Skip to content
Wikipoint
PrivacyCookies← Back to site
← Back to Home
Legal · Privacy

Privacy Policy

Last Updated: March 16, 2026

At Wikipoint, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have over your data. We process your data in compliance with the EU General Data Protection Regulation (GDPR) and applicable Italian privacy law.

This policy covers: who we are, what data we collect, how we use and share it, international transfers, security, retention, your GDPR rights, cookies, children's privacy, and how to contact us.

1Who We Are (Data Controller)

The data controller responsible for your personal data is:

Wikipoint S.r.l.

Via Galla Placidia, 12 — 20131 Milano, Italy

Email: support@wikipoint.co

PEC: wikipoint@pec.it

2What Data We Collect

We collect personal data in the following ways:

2.1 Data You Provide Directly

When you register, book a trial, or contact us, we may collect:

  • Identity data: first name, last name
  • Contact data: email address, phone number (optional)
  • Professional data: type of business or activity
  • Account data: username, password (hashed), account preferences
  • Communications: messages sent to our support team

2.2 Data Collected Automatically

When you visit our website or use the platform, we automatically collect:

  • Usage data: pages visited, features used, time spent, click patterns
  • Technical data: IP address (anonymized), browser type and version, operating system, device type
  • Cookie data: as described in our Cookie Policy

2.3 Data from Third Parties

We may receive limited data from third-party services integrated with our platform (e.g., Google OAuth login), solely to create or authenticate your account.

3How We Use Your Data

We use your personal data for the following purposes:

PurposeLegal BasisRetention
Providing the platform and servicesContract performance (Art. 6.1.b GDPR)Duration of account + 1 year
Trial registration and accessContract performance (Art. 6.1.b GDPR)12 months
Sending service communicationsContract performance (Art. 6.1.b GDPR)Duration of account
Marketing & product updates (opt-in only)Consent (Art. 6.1.a GDPR)Until consent is withdrawn
Analytics & service improvementLegitimate interest (Art. 6.1.f GDPR)14 months (anonymized)
Legal and regulatory complianceLegal obligation (Art. 6.1.c GDPR)10 years (fiscal records)
Customer supportContract performance (Art. 6.1.b GDPR)3 years from last interaction

4Who We Share Your Data With

We do not sell your personal data. We may share it with the following categories of recipients:

4.1 Service Providers (Data Processors)

Google LLC Analytics (GA4), cloud infrastructure, optional OAuth login — Privacy Policy
Vimeo, Inc. Video hosting and playback — Privacy Policy
Email delivery providers Transactional and marketing communications
Hosting & infrastructure providers Secure storage and delivery of the platform

All processors are bound by data processing agreements (DPA) and are required to handle your data in accordance with GDPR.

4.2 Legal Authorities

We may disclose your data to public authorities when required by law, court order, or to protect our legal rights.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

5International Data Transfers

Some of our third-party service providers (such as Google) are based in the United States. When we transfer your data outside the European Economic Area (EEA), we ensure it is protected through appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where applicable
  • Data Processing Agreements with all processors

6Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Password hashing using industry-standard algorithms
  • Staff training on data protection and privacy

Despite our best efforts, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at support@wikipoint.co.

7Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods are outlined in Section 3.

When your data is no longer required, we securely delete or anonymize it so it can no longer be associated with you.

8Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

A

Right to Access

Request a copy of the personal data we hold about you.

R

Right to Rectification

Correct inaccurate or incomplete personal data.

E

Right to Erasure

Request deletion of your data ("right to be forgotten").

L

Right to Restrict

Limit how we use your data in certain circumstances.

P

Right to Portability

Receive your data in a structured, machine-readable format.

O

Right to Object

Opt out of processing based on legitimate interest or for marketing purposes.

W

Right to Withdraw Consent

Withdraw consent at any time without affecting prior processing.

C

Right to Lodge a Complaint

File a complaint with the Italian DPA (Garante Privacy) or your local supervisory authority.

To exercise any of these rights, please contact us at support@wikipoint.co. We will respond within 30 days of receiving your request.

9Cookies

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

10Children's Privacy

Our platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make significant changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Wikipoint S.r.l.

Via Galla Placidia, 12 — 20131 Milano, Italy

Email: support@wikipoint.co

PEC: wikipoint@pec.it

🔐 Quick Summary
  • We collect only the data we need to provide our services
  • We never sell your personal data to third parties
  • Marketing communications are opt-in only — you can unsubscribe at any time
  • Your data is protected with industry-standard security measures
  • You have full rights over your data under GDPR
  • Contact us anytime at support@wikipoint.co

Optional Meta campaign measurement

With separate Marketing consent, we use Meta Pixel to send page views and commercial clicks, together with technical browser and page information, to Meta for campaign measurement. We do not configure advanced matching or send contact form field values. You can withdraw consent in Cookie preferences. See Meta’s privacy policy and our Cookie Policy.

Analytics journey identifiers

With optional statistics or marketing consent, Wikipoint uses wp_journey_v1, a first-party cookie on wikipoint.com, to associate website actions with a social campaign. It expires after 30 minutes of inactivity and may be read by app.wikipoint.com for continuity. It contains a random journey identifier and campaign labels, not your name or email. Each measured action also has a random event identifier. These identifiers are sent to Google Analytics only with statistics consent and to Meta only with marketing consent. Refusing both categories removes this cookie. A journey identifier is not an account or authentication token.

Wikipoint
HomePrivacyCookies
© 2026 Wikipoint S.r.l.