The Data Controller is Vascend Technologies S.r.l., with registered office in Italy. For any request regarding the processing of personal data, you can contact us at: privacy@vascend.it.

We collect the following categories of personal data: - Identification data: name, surname, email address, phone number - Business data: company name, role, company size - Browsing data: IP address, browser type, pages visited, access time - Voluntarily provided data: information entered in contact forms or during account registration

Personal data is processed for the following purposes: - Account registration and management - Provision of requested services and customer support - Compliance with legal and tax obligations - Aggregate and anonymous statistical analysis to improve our services - Sending commercial communications (with explicit consent)

The processing of personal data is based on the following legal grounds: - Consent of the data subject (Art. 6(1)(a) GDPR) - Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) - Compliance with legal obligations (Art. 6(1)(c) GDPR) - Legitimate interest of the Controller (Art. 6(1)(f) GDPR)

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case no longer than the terms provided by applicable law. Account data is retained for the duration of the service relationship or until consent is withdrawn.

Personal data is not sold to third parties. It may be shared with: - Technology service providers (hosting, email, analytics) acting as Data Processors - Competent authorities when required by law - Professional consultants bound by confidentiality obligations

Pursuant to Articles 15-22 of the GDPR, the data subject has the right to: - Access their personal data - Obtain rectification of inaccurate data - Obtain erasure of data (right to be forgotten) - Restrict data processing - Receive data in a structured format (portability) - Object to processing - Withdraw consent at any time - Lodge a complaint with the Data Protection Authority

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction or alteration. These include: encryption of data in transit and at rest, access controls, continuous monitoring and periodic audits.

Personal data is processed and stored on servers located in the European Union. Should it be necessary to transfer data outside the EU, we will ensure that adequate safeguards are adopted pursuant to Articles 46-49 of the GDPR.

To determine the approximate geographic location from an IP address we use the DB-IP Lite database, distributed by DB-IP (https://db-ip.com) under the Creative Commons Attribution 4.0 International licence (CC BY 4.0). The data serves two purposes: telling you where a sign-in to your account came from, so that you can recognise unauthorised access, and suggesting the interface language on first load. Lookups happen on our own servers, without sending your IP address to any third party: the database is installed locally. The resulting location is approximate and does not identify a physical address.

The community map (vascend.it/community/mappa) shows the members of our Discord server who choose to appear on it. - How to join: only by the member's own choice, with the /mappa entra command and the consent checkbox, or by asking Claude on Discord and confirming with the button under the preview. Nobody can add other people. - Published data: the town (or city, outside Italy) given by the member, shown at its centre and never at a precise location; Discord name, avatar and status (online, away, do not disturb, offline), kept up to date by the server; the description and up to three links written by the member. They become visible to anyone visiting the website. - What we do not ask for: home address and contact details. Addresses, phone numbers or other contact details must not be written in the description: the bot rejects descriptions that contain them. - Legal basis and age: the consent of the data subject (Art. 6(1)(a) GDPR). You must be at least 14 years old to give it (Art. 2-quinquies of Italian Legislative Decree 196/2003). - Retention and withdrawal: the data stays on the map until the member leaves it with /mappa esci (or by asking Claude), leaves the Discord server or is removed by the staff; at that moment it is deleted. Consent can be withdrawn at any time, also by writing to privacy@vascend.it. - Where: the data is stored on our servers in the European Union. Name, avatar and status are read from Discord, which processes them under its own privacy policy.

To exercise your rights or for any questions regarding this policy, you can contact the Data Controller at: privacy@vascend.it.