This is a translation provided for convenience. The Italian version is the legally binding one.
Read the Italian version:Italiano
Privacy and cookie policy
How we process the data of agencies, creators and their end clients, under EU Regulation 2016/679 (GDPR) and the Italian Privacy Code (Codice della privacy).
Last updated: 11 October 2026
- Data controller
- What data we collect
- Purposes and legal basis
- Where and how we process data
- How long we keep data
- Your rights
- Cookies
Data controller
The data controller is the operator of digitalworldvm.com, based in Italy. For any request about your personal data, you can write to ciao@digitalworldvm.com or use the form on the Contact page.
No data protection officer has been appointed, because the processing does not fall within the cases in which an appointment is mandatory.
What data we collect
- Account data: name, email, password in encrypted form, account type (agency or creator).
- Billing data: company name or name, VAT number or tax code (codice fiscale), address, recipient code (SDI, Italian e-invoicing) or PEC (certified email).
- Agency request data: the inputs entered in the forms (URLs, industry, goals, competitors, descriptions), the brand kit and the files produced.
- Purchase data: products or services purchased, amounts, discount code used, payment outcome and the confirmation by which you ask to receive digital content immediately. Card or PayPal account details do not pass through our systems: they are handled by Stripe.
- Emails you leave with us to receive a discount code or the newsletter, together with any consent to receive marketing communications.
- Reviews: name, rating and text, if you choose to leave one after a purchase.
- Visit source: the date of your first visit, the site you came from and the campaign parameters in the link (utm). We store them in first-party cookies only if you accept marketing cookies.
- Technical data: IP address, device type, access and processing logs, needed for the security and operation of the service.
Request inputs may contain third-party data, for example the name of a contact person at a prospect company. The agency that enters them warrants that it is entitled to do so. We process them only to produce the requested file.
Purposes and legal basis
- Providing the service: creating the account, processing requests, delivering files, running the shop and downloads. Legal basis: performance of the contract.
- Handling payments through Stripe and preventing fraud. Legal basis: performance of the contract and legitimate interest.
- Invoicing and complying with tax and accounting obligations. Legal basis: legal obligation.
- Ensuring the security of the service and preventing abuse. Legal basis: legitimate interest.
- Sending service communications: request status, receipts, download links, security notices. Legal basis: performance of the contract.
- Sending you the discount code you asked for by leaving your email. Legal basis: carrying out your request.
- Replying to the messages you send us through the form on the Contact page, with the name, email, subject and text you enter. Legal basis: carrying out your request.
- Sending newsletters and commercial offers, only if you have given separate consent, which you can withdraw at any time using the link in every email.
- Adapting some messages on the site, for example the headline of the home page or a discount code, to the campaign you came from and to whether you have visited before. We use only the visit source data described above, without combining it with other sources. Legal basis: your consent to marketing cookies for the data kept between one visit and the next; without consent, we use only the link you arrive with at that moment, on the basis of legitimate interest.
- Measuring visits and the effectiveness of campaigns, and showing you relevant advertising on other sites. Legal basis: your consent to measurement and advertising cookies, which you can change at any time.
Where and how we process data
Request inputs and the files produced are stored in Italy, are not transferred to third parties and are not used for work for other clients.
We use providers for specific services: hosting of the site and data, payments (Stripe), sending emails. Each provider processes data only for its own task, under a contract that complies with the GDPR. If a provider is located outside the European Union, the transfer takes place with the safeguards provided for by the Regulation.
How long we keep data
- Agency request data (inputs and files produced): 90 days from delivery, then deleted. The agency can ask for earlier deletion from the portal.
- Account data: as long as the account is active and for 30 days after a deletion request.
- Accounts whose email was never verified and that have no orders: deleted 30 days after sign-up.
- Products purchased in the shop: as long as the account is active, so that you can download the files again.
- Invoices and accounting data: 10 years, as required by law.
- Emails for newsletters and offers: until consent is withdrawn or you unsubscribe from the list.
- Technical logs: 12 months.
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting what was done before. We reply within 30 days.
If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
If you have questions about these terms, write to ciao@digitalworldvm.com or use the Contact page. We reply within 24 business hours.