Privacy notice

Controller and scope

The controller is Wikipoint S.r.l., Via Galla Placidia, 12, 20131 Milan, Italy; VAT IT11649640965. Contact: support@wikipoint.co; certified email wikipoint@pec.it. This notice covers wikipoint.com, its forms and data provided to access Wikipoint services. Any specific notices provided within individual services supplement this information.

Data, purposes and legal bases

• Contact and trial requests: name, business or venue, email, city, country, message and optional phone number, to respond and take requested precontractual steps (Article 6(1)(b) GDPR).
• Partner applications: contact details, area of interest, relationship with the restaurant industry and an optional CV, to assess and manage a proposed collaboration (Article 6(1)(b)). Avoid sensitive or irrelevant data in your CV.
• Accounts and services: registration and authentication data, preferences and communications, to provide the service and meet contractual and legal obligations (Article 6(1)(b) and (c)).
• Security and bot prevention: technical data, ALTCHA proofs and submission counters, based on our legitimate interest in security (Article 6(1)(f)). ALTCHA runs on infrastructure used by Wikipoint and proofs are checked on the server. It is not used for profiling.
• Google Analytics statistics and Meta measurement: only with the corresponding optional consents (Article 6(1)(a)). Submitting a form does not automatically subscribe you to promotional messages.

Required information and processing

Fields marked as required are needed to handle your request; without them we may be unable to respond or assess an application. Phone and CV are optional. Acknowledging this notice is separate from marketing consent. Bot prevention may block a suspicious submission: you can contact us by email for help. These forms do not make exclusively automated Partner selection decisions.

Recipients and transfers

Authorised staff and providers required for hosting, infrastructure, support and email can access relevant data. Forms use Google services to receive and manage enquiries and applications, including Forms, Sheets, Apps Script and Drive for attachments. Google Analytics and Meta receive technical and interaction data only with consent to the corresponding category. We do not configure sending form field values to trackers or Meta advanced matching. Providers processing data on our behalf are subject to Article 28 GDPR. Transfers outside the EEA require Chapter V GDPR safeguards, such as an applicable adequacy decision or standard contractual clauses; you may request information about the safeguards relevant to your processing. Google privacy · Meta privacy.

Retention

Enquiries and correspondence are kept for the time needed to handle the contact and resulting activities; support records for up to 3 years after the last interaction, unless a documented need to protect legal rights applies. Applications and optional CVs are kept as needed to assess and develop a collaboration; further retention requires an appropriate purpose and legal basis. Account data follows the relationship and, as a rule, one subsequent year; tax records follow statutory periods. Bot proofs expire after 20 minutes and rate counters use 15-minute windows; expired checks are removed by the service during subsequent verifications. These technical periods do not determine message or CV retention. See the Cookie Policy for cookie and identifier lifetimes.

Statistics, marketing and preferences

Google Analytics requires Statistics consent; Meta Pixel requires separate Marketing consent. Page information, interactions, technical browser information and pseudonymous identifiers may be transmitted. Pseudonymous does not mean anonymous. The wp_journey_v1 identifier links interactions to a campaign for 30 minutes of inactivity and may be read by app.wikipoint.com. It is not an access token. You can refuse or withdraw consent through “Cookie preferences” without losing access to the website. Withdrawal does not affect the lawfulness of prior processing.

Rights and contact

Where provided by GDPR, you may request access, rectification, erasure, restriction, portability and objection, and withdraw consent. Email support@wikipoint.co. We respond within one month; any justified extension is communicated within statutory deadlines. You may complain to the Italian data protection authority or the competent authority. The website is not directed at children under 16. Changes are indicated by the update date.