ParkFlo Privacy Policy

ParkFlo Privacy Policy

1. Data controller

Nextstep17 s.r.l. ("Nextstep17" or the "Controller") provides the ParkFlo software and processes personal data in accordance with Regulation (EU) 2016/679, applicable national laws and any other relevant privacy requirements.

2. Scope

This notice applies to personal data collected through the ParkFlo public website, the software login area, contact requests, technical support activities and communications connected with the supply of the service.

3. Categories of data

• identification and contact data such as name, surname, company, role, email address and phone number;
• authentication and security data such as username, encrypted password, access logs, IP address, user agent, timestamps and technical tokens;
• administrative and contractual data required to manage licensing, support and billing;
• data voluntarily shared through email, tickets, commercial requests or support interactions.

4. Purposes and legal bases

Personal data are processed to: answer pre-contractual requests; enter into and perform agreements related to ParkFlo; manage user accounts and application security; comply with legal, fiscal and administrative obligations; protect the Controller's rights; send service-related notices that are necessary for the proper delivery of ParkFlo. Additional marketing communications, where applicable, are sent only on the basis of specific consent.

5. Mandatory or optional provision

Providing data needed for account management, contractual performance and platform security is necessary. Failure to provide such data may prevent account activation, request handling or proper delivery of the service.

6. Processing methods

Processing is carried out with electronic and organisational tools designed to ensure confidentiality, integrity, availability and resilience. Nextstep17 adopts technical and organisational safeguards proportionate to the risks, including access control, role segregation, event logging and credential protection.

7. Retention

Data are stored for the time strictly necessary to achieve the purposes for which they were collected and, where required, for the additional retention periods imposed by contract, accounting, tax, legal defence or security obligations. Technical and security logs may be retained longer when needed to investigate incidents, audits or disputes.

8. Data recipients

Personal data may be processed by authorised personnel of Nextstep17 and by service providers acting as processors or independent controllers, for example infrastructure, hosting, maintenance, backup, security, legal and accounting providers. Data are not publicly disclosed.

9. Transfers outside the EEA

If certain service components require transfers outside the European Economic Area, such transfers will take place in compliance with Articles 44 et seq. of the GDPR through adequacy decisions, standard contractual clauses or other lawful safeguards.

10. Data subject rights

Data subjects may exercise the rights of access, rectification, erasure, restriction, portability, objection and consent withdrawal, when applicable and within the limits established by law. Data subjects also have the right to lodge a complaint with the competent supervisory authority.

11. Contacts

Privacy requests concerning ParkFlo may be sent to Nextstep17 s.r.l. using the official company contacts published on its website or communicated in the contractual documentation.

12. Updates

This notice may be updated to reflect legal, organisational or technological changes. The version published in the ParkFlo Privacy Center is the current binding version.