Winner of Google'sBest app for Good 2023

Privacy Policy App

Privacy Policy and request of consent to the use of personal data in accordance with and for the effects of artt. 13 e 14 of General Data Protection Regulation (UE) 2016/679

AWorld Srl SB respects the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.  Please read this privacy policy carefully.  If you do not agree with the terms of this privacy policy, please do not access the site.  

The Data Controller

The Data Controller is AWorld Srl Società Benefit, with registered office in Via Agostino da Montefeltro n. 2, 10134 – Turin, Italy, VAT number 11867110014, in the person of its legal representative.

Contact: [email protected]

Purposes of processing

The personal data provided by users will be processed to:

  • Present or improve the App and services including the analysis of the App activities;
  • Inform you of AWorld’s services and products;
  • Authorize access to the App and services;
  • Provide, maintain or expand services, business performance analysis, and other products and services we offer;
  • Offer and manage programs;
  • Customize your experience;
  • Register user’s participation at events via GPS;
  • Make user’s participation visible to other participants of the same event;
  • Create content, promotions, contests, surveys and other features of the App;
  • Manage your participation in special programs, surveys, campaigns, contests and other offers or promotions; and to send you emails about it;
  • Security of our services, including user authentication;
  • Use statistical data we collect as required by law;
  • Support users;
  • Comply with applicable legal requirements;
  • Respect the Terms of Use and other agreements;
  • Perform data analysis;
  • Investigate possible fraud or other violations of the Terms of Use or this Notice:
  • Dispute resolution;
  • To otherwise fulfill the purpose for which the information was collected.

We will ask for your consent to collect your personal data for purposes other than those listed above.

Categories of data processed

Processed personal data are:

A – Contact details

B – Profile image and Event pictures

C -Location

D – Habits of life and consumption

Processing methods

Users’ personal data are processed with the appropriate security measures; these measures are useful to prevent disclosure, modification or other unauthorized use. In addition to the Data Controller, other appointees may have access to Personal Data present and external Data.

Consequences of refusing data

In case of lack of authorization to process the data provided for in points A and D, the interested party will not be able to use the App. 

In case of lack of authorization to process the data provided in points B and C, the interested party will not be able to use specific services.

Retention period

The data are processed and stored for the time required by the purposes for which they were collected. Therefore:

  • Personal Data collected for purposes related to the execution of a contract between the Controller and the User will be retained until the execution of this contract is completed.
  • Personal data collected for purposes related to the legitimate interest of the Data Controller will be retained until the satisfaction of this interest. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Controller.
  • Personal data collected for promotional marketing purposes will be stored for 24 months.
  • The Data Controller may be obliged to store Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
  • At the end of the retention period, Personal Data will be deleted. Therefore, at the end of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Rights of the interested party

Users can exercise certain rights with reference to the data processed by the controller.

In particular, the User has the right to: 

  • withdraw consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed.
  • oppose the processing of their data. The user can object to the processing of their data when it takes place on a legal basis other than consent. Further details on the right to object are indicated in the section below.
  • access their data. The user has the right to obtain information on the data processed by the controller, on certain aspects of the processing and to receive a copy of the data processed.
  • verify and request correction. The User can verify the accuracy of his Data and request its updating or correction.
  • obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Controller will not process the Data for any other purpose other than their conservation.
  • obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Controller.
  • receive your data or have it transferred to another controller. The User has the right to receive their Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another controller. This provision is applicable when the Data are processed with automated tools and the treatment is based on the User’s consent, on a contract of which the User is a party or on contractual measures connected to it.
  • propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action. To do this you can use a model made available by the Data Protection Authority: download the model.

Pursuant to the same article, you have the right to request cancellation, transformation inform anonymously or blocking of data processed in violation of the law, and to oppose in any case, for legitimate reasons, to their treatment. 

The interested party has the right to object, in whole or in part: for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct selling or for carrying out market research. 

How to exercise the rights

To exercise the rights, Users can send a request to the controller’s contact details indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within a month. 

Changes to this privacy policy

We reserve the right to make changes to this Privacy Policy at any time and for any reason.  We will alert you about any changes by updating the “Last Updated” date of this Privacy Policy.  Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site, and you waive the right to receive specific notice of each such change or modification. 

Last modified: 5 july 2021

pursuant to articles 13 and 14 of EU Regulation 2016/679

Data Controller

The Data Controller is AWorld Srl Società Benefit, with registered office at Corso Regina Margherita no. 1 Bis – 10124 Turin. Italy, VAT no. 11867110014, in the person of its legal representative.

