Privacy Policy

Our Privacy Policy outlines how we collect, use, and process your personal data when you visit our website or use our services. We are committed to protecting your privacy and being transparent about our data practices.

What personal data we collect, How do we use your them?

• Group 1: when provided, your name, your company name, your email and your telephone; in order communicate with you
• Group2: a unique and anonymous visitor identification number, and events code to understand which path our visitors are following on our website

The legal basis for processing your data?

• Consent: In certain cases, we may rely on your explicit consent as the legal basis for processing your personal data. When we collect sensitive personal data or engage in marketing activities, we will obtain your consent before processing your data. You have the right to withdraw your consent at any time by contacting us or adjusting your preferences in your account settings. If you would like us to erase your personal data from our database just write from the email you wish that we erase to privacy.out@tothetop.io, with the subject "out".
• Contractual Necessity: If you enter into a contract with us or request services from us, we may process your personal data to fulfill our contractual obligations to you. This includes processing your data to provide you with the products or services you requested, to communicate with you about your account, or to invoice you for services rendered.
• Legal Obligations: We may process your personal data to comply with legal obligations to which we are subject. This includes fulfilling our obligations under applicable laws and regulations, responding to lawful requests from government authorities, or assisting in legal investigations.
• Legitimate Interests: We may process your personal data for our legitimate business interests, provided that such processing does not override your rights and interests. Our legitimate interests may include improving our products and services, analyzing website usage data to enhance user experience, preventing fraud or illegal activities, and conducting marketing activities that are relevant to you.

How we share your data with third parties?

We do not share your data with any other third party than:

• Group1 data are stored by different SaaS provider we use for CMS, CRM, Mail, Billing
• Grope 2 are shared with Google Analytics

How we protect your data?

• Data Minimization: We only collect and process personal data that is necessary for the purposes for which it was collected. We minimize the amount of personal data we collect and anonymize or pseudonymize data whenever possible.
• Data Security Measures: We implement technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. This includes firewalls, access controls, and regular security assessments.
• Employee Training: Our employees undergo training on data protection and privacy practices to ensure they handle personal data appropriately and comply with relevant laws and regulations.
• Third-Party Contracts: When we engage third-party service providers to process personal data on our behalf, we enter into data processing agreements that require them to implement appropriate security measures and comply with data protection laws.
• Incident Response Plan: We have procedures in place to promptly respond to data breaches or security incidents. This includes notifying affected individuals and authorities and taking steps to mitigate the impact of the breach.

How long we retain your data?

• Group 1: we keep those data indefinitely including if you've asked us to opt-out of our promotional mail, for the very reason we need to keep a blacklist to avoid contact you again. You can you ask us to erase your data but you take the risk of receiving promotional or transactional mail again, in case you were to give us your coordinates at a fair or fill one of our form. If you would like us to erase your personal data from our database just write from the email you wish that we erase to privacy.out@tothetop.io, with the subject "out".
• Group2: are retained 14 months by Google Analytics

Your rights regarding your data: How to contact us with questions or concerns. If you have question please write to privacy.question@tothetop.io