Privacy
Website privacy policy
Last updated:
Data controller
Lolly, Milano, 20100 (Italia), VAT IT.... Contact: info@getlolly.eu.
Scope
This policy covers the www.getlolly.eu website only. The Lolly app and the services offered to businesses have their own policy.
Data we process
- Technical browsing data: IP address, date and time, requested page, browser. Used to deliver the pages and protect the site from abuse; never used for profiling.
- Data you send us by e‑mail: address, name and message content, when you write to us for a demo or information.
The site uses no cookies, analytics or third‑party services (fonts are hosted on our own domain). Your browser only stores the language you chose, locally; it is never sent to us.
Purposes and legal bases
- Delivering and securing the site: legitimate interest (Art. 6(1)(f) GDPR).
- Answering your requests: pre‑contractual steps you asked for (Art. 6(1)(b)) or legitimate interest in replying (Art. 6(1)(f)).
Recipients and transfers
The site is hosted on Amazon Web Services (EU region, CloudFront delivery network), acting as data processor. The delivery network may serve pages from servers outside the EU; such transfers are covered by the European Commission's standard contractual clauses. E‑mail is handled by our mail provider. Data is never sold or shared with others.
Retention
Technical data is kept by the hosting provider as long as needed for security. E‑mails are kept as long as needed to handle the request and no longer than 24 months, unless the law requires otherwise or a business relationship starts.
Your rights
You can request access, rectification, erasure, restriction, portability and object to processing (Arts. 15‑22 GDPR) by writing to info@getlolly.eu. You can also lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).