01Data controller
The data controller for personal data processed through this website is:
Yape S.r.l.
Viale Monza 259, 20126 Milan, Italy
VAT no. 09951050963 · REA MI-2123897
Phone +39 02 45902000
Email privacy@yapemobility.it
For any question about this notice or about how we handle your personal data, write to privacy@yapemobility.it.
02Scope of this notice
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended (“Italian Privacy Code”). It covers personal data processed when you browse this website and when you contact us through the contact form or by email.
Data of customers, suppliers and job applicants is covered by separate notices, available on request at privacy@yapemobility.it.
03Data we process
Browsing data
The servers that host this website automatically record some technical data as part of normal internet communication: IP address, date and time of the request, requested page, HTTP response code, referring page, browser and operating system. This data is used only to deliver the website, keep it secure and diagnose faults. It is not used to identify or profile visitors.
Data you provide
When you use the contact form or write to us, we process the data you choose to send: name, email address, company, purpose of the request and the content of your message, together with any further data contained in it. Please do not include special categories of data (Art. 9 GDPR) in your message.
Cookies
This website does not use profiling or analytics cookies. See the Cookie policy for details.
04Purposes and legal bases
| Purpose | Data | Legal basis | Retention |
| Delivering the website and keeping it secure | Browsing data | Legitimate interest in operating a secure website (Art. 6(1)(f) GDPR) | Up to 30 days, longer only if needed to investigate a security incident |
| Replying to your request and following up on it, including demos and commercial proposals you ask for | Contact data and message | Steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) and legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR) | 24 months from the last contact, unless a contractual relationship follows |
| Handling spontaneous job applications sent through the form | Contact data, message, CV if sent | Steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) | 24 months from receipt |
| Complying with legal obligations | Data required by law | Legal obligation (Art. 6(1)(c) GDPR) | As required by the applicable law |
| Establishing, exercising or defending legal claims | Data relevant to the claim | Legitimate interest (Art. 6(1)(f) GDPR) | For the duration of the dispute and the applicable limitation periods |
We do not use your data for newsletters or direct marketing. If we ever wish to, we will ask for your consent first.
05Providing your data
Fields marked with an asterisk in the contact form are needed to answer you. If you do not provide them we cannot handle your request. Any other information is optional.
06How we process data
Data is processed with electronic and manual tools, only by authorised personnel and only for the purposes described above. We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls and restricted retention, to prevent loss, misuse and unauthorised access.
No decision based solely on automated processing, including profiling, is taken on your data (Art. 22 GDPR).
07Who receives the data
Your data may be shared, within the limits of what each recipient needs, with:
- providers of hosting, email and IT services that support the website and our communications, acting as data processors under Art. 28 GDPR;
- e-Novia S.p.A. and the companies of the e-Novia group, for internal administrative and organisational purposes;
- professional advisers bound by confidentiality, such as lawyers and accountants;
- public authorities, where required by law.
Our staff process data as persons authorised under Art. 29 GDPR and Art. 2-quaterdecies of the Italian Privacy Code. The up-to-date list of data processors is available on request. Your data is never sold or disclosed to the public.
08Transfers outside the EEA
Data is stored in the European Economic Area wherever possible. If a provider processes data outside the EEA, the transfer takes place only on the basis of a European Commission adequacy decision (including, for the United States, the EU–U.S. Data Privacy Framework) or of the Standard Contractual Clauses approved by the Commission, with any additional measures required. You can request information on the safeguards in place by writing to us.
09Your rights
Under Articles 15 to 22 GDPR you have the right to:
- access your data and receive a copy of it;
- rectify inaccurate or incomplete data;
- erase your data, where the conditions are met;
- restrict processing;
- receive your data in a portable format (portability);
- object at any time to processing based on our legitimate interest, on grounds relating to your particular situation;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing.
To exercise your rights write to privacy@yapemobility.it. Requests are free of charge and are answered within one month, extendable by two further months for complex requests as provided by Art. 12 GDPR.
You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or with the supervisory authority of the EU country where you live or work (Art. 77 GDPR).
10Links to other websites
This website contains links to external websites, including our LinkedIn and Instagram pages. They are not embedded and transmit no data until you click them. Once you leave this website, the privacy policy of the site you visit applies.
11Changes to this notice
We may update this notice to reflect changes to the website, to our processing or to the law. The current version is always published on this page, with its date of last update at the top.