Bellevila (tax ID and contact details to be indicated by the operator). Privacy contact email: info@bellevila.com.
We process your data to create, publish and maintain your website, manage the subscription and billing, and communicate with you about the service. Legal basis: performance of the contract (art. 6.1.b GDPR) and, where applicable, your consent (art. 6.1.a) and legitimate interest in the security of the service (art. 6.1.f).
To provide the service we rely on providers acting as processors, grouped by categories:
Some providers may process data outside the European Economic Area; in that case the appropriate safeguards provided for by the GDPR apply (standard contractual clauses or equivalent).
We keep your data for as long as the contractual relationship lasts and, after its termination, for the legally required periods (tax, commercial). The data of an expired demo is deleted within approximately 30 days.
You can exercise the rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw your consent, by writing to the privacy contact email. You may also lodge a complaint with the competent supervisory authority if you consider that the processing does not comply with the regulations.
We apply reasonable technical and organisational measures to protect your data. Last update: draft.
We store in your browser only what the site needs to work: your language, whether you prefer light or dark mode, and your own cookie decision. That identifies nobody and never leaves your device.
Anything else, such as measuring how the site is used or knowing which ad brought you here, is only switched on if you accept it in the cookie notice, and until then nothing is loaded and nobody is contacted. You can change or withdraw that decision whenever you like from the Cookies link in the footer, where you will also find the detail of what is stored in each case.
The three tools that depend on that decision are explained one by one in sections 9, 10 and 11.
To see where people get stuck and improve the site we use Microsoft Clarity, a Microsoft tool that records how the page is used (where you move the pointer, how far you scroll, where you click and which pages you go through) and builds heatmaps out of those visits. It is not a survey and it is not a profile: it is the replay of a visit, with no name on it.
What you type is not recorded. Microsoft always masks the content of form fields and drop-down menus, in every one of its recording modes, and in the mode it applies by default it also masks what it classifies as sensitive, namely numbers and email addresses. On our side we have not marked any element of the site to be recorded unmasked.
Clarity is only loaded if you accept usage measurement in the cookie notice. Until then nothing is requested from Microsoft and none of its cookies are stored. If you accept, it stores the cookies _clck and _clsk in your browser, plus one more on its own domain, so that the same visit is not counted twice. If you later withdraw your permission, those cookies are deleted and the recording stops.
The data from this tool is processed by Bellevila and Microsoft. You can read Microsoft's privacy information at privacy.microsoft.com.
On top of the above we keep our own log, on our own server, of six navigation steps: viewing the home page, using the calculator, opening the sign-up fee breakdown, clicking the button to create the site, reaching the form and submitting it. It tells us at which step people stop.
Each entry stores the date and time, which of the six steps it was, the path of the page without anything after the question mark, the language of that page, an optional short detail (the identifier of the plan whose breakdown was opened) and a random session number generated by your browser that is erased when you close the tab.
It does not store your IP address, your email, the browser you use, the page you came from, or any free-text field. There is no way to tell who you are from those entries, nor to link two of your visits made on different days. They are kept for ninety days and then deleted automatically.
This log also depends on your accepting usage measurement: without that permission your browser never sends anything at all.
The site has a chat for questions before you subscribe. It is provided by an external supplier, Gnosari, and it runs on a component of theirs loaded from app.gnosari.com.
The chat is not in the cookie notice because it is not loaded in advance. The bubble you see is drawn by us and asks nothing of anybody; when you press it we explain what is about to happen and ask your permission for that specific service. The supplier's component is only loaded if you accept.
Once you accept, the supplier stores information in your browser and the conversation is recorded in their systems, where we can read it in order to answer you and to improve our replies. Bear in mind that whatever you write in the chat stays there: it is not the place for health data, identity documents or card details.
You can withdraw your permission whenever you like from the Chat: withdraw permission link in the footer, which appears as soon as you have granted it. The legal basis is your consent (art. 6.1.a GDPR).