Privacy policy

This website

• No cookies, not even for visit statistics (see below): that is why there is no consent banner.
• The sign-in pages and the account console, which live at another address, use only the technical cookies needed for the session and to protect sign-in.
• No resources from third parties: fonts, styles and images are served by us.
• The web server logs requests without your IP address.
• If you choose a theme, the choice stays in your browser (local storage) and is never sent.

Visit statistics

• We count visits with Matomo, installed and run by us on our own infrastructure in the European Union: no data goes to third parties.
• Matomo works without cookies (that is why no consent banner is needed) and anonymises the IP address: it keeps only the first 2 bytes.
• It records the page visited, where the visit came from (referrer), the language and the type of browser and device, and the time.
• This tells us which pages are read and helps us improve the site. The legal basis is legitimate interest (Article 6(1)(f) GDPR); you can object (Article 21 GDPR) by writing to us as described below, under “Your rights”.
• Data on individual visits is deleted automatically after 180 days; only aggregated, anonymous statistics remain (for example, the number of visits per page).

The oneid24 service: which data

• Name, email address, membership of organisations and roles.
• Password in non-reversible form; the secret of the second factor; recovery codes.
• Sign-in events (sign-in, failure, sign-out, password and second factor changes) with time and IP address.
• The log of operations performed by administrators.

Why

To let you sign in to Megistone products and to protect your account. The data is processed to provide the service you use (Article 6(1)(b) GDPR) and, for event logs, for the security of the service (Article 6(1)(f) GDPR). It is not used for advertising and it is not sold.

Where and for how long

The data stays in the European Union. Account data is kept while the account exists; the retention period for sign-in events is being defined and will be stated here before the service opens.

Your rights

You can request access, rectification, erasure, restriction and portability of your data, and object to processing, by writing to us from the contact page. You also have the right to lodge a complaint with your data protection authority.

Company details

Company name

MEGISTONE SRL

Registered office

Via Andrea Peyron 15, 10143 Torino (TO), Italia

VAT number

IT12721830011

Company register

TO1311480

Share capital

€20,000, fully paid up