Legal
Website privacy policy
In short
- watchon.co sets no cookies, runs no analytics and loads nothing from third parties.
- Like every website, it needs your IP address to send you the page. We don't log it and don't keep it.
- If you write to us, we use your email only to answer, and delete it within 12 months.
- This page covers the website. The WatchOn app has its own privacy policy, shown in the app before you start.
1. Who is responsible for your data
The data controller is Daniele Gagliardi, 43126 Parma, Italy (“we”).
For anything about your personal data, write to privacy [at] watchon.co. For everything else, support [at] watchon.co.
We have not appointed a data protection officer: the law doesn't require one for a service of this kind and size.
2. What we process, and why
2.1 Visiting the website
To deliver a page, our hosting provider receives what every browser sends with every request: your IP address, the date and time, the address of the page, and technical headers such as browser type, language and the referring page.
- Purpose: sending you the website and protecting it from abuse and attacks.
- Legal basis: our legitimate interest in running a website that works and stays safe (Art. 6(1)(f) GDPR). Without this data, the page can't reach you.
- Retention: we don't keep it. Request logging is switched off on our servers. Our provider keeps only aggregated numbers (how many requests, how many errors), which identify no one.
2.2 Writing to us
If you email one of our addresses, we receive your email address, the content of your message and anything else you choose to include.
- Purpose: answering you.
- Legal basis: our legitimate interest in replying to people who write to us (Art. 6(1)(f) GDPR). A request to exercise your rights is handled to meet a legal obligation (Art. 6(1)(c)).
- Retention: as long as needed to deal with your request, and no more than 12 months after it's closed, unless we need it longer to establish or defend a legal claim. Requests about your rights, and our replies, are kept for 5 years to show we handled them.
Please don't send health information or other sensitive data by email: we don't need it.
2.3 What we don't do
No cookies, no local storage, no fingerprinting, no analytics, no advertising, no social media plugins, no fonts or scripts from other servers. We don't build profiles, we don't make automated decisions about you, and we don't sell or share your data. Details are in the cookie policy.
The email addresses on this site are put together in your browser by a small script of ours, so that spam bots can't read them. It runs on your device, sends nothing anywhere and stores nothing.
3. Who else handles your data
Two providers process data on our behalf, under a data processing agreement (Art. 28 GDPR):
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. (San Francisco, USA) | Hosting and delivering the website, DNS, protection from attacks | Global network: your request is served by the data centre nearest to you |
| Infomaniak Network SA (Geneva, Switzerland) | Email for the @watchon.co addresses | Switzerland |
For the security of its own network (for example, spotting attacks that hit many websites at once), Cloudflare also processes some connection data as an independent controller, under its own privacy policy.
We may also have to disclose data to public authorities when the law requires it.
4. Transfers outside the European Union
- United States (Cloudflare): covered by the EU–US Data Privacy Framework adequacy decision of 10 July 2023, and in any case by the European Commission's standard contractual clauses.
- Switzerland (Infomaniak): covered by the European Commission's adequacy decision 2000/518/EC.
You can ask us for a copy of the safeguards at privacy [at] watchon.co.
5. Your rights
Under the GDPR you can ask us to:
- access the data we hold about you and get a copy (Art. 15);
- correct it (Art. 16) or delete it (Art. 17);
- restrict how we use it (Art. 18);
- receive it in a portable format, where that applies (Art. 20);
- object to processing based on our legitimate interest (Art. 21). We'll stop unless we have compelling reasons, or need it for a legal claim.
Write to privacy [at] watchon.co. It's free, and we'll answer within one month. That can be extended by two more months for complex requests, and we'd tell you why. We may ask you to confirm who you are, but only when we have reasonable doubts.
Since we don't keep IP addresses, in most cases we will simply hold no data about your visits.
You also have the right to complain to a supervisory authority. In Italy that's the Garante per la protezione dei dati personali. You can also complain in the EU country where you live or work, or where the issue happened.
6. Do you have to give us your data?
Your browser sends technical data automatically, and the website can't work without it. Writing to us is entirely up to you.
7. Children
The website isn't aimed at children under 14, and we don't knowingly collect their data. If you think a child has written to us, tell us and we'll delete the message.
8. Changes to this policy
If what the website does changes, we'll update this page and the date at the top before the change takes effect. If the website ever starts using cookies that need your consent, we'll ask you first.