Privacy Policy

This is a courtesy translation; in case of discrepancy, the Italian version prevails. The Italian text is the one that binds, and it is available on the Italian version of this page.

Claudio Rubbiani — Via Saffi, 35 — 41125 Modena (Italy) — VAT no. IT04107830368. For anything concerning this notice: claudio@precisino.it.

No Data Protection Officer (DPO) has been appointed: the processing does not fall within the cases in which art. 37 GDPR makes it mandatory. Requests therefore reach the controller directly, at the address above.

The public pages — the presentation, the pricing, the demo — ask for nothing and profile no one. The systems that serve them record, as every web server does, the technical connection data (IP address, browser type, page requested, time): they serve security and the working of the service, and they are not used to recognise you.

If you accept in the banner we use Google Analytics 4, which writes cookies on your device and makes it possible to tell visits apart. Legal basis: your consent (art. 6.1.a GDPR), which you may withdraw whenever you like by deleting the site's cookies. Without consent Google's script is not even downloaded. The data goes to Google Ireland Limited, with the transfer to the United States governed by the Standard Contractual Clauses and by the Data Privacy Framework; the IP address is truncated and the advertising consents remain denied, so that data does not feed advertising profiling.

If you write to us — by email or by telephone — we process what you send us in order to reply to you. Legal basis: our legitimate interest in answering those who look for us, and the pre-contractual steps you ask of us (art. 6.1.f and 6.1.b GDPR).

The photo you upload serves one purpose only: to calculate the verdict and show it to you. We do not use it to train models, we do not show it to anyone else and we do not sell it. Legal basis: the pre-contractual measures you yourself ask for, that is, trying out the service (art. 6.1.b GDPR).

Do not upload photos with recognisable people, documents, number plates or health data: the photo must show a piece of work, not a person. If we notice, we delete it.

Photos from the demo and the trial are deleted within thirty days. We also record the IP address and the time of upload, to defend us against automated submissions: legitimate interest (art. 6.1.f), deleted after 90 days.

Name, email, telephone and industry serve to call you back, and nothing else. Legal basis: the pre-contractual measures you yourself ask for (art. 6.1.b GDPR) — calling you back at your own request needs no consent, and indeed we ask you for none.

The request comes to us, and we call you back ourselves. There is no newsletter and no disclosure to third parties. If you change your mind, just ask: everything is deleted. The whole request is kept for 24 months.

We process the data needed to make the service work: the account data (name, email), the company's data (industry, plan), the reference photos and the checklists you write, the photos taken by whoever does the work and the verdicts that come out of them.

Legal basis: performance of the contract (art. 6.1.b GDPR) and, for security and the prevention of abuse, legitimate interest (art. 6.1.f). Billing data is processed to comply with a legal obligation (art. 6.1.c).

Precisino has no field in which to write the data of your company's end customers: what you pass in `metadata` is up to you, and what you put there stays yours. The photographs concern jobs, spaces and equipment. Photographing people is not provided for by the service, and those who work with it are asked not to do so.

Precisino records which photo arrived, when, and with which operator label: that is what is needed to know whether a job has been done as it should be. It is workers' data, and it must be handled as such.

In the relationship with the company's employees the data controller is the employer: it is the employer who must give them the privacy notice and comply with the obligations of art. 4 of Law no. 300/1970 (the Italian Workers' Statute: union agreement or authorisation from the Labour Inspectorate where these are required). With respect to that data Precisino acts as a data processor pursuant to art. 28 GDPR.

The service is built so as not to become an electronic tag: no real-time location, no rankings between people, no piecework. What is recorded is the state the work was in, not how the person moved.

Vercel Inc. (United States) — publication and delivery of the site and of the application.

Google Ireland Limited — Google Analytics 4, only for those who have accepted in the banner. It is the only processing on these pages that depends on a consent, and it is the only one that can be taken away without taking away the service.

Supabase (infrastructure in the European region) — database, authentication and storage of the photographs.

Resend (United States) — sending of service emails: the link to get back into the trial, the contact requests.

Anthropic PBC (United States) — the model that performs the photo check. It receives the photograph and the reference photo to compare it with, and it returns the assessment; it does not use this material to train its own models.

Each one is appointed data processor pursuant to art. 28 GDPR. For non-EU providers the transfer takes place on the basis of the European Commission's Standard Contractual Clauses and, where applicable, of the adherence to the Data Privacy Framework.

The account data and the company's data remain for as long as the relationship is in place, and for the twelve months following its closure, so that a reactivation does not start again from zero. Then they are deleted.

Tax documents are kept for the ten years that the law requires. The technical security logs remain for twelve months at most.

Early deletion may be requested at any time, save for what we are required by law to keep.

You may ask for access to your data, its rectification or erasure, the restriction of or the objection to the processing, and portability (Articles 15–22 GDPR). You write to claudio@precisino.it and we reply within thirty days.

If the reply does not satisfy you, you may turn to the Italian Data Protection Authority — Garante per la protezione dei dati personali (garanteprivacy.it) — or to the authority of the country in which you live.

If you work in a company that uses Precisino and the request concerns the data of your work, the shortest way is your employer: the employer is the controller of that data. We assist them, and we cannot act in their place.

If this notice changes substantially we say so by email to those who have an active account, before the change takes effect. The date at the bottom of the page always tells when the version you are reading dates from.