Privacy notice

1. Data controller

The data controller is Andrea D'Asaro, via Gioacchino Rossini 98/D, 56035 Casciana Terme Lari (PI), Italy. For any request concerning personal data, please write to privacy@sectoratlas.com.

2. Data processed

• Registration data: name, email address, date of birth, preferred language and password, stored only in encrypted form.
• Proof of acceptance of the legal notice: document and version accepted, language, date and time, IP address and browser type.
• Searches carried out on the portal: search text, language, number of results and date; for registered users they are linked to the account.
• Technical data: session and security cookies necessary for the portal to work.

3. Purposes and legal bases

• Creating and managing the account and accessing complete profiles: performance of a contract (Art. 6(1)(b) GDPR).
• Keeping proof of acceptance of the legal notice and protecting SectorAtlas's rights: legitimate interest (Art. 6(1)(f) GDPR).
• Security of the portal and prevention of abuse, including unauthorised data extraction: legitimate interest (Art. 6(1)(f) GDPR).
• Statistics on the use of search to improve content: legitimate interest (Art. 6(1)(f) GDPR).

4. Retention periods

• Account data: for as long as the account exists and up to 30 days after its deletion.
• Proof of acceptance of the legal notice: 10 years, the ordinary limitation period (Art. 2946 of the Italian Civil Code).
• Searches linked to the account: 12 months; after that, the link to the user is removed and only anonymous statistics remain.
• Technical cookies: for the duration of the browsing session.

5. No sale of data

SectorAtlas does not sell, transfer or license users' personal data to third parties, nor does it use them for its own or third-party marketing or for purposes other than those stated in this notice.

6. Recipients and place of processing

Data are processed by the controller and hosted on servers of the hosting provider OVHcloud, acting as processor under Art. 28 GDPR. The portal's search and artificial intelligence services run on SectorAtlas servers and do not share user data with external providers. No transfers of data outside the European Economic Area are envisaged.

7. Cookies

The portal uses only technical cookies, necessary for the browsing session, authentication and security (protection against forged requests). No profiling cookies or third-party tracking tools are used; therefore no consent is required under Art. 122 of Legislative Decree 196/2003 and the Italian Data Protection Authority's Guidelines of 10 June 2021. The only exception is the share price chart in listed companies' profiles, provided by TradingView: it is loaded only when the user requests it with the dedicated button and, from that moment, TradingView may set its own cookies under its privacy policy.

8. Data subject rights

At any time users may exercise the rights set out in Articles 15 to 22 GDPR by writing to privacy@sectoratlas.com:

• access to their data and a copy of it;
• rectification of inaccurate data;
• erasure of data and closure of the account;
• restriction of processing;
• portability of the data provided;
• objection to processing based on legitimate interest.

9. Complaints

Users who believe that the processing infringes the law may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the Member State where they live or work.

10. Provision of data

Providing registration data is necessary to create an account and consult complete profiles; without it, registration is not possible. Public search remains available without registration.