Controller
[DA COMPLETARE: RAGIONE SOCIALE], [DA COMPLETARE: INDIRIZZO], VAT [DA COMPLETARE: P.IVA]. Contact: [DA COMPLETARE: EMAIL], PEC [DA COMPLETARE: PEC].
Data we process
- Contact details: name, email, phone and WhatsApp number if provided.
- Supply data from your bill or typed in: provider, usage, prices, address, POD/PDR codes.
- For businesses and public bodies: name, VAT number, tax code.
- Messages exchanged on WhatsApp or the website chat.
- Technical browsing data and, with consent, statistics and marketing cookies.
- Any IBAN or other bank details on the bill are not used for the comparison. TO BE VERIFIED WITH COUNSEL and the technical lead: whether and when they are masked before being sent to the reading system.
Purposes and legal bases
- Handling your request and sending the result: pre-contractual steps / requested service (Art. 6(1)(b) GDPR). TO BE VERIFIED WITH COUNSEL.
- Promotional messages: only with your consent, per channel (Art. 6(1)(a) GDPR and Art. 130 Italian Privacy Code). Optional, and not needed to receive your analysis.
- Site security and abuse prevention: legitimate interest (Art. 6(1)(f) GDPR). TO BE VERIFIED WITH COUNSEL.
- Legal obligations such as handling complaints (Art. 6(1)(c) GDPR).
Automated systems
We use automated extraction to read bills. No decision is based solely on automated processing: a person checks every result. TO BE VERIFIED WITH COUNSEL (Art. 22 GDPR).
Recipients
Service providers acting as processors: hosting, storage, email, WhatsApp (Meta), text extraction, maps, analytics. Current list: [TO BE COMPLETED]. Energy or service providers only if you choose to activate an offer.
Transfers outside the EU
Where a provider processes data outside the EU, transfers rely on the safeguards in Chapter V GDPR. [TO BE COMPLETED per provider]. TO BE VERIFIED WITH COUNSEL.
Retention
Uploaded documents: [TO BE COMPLETED, proposed 90 days after the request closes]. Analysis results: [TO BE COMPLETED]. Marketing data: until consent is withdrawn.
Your rights
You can request access, rectification, erasure, restriction, portability and object to processing (Arts. 15-22 GDPR), and withdraw consent at any time. Write to [DA COMPLETARE: EMAIL]. You can complain to the Italian Data Protection Authority (www.garanteprivacy.it).