B2B Stars Privacy Policy
- 1. Data Controller: who we are
- 2. Personal data: what data we ask you to provide us
- 3. Personal data: what data are automatically collected by the Website
- 4. Personal Data: what data we collect from third parties
- 5. Purposes (why we process your data) and legal basis (what entitles us to process your personal data)
- 6. Recipients: with whom we share your personal data
- 7. Duration: how long we keep your personal data
- 8. Rights: what your rights are, how to exercise them and who to contact
- 9. Notice for US residents
- 10. Contact: how you can contact us or our data protection officer in case of doubts and to exercise your rights
B2B Stars is a community of companies and professionals. Our goal is to help our community to find and be found with the mission to empower businesses to build long lasting and trustworthy relationships globally.
This Privacy Policy describes in a transparent and easily understandable way how we collect, use, disclose and in general process your personal data. As used in this Privacy Notice, “personal data” means any information relating to an identified o identifiable natural person (the “Data Subject”).
This Privacy Policy applies with respect to the Website and all the services offered by the Website. Due to our continuous development of the Website, we may change this Privacy Policy. Before the entry into force of any new Privacy Policy, we will notify you of the changes and publish the new version.
By visiting the Website you acknowledge that you have read and are familiar with this Privacy Policy.
This Privacy Policy is divided into the following paragraphs:
1. Data Controller: who we are
2. Personal data: what data we ask you to provide us
3. Personal data: what data are automatically collected by the Website
4. Personal data: what data we collect from third parties
5. Purposes (why we process your data) and legal basis (what entitles us to process your personal data)
6. Recipients: with whom we share your personal data
7. Duration: how long we keep your personal data
8. Data Subject Rights: what your rights are
9. Notice for California Residents
10. Contact: how you can contact us or our data protection officer in case of doubts and to exercise your rights
The definitions used in this Privacy Policy are the same as the definitions used in the General Conditions.
1. Data Controller: who we are
The Data Controller is the entity that determines the purposes and means of the processing of your personal data. The Data Controller of the processing of your personal data arising from the Website is our company, namely:
Expandi Limited
Via Locatelli 5
20124 Milano
Expandi Limited is collectively referred to as “Expandi”, “we” “us” or “our” in this Privacy Policy.
2. Personal data: what data we ask you to provide us
To create a B2B Stars Account you need to provide personal data including your name, personal email address, work email address, organization, and job title. If you register for the Additional Service, you will need to provide payment (e.g., credit card) and billing information. It is important that the personal data we hold about you is accurate and current.
3. Personal data: what data are automatically collected by the Website
In addition to personal data we collect from you, we automatically collect and store certain types of information about your use of the Website including your interaction with content and Services available through the same. In particular when you use our Services your activity necessarily generates data such as IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
Your data may also be collected through the use of cookies. We use cookies and other tracking technologies to distinguish you from other users of the Website and to remember your preferences. This helps us to provide you with a good experience when you use the Website and also allows us to improve the same. For detailed information on the cookies we use, the purposes for which we use them and how you can exercise your choices regarding our use of your cookies, please read our Cookie Policy.
4. Personal Data: what data we collect from third parties
We may also collect your data from third parties. This may happen, for instance, when you connect to our Services via social networks or when you complete your B2B Stars Account by uploading information directly from social networks, and in particular from Facebook, Google Cloud, LinkedIn. We may in particular collect from social networks the following personal data: name, personal email address.
5. Purposes (why we process your data) and legal basis (what entitles us to process your personal data)
We process your personal data only where required for specific purposes. Please view the table below for (i) a list of the purposes for which Expandi process your personal data and (ii) an overview of the legal basis for each such purpose.
- Purpose: For proving and improving our Services. In particular, to allow you to create a B2B Stars Account and to provide you with the Services offered by the Website, including to provide you with technical information related to the Website operation and to communicate with you in case you need assistance and to improve our customer service. Legal basis: Fulfilment of the contract. In short, such data are processed to enable you to use the Website and generally enjoy our Services. Should you not provide the personal data we will not be able to provide you with the Services.
- Purpose: For direct marketing purposes, and in particular to offer you new services, functions and promotions related to the Website that may be of interest to you via email (work email address) and/or via the Website. Legal basis: Consent
- Purpose: For third parties marketing purposes and in particular for Expandi to send, on behalf of third parties, marketing communications via email (work email address) and/or via the Website. Legal basis: Consent
- Purpose: For identifying possible violations of our Community Guidelines and General Conditions and take the necessary countermeasures to prevent the continuation of unlawful conduct or future violations. Legal basis: Legitimate interest in exercising our rights, as detailed in the Community Guidelines and Terms & Conditions.
At the time of registration, you have the option of giving your consent to purposes set out in points b. and c. above. You may withdraw your consent at any time, without prejudice to the lawfulness of processing prior to withdrawal of consent. If you fail to provide your consent for marketing purposes certain B2B Stars Services may be delivered on a yearly subscription basis.
