Privacy Policy

1. Data Controller

The controller of personal data is Stratosfera S.r.l., with registered office at Via Vincenzo Monti 11, 20123 Milan, Italy, VAT No. 11809210963 (hereinafter the "Controller").

2. Types of Data Collected

The FinMatch PMI platform collects the following categories of personal data:

• Identification and contact data: first name, last name, email address, telephone number.
• Company data: company name, company the user belongs to.
• Request data: the type of financing operation of interest and the description of the operation, including any information the user freely chooses to provide.
• Contact form data: full name, email, company, telephone, message.
• Access data: authentication credentials (email and encrypted password) for operators authorised to access the restricted area.
• Browsing data: IP address, browser type, pages visited, time spent on each page.

3. Purposes of Processing

Personal data are processed for the following purposes:

• Handling and processing the assessment requests submitted through the platform forms.
• Putting the user in contact with financial partners suited to the requested operation.
• Replying to requests submitted through the contact form.
• Managing the accounts of restricted area operators.
• Complying with legal and tax obligations.
• Improving the platform and producing aggregate statistical analyses.

4. Legal Basis for Processing

Data processing is based on:

• Consent: given by the data subject when submitting the form (Art. 6(1)(a) GDPR).
• Performance of pre-contractual and contractual measures:the need to process the data in order to act on the data subject's request (Art. 6(1)(b) GDPR).
• Legal obligation: to comply with regulatory obligations (Art. 6(1)(c) GDPR).
• Legitimate interest: to improve the services and keep the platform secure (Art. 6(1)(f) GDPR).

5. Processing Methods

Data are processed using IT and electronic tools, with organisational logic strictly related to the purposes stated above. Processing complies with the security measures required by the GDPR, including encryption of sensitive data and access control.

6. Data Retention

Personal data are retained for as long as necessary to provide the services and, thereafter, for the period required by law (generally 10 years for tax documents). Data relating to contact and assessment requests are retained for a maximum of 24 months.

7. Disclosure and Dissemination

Personal data may be disclosed to:

• Selected financial partners, limited to the data needed to assess the operation requested by the data subject.
• Parties providing services that support the Controller's business (hosting, email delivery, technical support), acting as data processors.
• Competent authorities, in compliance with legal obligations.

Under no circumstances will the data be disseminated or sold to third parties.

8. Data Transfers

Data may also be processed in countries outside the EU, exclusively by providers that guarantee an adequate level of protection under the GDPR (e.g. standard contractual clauses).

9. Rights of the Data Subject

As a data subject, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), within the limits set by law.
• Restrict the processing of your data.
• Object to processing based on legitimate interest.
• Transfer your data to another controller (portability).
• Withdraw your consent at any time.
• Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

To exercise your rights, you can contact us through the Contact Us page.

10. Changes to this Privacy Policy

The Controller reserves the right to amend this notice. Any changes will be published on this page together with the date of the update.