RadarAddress address · data · quality

Privacy Policy

Last updated:

Introduction

This page describes how the website is managed with regard to the processing of personal data of users who visit it or register for the service.

This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) to those who interact with the web services of RadarAddress, available at www.radaraddress.it and www.radaraddress.com.

This notice applies only to these websites and not to other websites the user may visit through external links.

This document is written in Italian. Versions in other languages are provided for convenience only: in the event of any discrepancy, the Italian version prevails.

Data Controller

The Data Controller is RadarWave di Gianluca Sordiglioni, Italian VAT number 11105080151, registered office at Via Monte Cervino 13, 20021 Bollate (MI), Italy, reachable by email at: info@radarwave.it.

The up-to-date list of any Data Processors is available on request by writing to the Data Controller.

How data is processed

Processing connected with the web services of this website is carried out by the Data Controller or by third parties specifically appointed as Data Processors (e.g. infrastructure providers, payment services, electronic invoicing), in accordance with Article 28 of Regulation (EU) 2016/679.

Data is not disclosed or disseminated to third parties beyond what is strictly necessary to provide the service. The service's processing (address normalisation, deduplication, tax code verification, enrichment, email verification, quality checks, preparation of lists for the Italian public opt-out register) takes place entirely on RadarAddress servers: the data processed is not sent to external services, nor to third-party artificial intelligence systems.

How the service is delivered

The service is used after registration, in three ways: the web forms of your account, batch jobs (uploading a whole file) and the API. In every case RadarAddress processes only the data supplied by the user, checking them against its own reference archives (street registers, postcodes, dictionaries): those archives are neither sold nor made available for consultation, and the service does not supply lists of addresses, contact records or other databases. RadarAddress sells processing services, not data.

Types of data processed

Browsing data

The computer systems and software procedures that operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category includes: IP addresses, domain names of the computers used, URIs of the resources requested, time of the request, size of the file received in response, numeric code indicating the status of the server response, operating system and computing environment of the user.

This data is used solely for aggregate, anonymous statistics on the use of the website (derived from server logs, without cookies or client-side tracking tools) and to check that the service is working correctly; it is kept for the time strictly necessary and to establish liability in the event of computer crimes.

Plugin downloads from the Integrations page are counted: date, plugin and version, page language, where the visit came from, a non-reversible fingerprint of the IP address, the browser and, if you are registered, the account. It serves to know how many times a plugin has been downloaded; no personal data is stored in clear.

Data provided voluntarily by the user

Registering for the RadarAddress service involves collecting data that is either required or optional.

Data required for registration and provision of the service:

  • email address (verified through a confirmation link)
  • password (stored only in encrypted form)
  • tax details for invoicing (company name or first and last name, VAT number or tax code, address, Italian e-invoicing recipient code or certified email), requested only at the time of the first purchase

Optional data:

  • name of the organisation

If the required data is not provided, the service cannot be delivered.

Third-party personal data in uploaded files

The service processes contact lists provided by the user (through the web form, files or the API) which may contain personal data of third parties: names, postal addresses, phone numbers, email addresses, tax codes, dates of birth.

With regard to such data the user (or the organisation they act for) remains the sole Data Controller; RadarAddress processes it as a Data Processor under Article 28 GDPR, solely to carry out the processing requested (normalisation, deduplication, checks, verification, list preparation) and for no other purpose, under the conditions of the Data Processing Agreement (DPA). In particular, the data contained in uploaded files:

  • is not disclosed or disseminated to third parties, nor used for the Data Controller's own purposes;
  • is processed entirely on the service's servers;
  • are not used to build, enrich, feed or train RadarAddress archives, rules or models, not even in aggregated or anonymised form, nor cross-referenced with the data of other users: they are processed and deleted;
  • is deleted automatically 30 days after upload, together with the result files;
  • can be deleted earlier by the user, with the "Delete" button on the My jobs page: files and third-party data disappear at once, and only usage and accounting data remain (number of operations, date, amount charged), which contain no data from the files.