Contacts: [email protected]

Data Protection Officer

The Data Protection Officer is Debora Marianna Pagano

Contacts: [email protected]

Purpose of processing

Personal data supplied by users will be used to:

  • Improve the App and its services;
  • Inform you of the services available from AWorld;
  • Authorise access to the App and the services offered by it;
  • Analyse the performance of the app and the services we offer;
  • Analyse the user’s movements for the purposes of calculating the carbon footprint;
  • Create content and polls within the App relating to sustainability issues;
  • Manage your participation in special programmes, surveys, campaigns, (related to sustainability) through notifications within the app;
  • Make our services, including user authentication, secure;
  • Support users in their use of the App;
  • Comply with the Terms and Conditions of Use and other agreements;
  • Perform data analysis solely for the purpose of awarding AW points;
  • Investigate possible fraud or other breaches of the Terms and Conditions of Use or this Policy;
  • Settle disputes in which you or the Data Controller are involved.

Types of data processed

The personal data processed are:

A – Contact data (name, surname, email): this data is required to create the account in AWorld.

B – Pictures (the user can upload a profile picture and share photos of events in which they take part).

C – Tracking data (only and exclusively with the explicit and free consent of the user, mobility tracking data).

D – Lifestyle and consumption habits (which have an impact on sustainability): these data are necessary for awarding the score in AWorld.

The personal data you provide will not be transferred to countries outside the European Union.

Processing methods

The personal data of users is processed using appropriate security measures; these measures are designed to prevent unauthorised disclosure, editing or other use.

In addition to the Data Controller, persons authorised by the Controller and External Processors may have access to Personal Data. The list is available from the Data Controller upon written request accompanied by the applicant’s identity document.

Consequences of refusal to provide data

In the event of failure to authorise the processing of the data envisaged in points A (contact data) and D (lifestyle and consumption habits) the data subject will not be able to use the App.

In the event of failure to authorise the processing of the data envisaged in points B (images) and C (tracking data), the data subject will not be able to use specific services for which the relative data indicated under “Types of data processed” is envisaged.

All consents may be withdrawn and changed at any time in the area provided in the user’s account within the App.

Retention period

The Data are processed and stored for the time required for the purposes for which they were collected. Therefore:

  • Personal Data collected for purposes relating to the fulfilment of a contract between the Data Controller and the User will be retained until such time as the contract has been fulfilled.
  • Personal Data collected for purposes relating to the legitimate interest of the Data Controller will be retained until such interest has been satisfied. The User may obtain further information on the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
  • The Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
  • At the end of the retention period, all Personal Data will be made anonymous. Therefore, upon expiry of the term, the rights of access, deletion, rectification and portability of the Data can no longer be exercised.
Rights of the data subject

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

  • withdraw consent at any time. The User may withdraw previously given consent to the processing of his/her Personal Data.
  • oppose the processing of his/her Data. The User may object to the processing of his/her Data when this is done on a legal basis other than consent. Further details on the right to object are indicated in the section below.
  • access his/her Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the process and to receive a copy of the Data processed.
  • verify and request correction. The User may verify the correctness of his/her Data and request that it be updated or corrected.
  • obtain the limitation of the treatment. When certain conditions are met, the User may request the limitation of the processing of his/her Data. In this case, the Data Controller will not process the Data for any other purpose than storage.
  • obtain the deletion or removal of his/her Personal Data. When certain conditions are met, the User may request the deletion of his/her Data by the Data Controller.
  • receive Data or have it transferred to another Data Controller. The User has the right to receive his/her Data in a structured, commonly used and readable format and, where technically feasible, to obtain its transfer without hindrance to another Data Controller. This provision is applicable when the Data are processed using automated tools and the process is based on the User’s consent, on a contract to which the User is a party or on contractual measures connected to it.
  • lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action. To do so, you can use a form made available by the Privacy Authority.

Pursuant to the same article, you have the right to request the deletion, transformation into anonymous form or blocking of data processed in breach of the law, as well as to oppose its processing, for legitimate reasons.

The data subject has the right to object, in whole or in part: for legitimate reasons, to the processing of personal data concerning them, even if it is pertinent to the purpose of collection; to the processing of personal data concerning them, where it is carried out for the purpose of sending advertising materials or direct selling or for carrying out market research.

How to exercise rights

To exercise their rights, Users may send a request accompanied by an identifying document to the contact details of the Data Controller indicated in this document. Requests are deposited free of charge and dealt with by the Data Controller as soon as possible, and always within one month.

Amendments to this privacy policy

The Data Controller reserves the right to make amendments to this privacy policy at any time, informing Users on this page and, if possible where technically and legally feasible, sending a notification to Users through one of the contact details in the Data Controller’s possession. Please consult this page regularly, referring to the date of the last amendment indicated at the bottom.

Last amendment: 9 January 2024