Table of Contents
Privacy Policy
Last updated: 2026-05-23 • v2026.05
1. 1. Data Controller and Contact Information
ItaliaUp acts as the Data Controller under the General Data Protection Regulation (GDPR). Our platform is designed to assist users with immigration, taxation, and subsidy processes in Italy. For any privacy-related inquiries, data deletion requests, or exercises of your rights, you can contact our Data Protection Officer at privacy@italiaup.it.
2. 2. Categories of Personal Data Collected
To provide accurate assessments, we collect: a) Identity & Contact Data (Name, Email, Google Profile data); b) Immigration Data (Permesso di Soggiorno type, expiry dates); c) Financial & Housing Data (ISEE brackets, rental contracts, family size); d) Business Data (Partita IVA details, ATECO codes). We do not collect sensitive health or biometric data unless explicitly required for specific disability subsidies.
3. 3. Legal Basis and Purpose of Processing
Your data is processed based on: a) Your explicit consent when submitting quizzes; b) The necessity to fulfill our service terms (calculating eligible bonuses and deadlines); c) Legitimate interests in improving platform security and user experience. Data processing is strictly limited to generating your personalized migration and tax roadmap.
4. 4. Data Storage, Processors, and Security
We employ industry-standard encryption (AES-256 for data at rest and TLS 1.3 for transit). Our primary infrastructure partners acting as Data Processors are Supabase (database) and Vercel (hosting). All personal data is physically hosted within European Union data centers (primarily Frankfurt, Germany) to ensure strict GDPR compliance. Telegram integration involves the secure storage of your telegram_chat_id solely for sending personalized notifications; you may unlink it at any time. We will never sell your data to third-party marketers.
5. 5. Your GDPR Rights
Under Chapter 3 of the GDPR, you have the right to: 1) Access your data; 2) Rectify inaccurate information; 3) Request erasure (Right to be Forgotten) directly through your profile dashboard; 4) Restrict processing; 5) Data portability (exporting your profile data). You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).