Privacy Policy and Cookie Policy

Notice pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR). Last updated: 08/10/2026

1. Data controller

The data controller is Davide Gilè, VAT IT09060610723, Tax code GLIDVD01C11A662R, Via Cornole di Ruccia 23/G, 70026 Modugno (BA), Italy. Contact: davidegile@gmail.com, phone 3406528349.

2. Data processed

We process account identification and contact data, technical credentials, staff data, customer data entered by users, products, transactions, activity logs, session data, technical device information and payment data managed by Stripe.

3. Purposes and legal bases

Data is processed to create and manage accounts, provide the service, record transactions and activities, manage payments and subscriptions, provide support, comply with legal obligations, prevent abuse and protect the security of the platform. The legal bases are performance of the contract, legal obligations, legitimate interest and, for Analytics, consent.

4. Stripe and payments

Payments are handled by Stripe. Gilsa retains technical identifiers such as customer ID, subscription ID and subscription status, while full card and payment method data are processed by Stripe according to its own policies.

5. Cookies

We use technical cookies necessary for login, security and session operation. Google Analytics is loaded only after explicit consent via the banner; refusing it does not prevent use of the service.

6. Retention

Account and transaction data is kept for the duration of the contractual relationship and, afterwards, for as long as necessary to comply with legal obligations, defend rights or handle user requests. Technical logs are kept for security and operational auditing.

7. Recipients

Data may be processed by technical providers, hosting providers, email services, Stripe for payments, consultants and authorized parties. Data is not sold to third parties.

8. Transfers outside the EU

Some providers, such as Stripe or Google, may process data outside the European Economic Area under safeguards provided by the GDPR, including standard contractual clauses or other applicable mechanisms.

9. Data subject rights

The data subject may request access, rectification, erasure, restriction, objection, data portability and withdrawal of consent where applicable. Requests can be sent to gilsa.business@gmail.com. A complaint can be filed with the Garante per la protezione dei dati personali (the Italian data protection authority).

10. Tenants' privacy roles

When a manager enters data about their own customers or employees, they must ensure they have an appropriate legal basis and provide the necessary notices to their own data subjects. Gilsa acts as a technical provider for the delivery of the platform.