Privacy Policy

Last updated: January 08, 2025

Table of Contents

This privacy policy describes how STUDIO 09 di Stefano Grieco & C. SNC ("we", "our" or "us") collects, uses and protects the personal information of users of the Usabilis plugin and related services.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) 2016/679 and other applicable data protection laws.

1. Data Controller

STUDIO 09 di Stefano Grieco & C. SNC

Via Pietro Borgognoni, 15
51100 Pistoia
Italy

VAT: IT01710080472
Email: privacy@studio09.it
PEC: studio09@pec.it
Phone: +39 0573 308519

2. Data Collected

2.1 Customer Account Data

When you purchase a license or create an account, we collect:

  • First and last name
  • Email address
  • Billing data (company name, VAT/Tax ID, address)
  • Payment information (processed by secure payment providers)
  • Phone number (optional)

2.2 Plugin Data

The plugin automatically collects:

  • Domain URL where the plugin is installed
  • WordPress version used
  • Installed plugin version
  • Unique site ID (automatically generated)
  • License key used

2.3 Usage Data

To improve the service, we collect anonymously:

  • Widget usage statistics (number of opens, features used)
  • Most used accessibility settings
  • Errors and technical issues encountered
  • IP address (anonymized)

Important: End-user accessibility preferences are saved exclusively in the local browser (localStorage) and are never transmitted to our servers.

3. Purposes of Processing

We use your personal data for:

Purpose Type of Data Legal Basis
License and activation management Account data, plugin data Contract performance
Service provision Plugin data, usage data Contract performance
Technical support Account data, communications Contract performance
Billing and payments Billing data Legal obligation
Service improvement Anonymous usage data Legitimate interest
Service communications Email Contract performance
Newsletter (if subscribed) Email Consent

4. Legal Basis for Processing

We process your personal data based on:

  • Contract: processing is necessary for the performance of the license contract
  • Legal obligation: to comply with fiscal and administrative obligations
  • Legitimate interest: to improve our services and prevent fraud
  • Consent: for sending marketing communications (if provided)

5. Data Retention

We retain your personal data for the time necessary to provide services and comply with legal obligations:

  • Account data: for the entire duration of the contractual relationship + 10 years
  • Billing data: 10 years as required by Italian tax law
  • Usage logs: 12 months
  • Support communications: 24 months from last interaction
  • Marketing data: until consent withdrawal

6. Data Recipients

Your personal data may be shared with:

6.1 Service Providers

  • Hosting: Genesys Informatica s.r.l. (Italy) - for site and data hosting
  • Email: Genesys Informatica s.r.l. - for email communications
  • Payments: Stripe - to process payments
  • Analytics: Google Analytics (anonymized data)

6.2 Other Recipients

  • Competent authorities when required by law
  • Professional consultants (accountant, lawyers) bound by confidentiality obligation

Non-EU Transfers: Some providers (like Google) may transfer data outside the EU. In these cases, we only use services that offer adequate guarantees (Standard Contractual Clauses, Privacy Shield, etc.).

7. Your Rights

Under the GDPR, you have the following rights:

Right of access

Request a copy of your personal data

Right to rectification

Correct inaccurate or incomplete data

Right to erasure

Request deletion of your data ("right to be forgotten")

Right to restriction

Limit the processing of your data

Right to portability

Receive your data in a structured format

Right to object

Object to processing for direct marketing

To exercise these rights, contact us at: privacy@studio09.it

You also have the right to lodge a complaint with the supervisory authority (Data Protection Authority).

9. Data Security

We implement appropriate technical and organizational security measures to protect your data:

  • SSL/TLS encryption for all communications
  • Encryption of sensitive data in the database
  • Limited data access only to authorized personnel
  • Regular backups and disaster recovery procedures
  • Continuous monitoring of suspicious activities
  • Regular security updates

10. Changes to this Policy

We may update this policy periodically. In case of substantial changes:

  • We will notify you via email
  • We will post a notice on the website
  • We will update the "last updated" date

We recommend you periodically review this page for any updates.

Contact

For any privacy questions or to exercise your rights, contact us:

Email: privacy@studio09.it
Phone: +39 0573 308519
Address: Via Pietro Borgognoni 15, Pistoia (PT)

© 2026 STUDIO 09 - All rights reserved