tagtec

Privacy Policy for the TagTec app

English version. The Italian version is also available.

Introduction

This privacy notice, drawn up in accordance with Legislative Decree 196/2003 and Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), is intended for users of the TagTec mobile app (the “App”). It explains how personal data is processed when you download and use the App.

Data controller and Data Protection Officer

The data controller is TIpack Group SA, Via Campagna 34, 6982 Agno-Serocca, Switzerland (CHE-112.049.396). In accordance with Article 37 of the GDPR, the controller has appointed a Data Protection Officer (DPO), who can be contacted to exercise your rights or to request information about the processing of personal data:

Data processed and purposes of processing

The personal data processed by the TagTec App is provided directly by you. Using NFC (Near Field Communication) technology, the App lets you instantly share your contact information as well as your social channels, payment channels, documents, catalogues, price lists, websites and similar information. This information becomes accessible to the public through a landing page or by copying its URL. More precisely, you can share your:

You can restrict who sees your profile with the profile visibility setting in the App (everyone, only people you are connected with, or only you).

Data is processed in compliance with the Privacy Code and the GDPR, the decisions of the data protection authority, and the confidentiality obligations that govern the activities of TIpack Group SA. Data may be processed — also by duly authorised third-party companies — in order to:

  1. fulfil obligations arising from the contractual relationship or carry out your explicit requests;
  2. comply with obligations under laws, regulations and EU legislation, or with instructions from authorities entitled to give them by law and from supervisory and control bodies (for example obligations under anti-money-laundering or fraud-prevention rules using identity checks). Providing the personal data required for these purposes is mandatory, and this processing does not require your consent.

To provide the service, the App asks you to give it access to certain features and resources of your mobile device, specifically:

Consent for the purposes described above is not mandatory, but refusing it means that certain features, or the App itself, cannot be used; by activating the App you therefore give your informed consent. The software platforms that run apps (Apple App Store, Google Play) collect, in the course of their normal operation, certain data relating to you whose transmission is inherent in the use of internet communication protocols, smartphones and devices. TIpack Group SA is not involved in this processing and cannot be held responsible for it; please also refer to the privacy policies published by those platforms. In addition, TIpack Group SA may collect anonymous information solely to compile statistics on the number of users who have downloaded or use the App. Where cookies (technical or otherwise) are used, activating the App constitutes informed consent to them.

Sign in with Google and Sign in with Apple

You can create a TagTec account and sign in with your email address and a password, or with your Google account (“Continue with Google”) or your Apple ID (“Sign in with Apple”, on iPhone).

TagTec's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Access to personal data on your device

Depending on your device, this App may ask for certain permissions to access data on the device, as described below. You must grant these permissions before any information can be processed, and you can revoke them at any time in your device's system settings or by contacting TIpack Group SA at the contact details in this document. The way permissions are managed may vary depending on your device and software. Please note that revoking one or more permissions may affect how the App works. If you grant the permissions listed below, the related personal data may be processed (accessed, modified or removed) by this App.

Social media accounts

Used to access your social media accounts, such as Facebook and Twitter.

Contacts

Used to access the address book and profiles on the device, and allows their contents to be modified.

Location

Used to access the approximate location of your device. This App may collect, use and share your location in order to provide location-based services.

Camera

The App may use the device's camera to capture images and video, and whenever the QR code capture and recognition service is used (for example to use the card, pay a payment slip or read a restaurant menu). This permission is necessary because otherwise QR codes cannot be captured and processed.

Details on the processing of personal data

Personal data is collected for the following purposes and using the following services:

Downloading documents

The App lets you download certain documents to your device's memory, for example to read them or send them to others by email or messaging apps. Downloads happen only at your explicit request, and you should take appropriate precautions (for example use antivirus/anti-malware software, open downloaded documents only with trusted apps, and delete downloaded documents when you no longer need them).

How data is processed and shared

In addition to the above, personal data is processed with manual and electronic tools, using logic strictly related to the purposes stated. Data is kept only for as long as strictly necessary to achieve the purposes for which it was collected, and afterwards to comply with legal requirements. Specific security measures are in place to prevent data loss, unlawful or incorrect use and unauthorised access. No personal data from the web service is disclosed to the public, other than the profile information you choose to share. Data is processed by the controller's employees and collaborators acting as authorised persons, and may be communicated to the categories of recipients set out in Regulation (EU) 2016/679.

Deleting your account

You can delete your TagTec account at any time in the App under Settings → Delete account. This permanently deletes your account, your profiles, links and photos, and your connections with other users, and ends any Sign in with Google or Apple link. Records that we must keep (for example redeemed rewards) are anonymised. You can also request deletion by emailing privacy@tagtec.ch. More information: Account deletion.

Your rights

Under Articles 13 and 14 of Regulation (EU) 2016/679 you may exercise certain rights regarding the data processed by the controller. In particular, you have the right to:

Details on the right to object

When personal data is processed in the public interest, in the exercise of official authority vested in the controller, or to pursue a legitimate interest of the controller, you have the right to object to the processing on grounds relating to your particular situation. Where your data is processed for direct marketing purposes, you can object without giving any reason. To find out whether the controller processes data for direct marketing, please refer to the relevant sections of this document.

To exercise your rights, send a request to the controller's contact details in this document. Requests are free of charge and handled by the controller as quickly as possible, and in any case within one month.

Further information on processing

Legal defence

Your personal data may be used by the controller in legal proceedings, or in the preparatory stages leading to them, to defend against abuse of this App or its related services by the user. You acknowledge that the controller may be required to disclose data by order of public authorities.

Specific notices

At your request, in addition to the information in this privacy policy, this App may provide additional and contextual information about specific services or the collection and processing of personal data. Where links to content outside the App are provided, TIpack Group SA has no control over that content; please refer to the privacy policies of the sites concerned. Your personal data may be transferred outside the European Union only on the basis of an adequacy decision of the European Commission or other appropriate safeguards provided for by the GDPR (including binding corporate rules and standard data protection clauses).

System logs and maintenance

For operation and maintenance purposes, this App and any third-party services it uses may collect system logs, i.e. files recording interactions, which may also contain personal data such as your IP address.

Information not contained in this policy

Further information about the processing of personal data may be requested from the controller at any time using the contact details above.

Response to “Do Not Track” requests

This App does not support “Do Not Track” requests. To find out whether any third-party services used support them, please consult their privacy policies.

Changes to this privacy policy

The controller reserves the right to change this privacy policy at any time by notifying you on this page and, where possible, in this App and, where technically and legally feasible, by sending a notice to one of your contact details known to the controller. Please check this page regularly. Where changes affect processing based on consent, the controller will collect your consent again if necessary.