Privacy policy

1. Data controller

The controller of the personal data collected through this website and the portal is Jagaad S.r.l., VAT no. IT11415770962, registered office at Via Copernico 38, 80125 Milano (MI).

Contact: email info@portalefatturazione.it, PEC legal@pec.jagaad.it.

2. Our role regarding invoice data

For the personal data contained in invoices and in the customer and supplier records that you enter or receive through the portal, Jagaad S.r.l. acts as data processor under Article 28 of Regulation (EU) 2016/679 (GDPR) on your behalf, as you are the controller. The terms of that processing are set out in the data processing agreement, available on request.

3. Data we process

We process the following categories of personal data:

• identification and contact data (first and last name, email, company name, VAT number, tax code, address, PEC, recipient code);
• account data (credentials, preferences, access logs);
• billing and payment data relating to the contract;
• data contained in messages sent through the contact form;
• technical browsing data (IP address, browser type, date and time of requests) recorded in server logs.

4. Purposes and legal bases

Data is processed for the following purposes:

• providing the e-invoicing service and managing your account and contract (Art. 6.1.b GDPR);
• complying with legal, tax, accounting and record-keeping obligations (Art. 6.1.c GDPR);
• replying to requests sent through the contact form or by email (Art. 6.1.b and 6.1.f GDPR);
• ensuring system security, preventing abuse and fraud and defending our rights (Art. 6.1.f GDPR).

We do not use data for profiling or automated decision-making.

5. Whether providing data is mandatory

Providing the data needed for registration and delivery of the service is mandatory: without it the account cannot be activated. Providing optional data is voluntary.

6. Recipients of data

Data may be disclosed, to the extent necessary, to:

• the Sistema di Interscambio (SdI) and the Italian Revenue Agency, to transmit electronic invoices;
• hosting, cloud infrastructure, email and long-term storage providers, appointed as data processors;
• professional advisors (accountants, lawyers) and competent authorities, where required by law.

Data is never sold or disclosed to third parties for their own purposes.

7. Transfers outside the EU

Data is normally processed within the European Economic Area. If a provider involves a transfer to third countries, this takes place only on the basis of a European Commission adequacy decision or appropriate safeguards such as standard contractual clauses.

8. Retention period

Account data is kept for the duration of the contract and afterwards for the time needed to establish or defend legal claims, within statutory limitation periods. Tax and accounting records are kept for ten years, as required by law. Contact form messages are kept for as long as needed to handle the request and in any case no longer than twenty-four months. Server logs are kept for a limited period consistent with security needs.

9. Your rights

You may at any time exercise the rights provided by Articles 15-22 GDPR: access, rectification, erasure, restriction of processing, data portability and objection. You may also withdraw any consent without affecting the lawfulness of prior processing.

To exercise your rights write to info@portalefatturazione.it or legal@pec.jagaad.it. We will reply within one month of your request.

10. Complaints

If you believe the processing breaches the law you may lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your Member State of residence.

11. Security

We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss and alteration, including encrypted communications, access control and regular backups.

12. Changes to this policy

This policy may be updated over time. The date of the latest update is shown at the top of the page; for material changes we will notify registered users.