1. Data controller
Cleverjoint S.r.l., via G. Gozzi 2/G, 35131 Padua, Italy, VAT No. 05630250289, is the data controller. Privacy requests and data subject rights may be sent to info@cleverjoint.it.
2. Data we process
- navigation data, IP address, technical logs and device information;
- identity, professional, contact, account and encrypted credential data;
- billing, tax and address information;
- TRP order data, animal owner, animal details, veterinary clinical indications and requests;
- CT/DICOM, ZIP, STL and technical production files;
- payment method, status and references, but not full card details;
- communications, operational notes and activity history;
- cookie preference ID, choice, language and timestamp.
Clinical information concerns animals and is not, by itself, human health data. Files may nevertheless contain personal metadata; users must upload only relevant information and no human health data.
3. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Security, availability and abuse prevention | Legitimate interest and security obligations, Arts. 6(1)(f) and 32 GDPR | Ordinary logs up to 30 days; longer only for incidents, claims or legal duties |
| Registration, account and support | Pre-contractual measures and contract, Art. 6(1)(b) | Account lifetime; contractual records up to 10 years |
| TRP orders, design, production, delivery and technical archive | Contract and legal claims, Arts. 6(1)(b) and 6(1)(f) | As needed for the service and up to 10 years after completion, unless compatible earlier deletion applies |
| Payments, accounting, invoices and tax duties | Contract and legal obligation, Arts. 6(1)(b) and 6(1)(c) | 10 years or the applicable statutory period |
| Optional YouTube content | Consent, Art. 6(1)(a) | Until withdrawal; third-party identifiers follow the provider's terms |
| Cookie preference evidence | Compliance and legitimate interest, Arts. 6(1)(c) and 6(1)(f) | 5 years from the recorded choice |
4. Required data
Required fields are necessary to create an account, process the order, design and deliver the prosthesis and comply with tax law. Without them the relevant service cannot be provided. YouTube consent is optional and refusal does not limit other features.
5. Recipients
Data may be accessed by authorised staff and, where necessary, hosting, maintenance, email and security providers; Google Workspace/Drive; Stripe; TeamSystem S.p.A. through Fatture in Cloud; appointed designers and printers; couriers; advisers; collaboration partners and clinic groups associated with the account; and public authorities where required by law. Economic information is not shared with designers or printers unless necessary.
6. International transfers
Global providers may process data outside the EEA under adequacy decisions, the Data Privacy Framework where applicable, standard contractual clauses or other safeguards under Articles 44-49 GDPR. See the policies of Google, Stripe and Fatture in Cloud.
7. Your rights
You may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent without affecting prior processing. You may lodge a complaint with the Italian Data Protection Authority. Contact info@cleverjoint.it.
8. Security, automation and updates
CleverJoint uses proportionate measures including access control, encrypted credentials, TLS, role separation, backups and operational logs. No solely automated decisions producing legal effects under Article 22 GDPR are made. See the Cookie Policy; material changes to this notice will be communicated appropriately.