Privacy Policy

1. Data Controller Information

The processing of personal data is performed by PIKLOK S.R.L. (“Data Controller”), with registered offices at Via Libertà, III Traversa a destra, n.7, 80055 Portici — Napoli, Italy, through its legal representative.
Mail: privacy@piklok.com · Phone: +39 351 820 3202

2. Data Protection Officer

PIKLOK S.R.L. has appointed a Data Protection Officer (“DPO”) pursuant to Article 37 GDPR. To exercise the rights listed in this document, you can contact the DPO:
Name: Matteo Russo · Phone: +39 351 820 3202 · Email: matteo.russo@piklok.com

3. Data Processed

The categories of personal data actually collected and processed through the Validask platform are:

• Account data — name, email address, and profile photo, provided when you create an account.
• Page content — display name, bio, questions and answers, section names, contact details, avatar images, and any other content you choose to publish on your Q&A page(s).
• Billing data — your subscription plan and status. Full payment card details are collected and processed directly by Stripe, our payment processor, and are never stored by Validask itself.
• Usage / analytics data — anonymous, aggregated page views and question-opens per page. Never linked to a specific visitor’s identity, session, or device, and collected without tracking cookies.

4. Purposes

Personal data can be processed for the following purposes:

• providing and operating the Platform’s core service;
• processing subscription payments and managing billing;
• providing customer support;
• accounting, tax, and law reporting obligations;
• management of legal controversy and litigation;
• internal checks and monitoring to prevent abuse of the Platform.

5. Communication or Transfer of Data to Third Parties

• Firebase / Google Cloud (Google LLC) — hosting, authentication, database, and file storage.
• Stripe — payment processing for paid subscriptions.
• Resend — delivery of transactional emails (e.g. booking-request notifications).
• Chartered accountants — accounting, tax, and law reporting obligations.
• Legal practice firms — management of legal controversy and litigation.
• Postal services — mail delivery, where applicable.

6. How Data Are Processed

Personal data are processed through automated and manual activities using IT tools, consistent with the purposes above and using appropriate security measures. We require third-party providers to guarantee the same processing standards and perform continuous monitoring of their activities.

7. Where Data Are Stored

Data are primarily stored electronically on Firebase / Google Cloud infrastructure, with data centers located within the European Union where available, using appropriate security measures to preserve confidentiality, integrity, and availability.

8. Period for Which the Personal Data Will Be Stored

Data are stored for no longer than necessary for the purposes they were collected for. If you delete your account from your dashboard’s Settings, your account data, pages, and content are deleted at that time, except for the minimum billing/accounting records we are legally required to retain — never exceeding 10 years after the relationship ends.

9. Data Subject Rights

You can exercise the following GDPR rights at any time by writing to privacy@piklok.com or matteo.russo@piklok.com. Many of these — including access to and deletion of your account data — can also be exercised directly from your dashboard’s Settings, without a written request.

• Right of access — confirmation of whether your data is processed, and access to it.
• Right to rectification — correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — subject to legal retention exceptions.
• Right to restriction of processing, in the cases set out in Article 18 GDPR.
• Right to data portability, for data based on consent, contract, or automated processing.
• Right to object to processing based on our legitimate interest, including profiling.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) — Piazza Venezia n. 11, 00187 Roma; PEC: protocollo@pec.gpdp.it; www.garanteprivacy.it.

10. Necessity of Providing Data

Providing your name and email address is necessary to create an account and receive the Platform’s services — this is the legal basis for the service itself and doesn’t require separate consent. Without this data, we cannot create your account.

11. Data Subject Obligations

We ask that you respect the principles on data processing set out in the GDPR and all other applicable legal obligations. In the event of non-compliance, PIKLOK S.R.L. may suspend the relationship between the parties.

Declaration. Explicit consent for non-contractual processing activities (such as marketing, profiling, or optional third-party cookies) is collected exclusively via specific, un-pre-checked options during registration or via the cookie consent banner on the Platform, in accordance with GDPR requirements.

PIKLOK S.R.L. — Via Libertà, III Traversa a destra, n.7, 80055 Portici — Napoli, Italia
VAT Code 09545701212 — Reg. Number NA-1040209