DRAFT - to be reviewed by a lawyer
Privacy policy
Version 2026-11-05
This policy explains what personal data PubliScreen processes when you use publiscreen.online, the dashboard and the screens, why, for how long, and what your rights are. The EU General Data Protection Regulation (GDPR) applies.
1. Data controller
JP Informatica · P.IVA 13467561000 · Latina, Italia · Privacy contact: [email protected].
2. What data we process
Account data: name, email, phone (if you give it), language and password (stored as a hash; nobody can read it).
Business data: name, type of business, country, locations, logo, colors, products, prices, exchange rate and screen schedules.
Content you upload: photos and videos. You are responsible for having the rights to use them.
Payment data: plan, amounts, dates and, for manual payments, the reference and receipt you upload. Card and PayPal payments are processed by Stripe or PayPal; we never see or store your card number.
Technical data: IP address, browser, date and time of access, security logs (bot protection and login attempts), and for each screen a device identifier, its connection status and app version.
3. Why we use it and legal basis
Providing the service you sign up for (account, showing your content on screens, support): performance of a contract (Art. 6(1)(b) GDPR).
Billing, receipts and accounting: legal obligation (Art. 6(1)(c)) and performance of a contract.
Service emails (welcome, end of trial, payment notices, password reset): performance of a contract. We do not send advertising without your consent.
Site security and prevention of abuse and fraud: legitimate interest (Art. 6(1)(f)).
Non-technical cookies: only with your consent (Art. 6(1)(a)), which you can withdraw at any time. See the Cookie policy.
4. How long we keep it
While your account is active. If the service is paused for non-payment, content is kept for at least 30 days; after that it may be deleted, always manually and after an email notice.
Billing and payment data are kept for as long as accounting and tax law requires (in Italy, up to 10 years).
Technical and security logs are kept for up to 90 days, unless needed to investigate an incident.
If you ask us to delete your account, we delete or anonymize your data within 30 days at most, except what the law requires us to keep.
5. Who we share it with
Only with providers we need to run the service, under data processing agreements: Raiola Networks (hosting and email, Spain, EU), Cloudflare (delivery network and security), Stripe and PayPal (payments, if you use them).
Some of these providers may process data outside the European Economic Area (for example, in the United States). In that case GDPR safeguards apply: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We do not sell or rent your data. We only hand it to an authority when the law requires it.
6. Your rights
You can ask at any time for: access to your data, correction, erasure, restriction of processing, portability (a copy in a file you can take to another service) and to object to processing based on legitimate interest. If you gave consent, you can withdraw it without affecting what was done before.
Write to [email protected] from your account email. We reply within one month at most.
If you believe we are not handling your data properly, you can complain to the supervisory authority. In Italy it is the Garante per la protezione dei dati personali (garanteprivacy.it); you can also go to the authority of your country.
7. Security
Encrypted connection (HTTPS), hashed passwords, encrypted payment keys, login attempt limits, backups and a log of important changes. No system is infallible: if an incident affects you, we will notify you as the law requires.
8. Minors
The service is for businesses and people over 18. We do not knowingly process data of minors.
9. Changes
If we change this policy we will tell you in the dashboard or by email. Current version: 2026-11-05.