CLASTIX SRL Privacy Policy

CLASTIX only uses your personal information for the purpose for which it has been provided.

For the creation, use, and administration of your user profile.

This includes all personal data which you provide us when creating your user account.

• Name and Email Address are mandatory for creating an account.
• Telephone Number and Company Name are optional.
• You may receive email correspondences related to the administration of your profile, which are separate from marketing or business messages.
• If you create your account through a social media profile (LinkedIn, Google account, etc.), you provide CLASTIX access to your email address and all public account information on your public profile.

For promotional activities.

This includes product emails, newsletters, webinars, evaluation guides, information about new features, policies, and more. Processing your data is based on your optional consent and you can change your preferences at any time through the link provided in every email footer or by contacting our team.

• Name is used for personalised communication.
• Email address.

For sales and business activities.

We may also collect information that is not considered personal as it relates to the businesses you represent, including:

• Company Name, Business Address, Job Title, and Department Information.

For targeted advertising campaigns.

For better website targeting and optimisation, CLASTIX uses information about your activity on our website. This information also contains data from cookies. Processing and collecting this data can only be done with your agreement. This data helps CLASTIX create statistics, analyses, and reports about user behaviour on our website.

For purchasing CLASTIX products or services.

We may collect your billing information.

We may also collect information you choose to provide to us in “open answer” sections of forms, surveys, or product reviews.

You may be asked to provide personal information when ordering or registering for CLASTIX products, completing surveys, requesting support, entering information on our website, participating in CLASTIX webinars, or subscribing to marketing communications. Additionally, we may collect personal information at events you attend or during phone calls with CLASTIX representatives. This information is collected when you choose to provide it to us.

We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing message, visit the website, or use other site features in the following ways:

• To allow you and us to enter into a contractual relationship for you to use our products.
• To administer a contest, promotion, survey, or other site feature.
• To ask for ratings and reviews of services or products.
• To follow up with you after a correspondence (email or phone inquiries).
• To develop new tools, products, or services for your organisation.
• To send emails and communications related to our products, policies, new product features, and promotional communications.

The security of your Personal Information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, in order to protect it from unauthorised access or use, destruction, modification, or disclosure.

The CLASTIX website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential. In addition, we implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information.

CLASTIX will only retain personal data for as long as it is necessary, and in accordance with applicable law, including Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree No. 196/2003, as amended).

All contractors who have access to personal information which we collect and process are bound by confidentiality obligations.

We will disclose your Personal Information where required to do so by law, court order, or regulatory authority, or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement, or to protect the security or integrity of our products and services.

CLASTIX SRL is an Italian company operating primarily within the European Economic Area (EEA). Where personal data is transferred outside the EEA – for example, to service providers headquartered in the United States – we take appropriate safeguards to ensure it remains protected in accordance with the GDPR, including relying on Standard Contractual Clauses (SCCs) approved by the European Commission or on a relevant adequacy decision where applicable.

Third-Party Service Providers.

We may share with or obtain some of your company information from trusted third-party service providers that we use to provide hosting, application development, backup, storage, analytics, email communications, and other services for us. Our current third-party service providers include:

• Google LLC (Google Workspace, Google Analytics, Google Ads) – email, calendar, document collaboration, website analytics, and advertising.
• Salesforce Inc. – customer relationship management.
• Apollo.io (SalesOS Inc.) – prospect discovery and contact data enrichment.
• Slack Technologies LLC – internal team communications.
• Monday.com Ltd. – project and task management.
• GitHub Inc. – source code hosting and version control.
• StreamYard (Hopin Ltd.) – webinar and video streaming.
• LinkedIn Corporation – advertising and professional audience targeting.

We only engage service providers that offer appropriate data protection guarantees, including Data Processing Agreements and, where applicable, Standard Contractual Clauses for any transfers of personal data outside the EEA. These third-party service providers may have access to or process your personal information solely for the purpose of providing their services to us. We do not permit our third-party service providers to use the personal information that we share with them for their own marketing purposes or for any other purpose unconnected with the services they provide to us.

Marketing Communications.

If you are registered on our customer or partner portals, have submitted a form on our website, or have given us consent to send you newsletters, event or product-related emails, then you are included in our marketing communications. You can always opt out of marketing communications by clicking the “unsubscribe” link included at the bottom of all marketing emails. Additionally, you may contact us at any time to opt out of these communications.

We may share your information with trusted third-party advertising and analytics partners, including: Google LLC (Google Analytics, Google Ads) and LinkedIn Corporation (LinkedIn Ads).

We collect your email address in order to:

• Send information, respond to inquiries, and/or other requests or questions.
• Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.

We agree to the following:

• Not to use false or misleading subjects or email addresses.
• To identify any message as an advertisement in some reasonable way where applicable.
• To monitor third-party email marketing services for compliance, if one is used.
• To honour opt-out/unsubscribe requests promptly.

Rights under the General Data Protection Regulation (GDPR):

Right of Access: You have the right to obtain the personal data we hold about you and the processing purposes.

Right to Erasure: You have the right to request we erase personal data we hold about you, in certain circumstances.

Right to Restriction of Processing: You have the right to restrict the processing of your personal data.

Right to Object: You have the right to object to us processing your personal information or to stop us sending you marketing communications.

Right to Data Portability: You have the right to receive the personal data we hold about you in a structured, commonly used, and machine-readable format.

Right to Rectification: You have the right to correct any inaccurate personal information we hold about you.

Right to Lodge a Complaint: You have the right to lodge a complaint with the competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Please contact us if you would like to exercise any of the above rights, so that we may consider your request in a timely manner. To further protect your personal information, we may take precautionary steps to verify your identity before complying.

Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow it), which enables the site’s or service provider’s systems to recognise your browser and capture and remember certain information. We use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. There is no personal information within cookie files themselves.

We use Google Analytics to track and analyse website usage on our behalf. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to arriving at our site. You can learn more about Google’s privacy practices and opt out of Google Analytics tracking at: tools.google.com/dlpage/gaoptout.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies through your browser settings. Since each browser is different, consult your browser’s Help Menu to learn how to modify your cookie settings.

We do not sell, trade, or otherwise transfer your Personally Identifiable Information to outside parties. Our authorised service providers are not considered outside parties for this purpose.

Our website or services may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Users can visit our site anonymously.

Any Privacy Policy changes will be published on our website at www.clastix.io.

You can update your personal information by logging into your account or by contacting us directly.

In order to comply with our obligations under the GDPR, should a personal data breach occur that is likely to result in a risk to your rights and freedoms, we will notify you and/or the competent supervisory authority (Garante per la protezione dei dati personali) via the appropriate channels within 72 hours of becoming aware of the incident, where feasible.

This Privacy Policy is effective as of the date stated at the top of this document and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being published on our website at www.clastix.io.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of our website or services after we post any modifications will constitute your acknowledgement of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.