6. Recipients: with whom we share your personal data
Your personal data may be shared with our advisors, professionals and service providers that provide services to us in connection with the operation of our business (including billing, customer service, advertising and marketing, security and performance monitoring, maintaining or servicing accounts, processing or fulfilling orders and transactions, data hosting). Where needed, such subjects have been appointed as data processors.
Your personal data may also be shared with institutional bodies and public authorities, as well as with any other parties upon whom the laws in force from time to time impose a disclosure obligation, or to enforce our rights.
We will not transfer EU personal data outside EU. US personal data will only be transferred to EU in connection with the operation of our business as mentioned above.
7. Duration: how long we keep your personal data
Your data are stored for different periods of time, depending on the type of personal data concerned and the purpose for which they are processed. In any event, we will only retain your data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
In particular, for the purpose of using the Service, your personal data will be stored for the entire duration of your registration and use of the Website and will be erased 2 months after your B2BStars Account has been closed.
Please remember that you can interrupt personal data processing by closing your B2B Stars Account, using the specific function in the Website settings.
Once you have closed your B2B Stars Account, no more personal data will be collected from you, though some specific data will be stored for specific purposes. In particular to fulfil legal obligations.
With reference to direct marketing purposes and for third parties marketing purposes, your data will be stored until you withdraw your consent.
Some data are stored for the duration of the browsing session while others will be stored for a longer period depending on the settings of your browser and your operations on the Website.
8. Rights: what your rights are, how to exercise them and who to contact
Please find below a description of your rights related to the processing of the personal data (“Data Subject Rights”).
Information: you have the right to receive from us information on the processing of your personal data in a concise, transparent, intelligible, and easily accessible way.
Access: you have the right to obtain from us confirmation as to whether personal data concerning you are being processed and to get access to such personal data and information on their processing.
Rectification, erasure and restriction: without prejudice to the fact that you can autonomously modify certain personal data you have shared with us, you are entitled in any case to ask us to rectify inaccurate personal data without undue delay. You also have the right to obtain from us the erasure of personal data and the restriction of processing of personal data in specific cases. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. We may also need to verify the accuracy of the new data you provide to us.
Objection: you have the right to object to the processing of your personal data in specific cases. Please note that we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit those Personal Data to another controller without hindrance from the controller to which the personal data have been provided.
Withdrawal: where data processing is based on consent, you have the right to withdraw consent, without prejudice to the lawfulness of processing before withdrawal. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
Automated decision-making: in the case of automated decision-making processes, you have the right to request and obtain human intervention at any time.
Lastly, please note that you always have the right to lodge a complaint with the competent data protection supervisory authority, either directly, or where you believe that the countermeasures taken by us in response to your request are insufficient.
9. Notice for US residents
If you are a resident of California, you can exercise the rights which you have under the California Consumer Privacy Act (CCPA).
Please refer to point 5. Purposes (why we process your data) and legal basis (what entitles us to process your personal data) within our Privacy Policy document to review the information related to your CCPA rights including:
• the purpose for which we use each category of "personal information" we collect
• the categories of third parties to which we disclose such personal information for a business purpose. We do not "share" personal information and/or "sell" such personal information for any marketing purposes.
Please refer to point 7. Duration: how long we keep your personal data within our Privacy Policy document to review the information related to your CCPA rights related to the Retention of Your Personal Information.
Please note that:
• You can opt-in and opt-out from all marketing communication within your Account Dashboard.
• You can access your data and amend your data within your Account Dashboard.
• You can delete your data only by contacting our Privacy team
• You can enquiry about the California "Shine the Light" disclosure by contacting our Privacy team. California Law permits customers who are California residents to request certain information once per year regarding our disclosure of “personal information”.
If you are a resident of Colorado, Connecticut, Utah, or Virginia, we have certain obligations, and you have certain rights with respect to your personal information, including:
• Right to confirm whether the controller is processing the consumer’s personal information and the right to access such information
• Right to correct inaccuracies in personal information
• Right to delete personal information
• Right of data portability
• Right to opt out from targeted advertising
• Right to opt out from the sale of personal information
In certain states, you also have the right to opt out from profiling in furtherance of decisions that produce legal or similarly significant effects on the consumer (such as Virginia, Colorado, and Connecticut) and appeal a decision regarding a request to exercise your rights.
If you wish to exercise one or more of these rights, please contact our Privacy Team as indicated below.
You can contact our Privacy Team at the following email address: [email protected]. When doing so please provide all necessary information to be able to identify your account within the platform:
• Full name
• Registered private email
• Registered work email
• Company name
The Expandi Privacy Team will investigate your request and respond within 3 business days.
10. Contact: how you can contact us or our data protection officer in case of doubts and to exercise your rights
If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data or to exercise your Data Subject Rights as outlined above, please contact us or our data protection officer at the following contact details:
- Expandi Limited Italia Via Locatelli 5 20124 Milano email: [email protected]
- Expandi Data Protection Officer email: [email protected]