Notice on the processing of personal data.

The controller of personal data is the company that operates the Booka service. The final company details (legal name, VAT number, registered office, certified email) will be added before commercial launch.

During early access, Booka collects only the email address entered by the business contact, the language and minimal technical data related to the request. When the service opens, data strictly necessary to register the business and provide the purchased features may be collected.

The application email is processed on the basis of the data subject's consent (Art. 6(1)(a) GDPR) solely to contact the business about early access, introduce Booka and send an LOI proposal with any early-adopter terms. Consent may be withdrawn at any time by contacting the controller.

Only when the optional checkbox is selected may Booka use the email address to send product updates, content and commercial offers. Refusing consent does not prevent the application from being submitted or the receipt of communications strictly related to it. Consent may be withdrawn at any time by contacting the controller.

Application data and the marketing communication choice are retained until the early-access phase ends or the relevant consent is withdrawn and, in any event, for no longer than 12 months from the data subject's latest request. They will then be deleted or, if the relationship continues, processed under the legal basis applicable to the new relationship.

The user may exercise the rights of access, rectification, erasure, portability and objection to processing by sending a written request to the controller's email address. If no reply is received within 30 days, a complaint may be filed with the Italian Data Protection Authority (www.garanteprivacy.it).