Single operations (web forms and API) return the result in the response without storing its content; deduplication results requested via the API can be read back for 30 days and are then deleted. In no case do data supplied by the user remain on RadarAddress systems for more than 30 days.

If a result is not downloaded, the user receives a reminder by email after one day, after one week and three days before automatic deletion; the reminder can be switched off in the profile.

By uploading a file, the user warrants that they have a valid legal basis for processing the personal data of third parties contained in it (see the Terms and Conditions of Use).

Payment data

Payments for subscriptions and packs are handled through the Stripe platform. Payment data (card number, cardholder, etc.) neither passes through nor is stored on RadarAddress servers: it is processed directly by Stripe, Inc. under its own privacy policy (stripe.com/privacy).

RadarAddress receives from Stripe only the information needed to manage the account (payment status, active plan, renewal dates).

Payment data is processed for anti-fraud purposes, under Directive (EU) 2015/2366 (PSD2).

Electronic invoicing

For each payment the Data Controller issues an electronic invoice (FatturaPA) as required by Italian law. The invoice contains the customer's tax details (company name, VAT number or tax code, address, e-invoicing recipient code or certified email). This data is sent to the Italian Revenue Agency's exchange system (Sistema di Interscambio, SdI), as required by law (Article 21 of Presidential Decree 633/1972).

The generation, transmission to the SdI and legally compliant storage of electronic invoices are carried out through the intermediary Datev Koinos S.r.l. (SuperBill platform), specifically appointed as a Data Processor under Article 28 of Regulation (EU) 2016/679.

Purposes of processing

The data collected is processed for the following purposes:

  • provision of the contact data quality services (address normalisation, deduplication, tax code, enrichment, email verification, quality checks, lists for the Italian public opt-out register)
  • management of the account, the subscription plan and the prepaid operations
  • sending service communications (email verification, end-of-job notifications, receipts and payment notices)
  • support and replies to user requests
  • subject to express consent given at registration, sending news about the service and advice on data quality, at a limited frequency (at most 1-2 emails a month)

Cookies

The website uses technical cookies needed for the service to work; any future statistical or profiling cookies will be activated only with consent. For details see the Cookie Policy.

Legal basis for processing

  • Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to provide the service requested by the user upon registration.
  • Consent (Art. 6(1)(a) GDPR): for sending optional communications (1-2 emails a month), collected through a dedicated checkbox at registration and revocable at any time, and for the use of any non-essential cookies introduced in the future.
  • Legitimate interest (Art. 6(1)(f) GDPR): for the security of the website and the prevention of fraud and abuse.
  • Legal obligation (Art. 6(1)(c) GDPR): for tax and accounting requirements.

Data retention

Personal data is kept for the time strictly necessary for the purposes for which it was collected:

  • account data (email, consents with their dates): for the whole duration of the relationship and, afterwards, for legal requirements (up to 10 years for tax data)
  • unconfirmed registration: if the email address is not confirmed within 30 days, the registration is cancelled and the details entered are deleted, with a final notice by email; in the meantime reminders with a fresh link are sent (after 1, 3, 7, 14 and 29 days)
  • uploaded files and result files: 30 days from upload, then automatic deletion; the user can delete them earlier from the My jobs page (only usage and accounting data remain, without data from the files)
  • browsing data: no longer than 6 months
  • service usage records (counters and processing logs): for the time needed for invoicing and security checks

Rights of data subjects

Under Articles 15–22 of Regulation (EU) 2016/679, data subjects have the right to:

  • access their personal data
  • request rectification or updating of their data
  • request erasure of their data ("right to be forgotten")
  • request restriction of processing
  • object to processing
  • request data portability
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
  • lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of their own country of residence

Requests may be sent to the Data Controller by writing to: info@radarwave.it.

Consent to optional communications can be withdrawn at any time through the unsubscribe link in every email, or by writing to the addresses given.

Account deletion

To request deletion of the account and associated data, simply write to info@radaraddress.it from the registered email address. As a tax obligation (Article 2220 of the Italian Civil Code) the invoices issued remain archived for 10 years with the invoicing intermediary and in the Data Controller's accounting records; technical system logs also remain, in a form that cannot be traced back to the individual data subject.