the Authority (such as in the field of anti-money laundering) to which the Data Controller is subject.
  3. Purposes related to the exercise of a legitimate interest of the Controller, including for example the right to defence in court.
  4. Specific and separate prior consent will be asked for the following marketing purposes:

Particular data will be processed for the following purposes:

  1. Upon specific and separate consent, purposes related to the performance of the requested services, or to answer the questions asked by users.

Personal data collected through the use of cookies will be processed for the following purposes:

  1. Allow consultation of the chatbot, as they permit the chatbot to work.

4. Nature of data provision

Without prejudice to what is indicated in relation to technical cookies, which are necessary for the chatbot to work properly, users are free to provide their personal data, but the provision of data is a necessary prerequisite for the execution of the service. Failure to provide such data may make it impossible for the Controller to receive questions by chatbot and to send the requested information. Users are free to provide their personal data and to give their consent for the sending of promotional communications. Failure to grant consent will not allow the Data Controller to send its promotional offers. Users are free to provide their own particular data and to give their consent, to receive answers to the questions posed in the chatbot on the subject of health and sexual life, of the individual’s racial and ethnic origin, of his/ her religious, political and philosophical beliefs and membership.

5. Processing methods

Personal data will be processed using automated tools and in paper form. The Data Controller will process the personal data for the time necessary to fulfill the aforementioned purposes and, in any case, for not more than 10 (ten) years from the termination of the contract for the purposes related to the services offered and for no more than 2 years from the collection of data for the purposes regarding marketing activities. Specific security measures will be adopted to prevent the loss of personal data, illicit or incorrect use and unauthorized access. In particular, specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access, including:

6. Persons authorized to process data

The personal and particular data voluntarily provided by you through the registration and use of the chatbot or acquired by Indigo AI S.r.l. via Facebook Messenger, Telegram, Whatsapp, Google Hangouts, Skype, Viber, LINE, WeChat can be communicated:

The updated list of these Data Processors is kept at the registered office of the Data Controller.

7. Data transfer

Personal data are stored on servers located in Ireland and Frankfurt, within the European Union. In any case, it is understood that the Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller ensures, from now on, that the extra-EU data transfer will be carried out in compliance with the applicable legal provisions, upon stipulation of the standard contractual clauses imposed by the European Commission.

8. Rights of the data subjects

The user, as data subject, has the right to exercise at any time the rights mentioned in Articles 12 ff of EU Regulation 2016679, namely:

To exercise the aforementioned rights, to make a report or to receive information on the processing methods, requests can be made by writing to the Data Controller at via Torino 61, Milan (MI), 20123 or at the following email address: admin@ndg.ai.

-—

[1]Processing means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction of data.