This privacy policy describes how Pygmalion LLC ("Pygmalion", "we", "us") collects, uses, and protects personal data of users of the website pygmalion.dev and related services (the "Service"). This information does not concern other websites, pages, or online services that can be accessed through hyperlinks possibly published on the site but relating to resources outside our domain.
This policy may be modified from time to time due to the activation of new services or following legal updates, therefore it is advisable to periodically check for any news by consulting this page.
1. DATA CONTROLLER
The Data Controller of personal data is Pygmalion LLC, an LLC incorporated under the laws of the State of Nevada, USA (Entity ID E51727272025-3), located at 732 S 6th ST, STE N, Las Vegas, NV 89101, USA - email: hello@pygmalion.dev
2. PERSONAL DATA PROCESSED, PURPOSES, AND LEGAL BASIS OF PROCESSING
- Browsing data
The computer systems and software procedures used for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes:
- IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources;
- the time of the request;
- the method used to submit the request to the server;
- the size of the file obtained in response;
- the numerical code indicating the status of the response given by the server;
- and other parameters relating to the user's operating system and computer environment.
These data, necessary for the use of web services, are processed for the purpose of:
- obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or daily, geographical areas of origin, etc.);
- ascertaining responsibility in case of hypothetical computer crimes against the site;
- improving navigation and content of the site.
The legal basis for these processing activities is our legitimate interest, and for residents of the European Economic Area the legitimate interest of the Data Controller under Art. 6.1 letter f) GDPR.
- Data voluntarily provided by the user
The optional, explicit, and voluntary sending of messages to our contact addresses as well as the filling out and submission of forms on the site involves the acquisition by us of data such as, but not limited to:
- name, surname;
- email address;
- records of your interactions with us (e.g., if you contact our customer service).
These data will be processed for the following purposes:
- to identify the product most suitable for your needs;
- legal basis: consent of the data subject (and, for EEA residents, under Art. 6.1 letter a) GDPR);
- registration and authentication of user profiles;
- legal basis: execution of a contract to which the data subject is party or of pre-contractual measures taken at the request of the same (and, for EEA residents, under Art. 6.1 letter b) GDPR);
- to conduct direct marketing;
- legal basis: our legitimate interest, or consent of the data subject where required (for EEA residents, legitimate interest or consent under Art. 6.1 letter a) GDPR);
- administrative and accounting fulfillments, such as invoicing; managing payments; communication of the same data between group companies, for organizational, administrative, financial and accounting purposes internal to the activities described above;
- legal basis: the need to fulfill a legal obligation (and, for EEA residents, under Art. 6.1 letter c) GDPR) and our legitimate interest in the administrative management of the contractual relationship (and, for EEA residents, under Art. 6.1 letter f) GDPR);
- management of customer service, consisting in responding to any question or complaint to our customer service;
- legal basis: our legitimate interest (and, for EEA residents, under Art. 6.1 letter f) GDPR);
- exercise and/or defense of rights in judicial proceedings, such as management of any legal disputes, directly or through third parties (lawyers/agencies/companies for debt recovery);
- legal basis: our legitimate interest (and, for EEA residents, under Art. 6.1 letter f) GDPR).
- Cookies and other tracking systems. The data possibly acquired through cookies, and the methods for their management, are fully described in the document "cookie policy", which we recommend viewing.
3. DATA PROCESSING METHODS
The processing of personal data may be carried out with the aid of both analog and electronic means, with methods and procedures strictly necessary for the pursuit of the purposes described above.
4. DATA RETENTION PERIOD
Data is processed and stored for the time required by the purposes for which it was collected, therefore:
- Personal Data collected for purposes related to the execution of a contract between us and the User will be processed for the duration of the contractual relationship and, after its termination, until the expiration of the applicable statute of limitations of the rights arising between the parties. In the case of judicial disputes, for the entire duration of the same, and until the final decision of the court;
- Personal Data collected for purposes attributable to our legitimate interest will be retained until the satisfaction of such interest. The User can obtain further information regarding the legitimate interest pursued by us in the relevant sections of this document or by contacting us;
- when the processing is based on the User's consent, we will retain the Personal Data until such consent is revoked. Moreover, we may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
5. SCOPE OF COMMUNICATION, SUBJECTS AUTHORIZED TO PROCESS DATA
Data may be processed by employees appointed to pursue the above-mentioned purposes, in their capacity as authorized persons.
The Data are not subject to disclosure, but may be processed, on our behalf, by external parties designated as data processors, who perform specific activities on our behalf, for example, third-party technical providers whose knowledge of the data is necessary for the performance of their task of developing and maintaining the web platform, as well as legal, tax, and administrative consultants.
The data may also be communicated to public or private entities authorized to process them as independent data controllers (e.g., public administrations, banks and credit institutions, accountants, notaries, lawyers, and other professionals).
6. PROVISION OF DATA
The provision of personal data is optional. However, the refusal to provide personal data will result in the impossibility for us to activate the relevant personal account and/or offer the services of the Site.
7. RIGHTS OF THE DATA SUBJECT
Applicable data protection legislation guarantees the data subject the right to be informed about the processing of Data and the right to access their Data at any time and request its update, integration, and correction. Where conditions provided by the legislation apply, the data subject may also claim the right to the deletion of Data, limitation of their processing, portability of Data, opposition to processing, and not to be subject to decisions based solely on automated processing.
Should the processing of Personal Data be based on the consent of the data subject, they have the right to revoke such consent without affecting the lawfulness of the processing based on the consent given before the revocation.
To exercise their rights, as well as for more detailed information about the processing of Data, the data subject can contact us using the contacts indicated in this policy.
For residents of the European Economic Area, these rights are set out in Articles 12-22 GDPR, and a complaint may be lodged with the competent Data Protection Authority. For residents of the United States, a complaint may be lodged with the Attorney General of your state of residence or other competent authority.