Privacy & Cookie Policy

Last updated: 7 November 2026

1. Who is responsible for your data

Simone Carboni, Via Caprie 24, 10138 Torino, Italy, operating as PMS App (“we”, “us”), is the data controller. Contact for any privacy question or request: info@pmsapp.org.

2. What we collect and why

• When you visit the site: IP address, browser and device data and pages visited, in the server logs of our hosting providers — to deliver and secure the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• If you accept analytics cookies: pseudonymous usage data collected by Google Analytics — to understand which pages and steps work. Legal basis: consent (Art. 6(1)(a)).
• When you take the quiz: your answers, score, business type, first name and email — to calculate your score and send you the free tool you asked for. Legal basis: steps taken at your request (Art. 6(1)(b)).
• If you tick the newsletter box: your email and the fact that you agreed — to send occasional tips and offers. Legal basis: consent (Art. 6(1)(a)). It is optional and you can withdraw it at any time.
• When you buy: name, email, billing address, country, product bought and your acceptance at checkout — to deliver the product, provide support and handle refunds. Card data is handled by Stripe only. Legal basis: contract (Art. 6(1)(b)).
• After you buy: order and invoice records — to meet tax and accounting obligations. Legal basis: legal obligation (Art. 6(1)(c)).
• When you email us: your email address and message — to answer you. Legal basis: legitimate interest (Art. 6(1)(f)).

You don’t have to give us any data, but without an email address we cannot send the score, the free tool or a purchased product. We don’t make decisions about you that have legal or similarly significant effects: the quiz score only selects which free tool and offer you see.

3. Who processes your data for us

We use these providers, each bound by a data processing agreement:

• Webflow (USA) — website hosting
• Netlify (USA) — redirect from pmsapp.org
• Google (Ireland/USA) — Google Analytics (only with your consent) and web fonts
• Tally (Belgium) — quiz and forms
• Make (EU data centre) — automations that move form and order data between the tools below
• MailerLite (Lithuania) — email list and newsletters
• Resend (USA) — delivery and order emails
• Dropbox (Ireland/USA) — hosting of the download files
• Stripe (Ireland) — payments. Stripe also acts as an independent controller for its own legal duties, such as fraud prevention (see stripe.com/privacy)
• Cloudflare (USA) and our email provider — receiving emails sent to info@pmsapp.org

We also share invoice records with our accountant and, when required by law, with tax authorities. We never sell your data.

4. Transfers outside the EU

Some providers are in the United States. Those transfers rely on the provider’s certification under the EU–U.S. Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

5. How long we keep it

• Quiz data and email list: until you unsubscribe or ask us to delete it, and in any case no longer than 24 months after your last interaction with us.
• Newsletter consent record: as long as you are subscribed, plus the time needed to prove it.
• Orders and invoices: 10 years, as required by Italian law (art. 2220 Civil Code).
• Emails you send us: as long as needed to handle your request, then up to 24 months.
• Analytics data: 14 months.

6. Cookies and similar technologies

• Strictly necessary: we store your cookie choice in your browser (localStorage key pms_consent, 6 months). No consent is needed for this.
• Analytics (optional): Google Analytics 4 cookies _ga and _ga_<ID> (up to 2 years). They are set only after you click Accept. If you click Reject or close the banner, no analytics cookies are set and we won’t ask again for 6 months.
• Third parties: the quiz is provided by Tally and payments by Stripe, on their own pages and under their own policies.

You can change your choice at any time: Cookie settings.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what happened before; every newsletter has an unsubscribe link. Write to info@pmsapp.org; we answer within one month. You can also complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or to the authority of the country where you live.

8. Children

Our products are business tools and are not intended for anyone under 16.

9. Changes

We will publish any change on this page with a new date. If a change affects how we use data you already gave us, we will tell you by email.