Who is the controller
SOFTSIGNALS S.r.l.s., Via Biagio Pelacani 2, 43123 Parma (PR), Italy, VAT IT03147650349, REA PR-371794.
Email info@softsignals.it · PEC softsignals@pec.it.
We have not appointed a Data Protection Officer (DPO): it is not required for our activity.
This policy does not cover the employee data a company manages inside Qrario: the company is the controller of that data, and SoftSignals processes it only on the company's behalf, as a processor.
What data, why and for how long
| When | Data | Why and legal basis | How long |
|---|---|---|---|
| You visit the site | IP address, date and time, requested page, browser | Running the site and protecting it from abuse. Legitimate interest (Art. 6.1.f). | Server logs: 14 days at most |
| You write to us through the contact form | First name, last name, email, company (optional), message | Replying to your request and, if you want, preparing a quote. Pre-contractual steps you asked for (Art. 6.1.b). | As long as the request needs; if no relationship follows, 24 months from the last exchange at most |
| You submit the form (anti-spam) | Hash of the IP address and email, country derived from the IP | Limiting repeated submissions and blocking spam. Legitimate interest in security (Art. 6.1.f). The country is looked up on our own server, without external services. | 24 hours |
| You sign up for the Qrario trial | Company name, first name, last name, email, IP address, date and version of the accepted documents | Creating the account and confirming the email; proving you accepted the documents; preventing abuse. Contract and pre-contractual steps (Art. 6.1.b), legitimate interest in security (Art. 6.1.f). | Unconfirmed request: 30 days. Active account: for the whole contract |
| You use your Qrario account | First name, last name, email, credentials | Managing the account and subscription, sending service notices (trial ending, payments). Contract (Art. 6.1.b). | Contract duration plus 30 days |
| You subscribe and pay | Company name, VAT number, address, billing email, payment history | Collecting fees and issuing invoices. Contract and legal obligations (Art. 6.1.b and 6.1.c). | 10 years for accounting records (Art. 2220 of the Italian Civil Code) |
| You ask for support | The data you send us by email or from the Support section | Answering requests. Contract (Art. 6.1.b). | 24 months after the request is closed |
| You accept analytics | Pages visited, device, approximate location | Counting visits with Google Analytics. Only with your consent (Art. 6.1.a). Details in the cookie policy. | 14 months after your last visit |
We don't use your data for marketing, we don't sell it and we don't make automated decisions about you.
Who processes it for us
Only authorised SoftSignals staff see the data. Some providers process it on our behalf, as processors (Art. 28 GDPR), and only as far as needed:
| Provider | What it does | Data |
|---|---|---|
| Hetzner Online GmbH, Germany | Servers for the site and Qrario | All of the above |
| SMTP2GO | Sending emails (contact form, Qrario emails) | Name, email, message content |
| Zoho Corporation B.V., Netherlands | Mailbox where we receive messages | Name, email, message content |
| Superbill | Electronic invoicing | Billing data |
| Functional Software, Inc. (Sentry), EU region | Technical error reporting for Qrario | Technical identifiers |
| Google Ireland Ltd. | Google Analytics, only with your consent | See the cookie policy |
Stripe Payments Europe Ltd. (Ireland) collects Qrario payments as an independent controller, under its own privacy policy.
We may disclose data to authorities when the law requires it and to our advisers (accountant, lawyer), who are bound to confidentiality, for their tasks.
Transfers outside the EU
Some providers (Google, Sentry, SMTP2GO) belong to groups based outside the European Union. When data leaves the EU, it goes to countries covered by a European Commission adequacy decision (such as the EU-U.S. Data Privacy Framework for the United States) or under the Standard Contractual Clauses approved by the Commission. You can ask us for a copy of the safeguards at info@softsignals.it.
Your rights
At any time you can ask us for:
- access to your data and a copy of it;
- correction of inaccurate data;
- erasure, when the law no longer requires us to keep it;
- restriction of processing;
- portability of the data you gave us;
- to stop processing based on our legitimate interest (objection);
- to withdraw consent, without affecting processing already carried out.
Write to info@softsignals.it: we reply within one month. You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
Do you have to give us your data?
No, but without the data requested in the contact form we can't reply, and without the data in the sign-up form we can't activate Qrario.
Changes
We publish every update here, with the date at the top. If the changes are significant, we notify Qrario account owners by email.