Privacy Policy (GDPR)

Your privacy is our top priority. This policy describes how TagBack.it collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) of the European Union.

1. Data Controller

The data controller responsible for processing your personal data is the TagBack.it team.

2. Collected Data and Purposes of Processing

We collect the following personal data for the specified purposes:

• Registration Data: During registration, we collect your first name, last name, and email address. This data is necessary to create and manage your account, ensure your security, and send you service-related communications. The legal basis for this processing is the execution of the service contract.
• Finder Report Data: When a user finds an item, they can optionally provide their email address and/or mobile phone number. This data is collected with your explicit consent for the sole purpose of allowing the owner of the item to be contacted. The finder's email and phone number are visible exclusively to the owner of the lost item.
• Access and Registration Data via Google: If you choose to register or log in using your Google account, we collect your first name, last name, and email address. This data is used exclusively to create your profile, authenticate you securely, and allow you to manage your tags. The use of data received from Google APIs will comply with the Google API Services User Data Policy, including Limited Use requirements.

3. Data Sharing with Third Parties

Your personal data is not sold, rented, or shared with third parties for commercial purposes. However, to optimize the service, we may share anonymized and aggregated data, as well as specific data with Data Processors for service purposes.

• Trustpilot: To manage and request reviews regarding our service, we share your name and email address with Trustpilot A/S, located at Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark. The legal basis for this processing is our Legitimate Interest in improving and promoting our services. Trustpilot acts as a Data Processor for sending invitations. For published reviews, Trustpilot acts as an independent Data Controller. We invite you to consult Trustpilot's Privacy Policy (https://it.legal.trustpilot.com/for-reviewers/end-user-privacy-terms/2).
• Google Analytics: To understand how our service is used and to improve its performance, we use Google Analytics. This service collects data in an anonymous and aggregated form, such as the number of visitors, most viewed pages, and traffic origin.
• Google AdSense: To support the operational costs of the service, we display advertisements via Google AdSense. Google, as a third-party vendor, uses cookies and tracking technologies to display personalized ads based on your interests.

4. Data Retention

Your personal data is retained only for as long as strictly necessary to achieve the purposes for which it was collected. Specifically:

• We retain your registration data as long as your account is active.
• If you do not log in for a period of one year, the account is marked as "dormant" and a notification will be sent to you. If no login occurs for an additional 6 months, the account and all associated personal data will be permanently deleted from our systems. Once deleted, they cannot be recovered.

5. Your Rights

As a user, you have the right to:

• Right of Access: Request and obtain a copy of your personal data held by us.
• Right to Rectification: Request the correction of incomplete or inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data from our systems.
• Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to the processing of your personal data under certain circumstances.

You can exercise these rights by submitting a request through our support system.