This document is a template created for the demo version of Duetto. Before any real use, it must be completed with the details of the data controller (name, registered address, contact details), the governing law and the competent courts, and reviewed by a legal professional.
1. Who the data controller is
The data controller is the operator of the Duetto service. If you have any question about your data, you can write to us through the contact form on the About us page.
2. What data we collect
We collect only the data we need to let you use Duetto:
- Account data: email address, password (stored in hashed form) and the information needed to check that you are an adult.
- Profile data: name, age, city, description, interests, what you’re looking for and any preferences you choose to share.
- Photos: the ones you upload to your profile and, if you use it, the selfie for verification.
- Messages and interactions: chats, likes, Super Likes, matches, reports and blocks.
- Technical data: IP address, browser and device type, date and time of access, security logs and essential cookies.
- Messages sent through the contact form: name, email and message text.
3. Why we use your data and on what legal basis
We use your data only for specific purposes, each with its own legal basis:
- Providing the service (performance of a contract): creating your account, showing your profile, suggesting compatible people and managing matches and chats.
- Security and abuse prevention (legitimate interests): profile verification, moderation, and combating scams and fake profiles.
- Legal obligations: responding to requests from authorities and retaining what the law requires.
- Special category data (explicit consent): some of what you choose to share, for example the people you want to meet, may reveal special categories of personal data. We process it only with your consent, which you can withdraw at any time.
- Replying to your messages (consent or pre-contractual measures): we use contact form data only to reply to you.
4. Who we share data with
We do not sell your data. Only the following can receive it:
- other users, limited to what you choose to show on your profile and in chats;
- technical service providers (for example hosting) that process data on our behalf and on our instructions;
- public authorities, where the law requires it.
If a provider is located outside the European Economic Area, we apply the safeguards required by the GDPR.
5. How long we keep your data
We keep your data for as long as your account is active. When you delete your account, we erase your profile and the related data; we may keep, for the time strictly necessary, only what the law requires or what is needed to establish, exercise or defend legal claims.
In this demo version, accounts created by visitors are deleted automatically after 3 days.
6. Your rights
Under the GDPR you may, at any time:
- access your data and receive a copy of it (you can download it from your profile);
- correct inaccurate data;
- erase your data and delete your account (from the app settings);
- restrict the processing or object to it;
- receive your data in a portable format;
- withdraw any consent you have given, without affecting the processing carried out before.
If you believe your rights have not been respected, you can lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).
7. How we protect your data
We adopt appropriate technical and organisational measures: an encrypted connection (HTTPS), passwords stored in hashed form and access limited to authorised staff. No system is completely secure: if a breach affects you, we will notify you as required by law.
8. Minors
Duetto is for people aged 18 or over. We do not knowingly collect data from anyone under 18: if we find that an account belongs to someone under 18, we delete it.
9. Cookies
We use only essential cookies, which are needed for the site and the app to work, and no tracking cookies. You can find the details in the cookie policy.
10. Changes to this policy
We may update this policy, for example when the service or the law changes. The date of the last update is shown at the top; if the changes are significant, we will also tell you in the app.
11. How to contact us
To exercise your rights or for any question about privacy, write to us through the contact form on the About us page: we read every message.