Legal
Privacy and cookie policy
How we process the data of people who visit the site and of people who contact us. Notice under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Controller
ThatMorning Srl, Via Meda 45, 20141 Milan (MI), Italy, VAT IT09310870960, email info@thatmorning.com, phone +39 02 36524276.
This notice covers the website www.thatmorning.com. For the public online content we analyse in our services (social listening, patient listening, web reputation) please see the social listening notice.
What data we process and why
Contact requests
When you write to us through the website form, by email or by phone, we process the data you provide: full name, email, mobile number, company and the content of your message.
- Purpose: to answer your request and, if you wish, send you information or a proposal about our services.
- Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) GDPR) and our legitimate interest in handling the requests we receive (Article 6(1)(f) GDPR).
- Retention: up to 24 months from the last contact. If the request leads to a contract, data is kept for the duration of the relationship and for the periods required by law (e.g. 10 years for accounting records).
Providing your data is optional, but without your name, email and message we cannot reply. We do not use this data to send you newsletters without your consent.
Browsing data
The systems that run the site automatically record some technical data: IP address, date and time of the request, page visited, browser and device type.
- Purpose: to run the site, keep it secure and detect abuse or malfunctions.
- Legal basis: legitimate interest (Article 6(1)(f) GDPR).
- Retention: for as long as strictly necessary and in any case no longer than 12 months, unless needed to investigate computer crimes.
Cookies and third-party tools
The site uses technical cookies needed for it to work and third-party tools to measure visits and campaigns. They are described in the Cookies section.
Cookies
Cookies are small files that the site stores in your browser. Technical cookies are needed for the site to work and do not require consent. Statistics and marketing cookies are set by the third-party tools listed below; for these the legal basis is consent (Article 122 of the Italian Privacy Code and Article 6(1)(a) GDPR).
| Tool | Provider | Purpose | Privacy policy |
|---|---|---|---|
| Google Analytics 4 | Google Ireland Ltd | Aggregated visit statistics | policies.google.com/privacy |
| Microsoft Clarity | Microsoft Ireland Operations Ltd | Statistics and page interaction maps | privacy.microsoft.com |
| Meta Pixel | Meta Platforms Ireland Ltd | Measuring campaigns on Facebook and Instagram | facebook.com/privacy/policy |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company | Measuring campaigns on LinkedIn | linkedin.com/legal/privacy-policy |
| Metricool | Metricool Software S.L. | Statistics on traffic from social media | metricool.com/privacy |
You can block or delete cookies in your browser settings and turn off Google Analytics with the opt-out browser add-on. Blocking technical cookies may prevent parts of the site from working properly.
Fonts are hosted on our own servers: the site does not load them from external services.
Who we share data with
- ThatMorning staff authorised to process the data.
- Providers processing data on our behalf as processors (Article 28 GDPR): our hosting and email provider (SiteGround) and the providers of the tools listed in the Cookies section.
- Authorities, when required by law.
We do not sell your data.
Transfers outside the European Union
Some providers of the statistics and marketing tools (Google, Microsoft, Meta, LinkedIn) may transfer data to the United States. These transfers are based on the European Commission adequacy decision on the EU-US Data Privacy Framework, to which these providers are certified, or on standard contractual clauses.
Your rights
At any time you can ask us for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15-22 GDPR). You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Write to info@thatmorning.com: we reply within one month. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country of residence.
Security
We apply appropriate technical and organisational measures to protect data: encrypted communications (HTTPS), access restricted to authorised staff, regular backups and an incident management procedure.
Updates
This notice may be updated. The version in force is always published at this address, with the date of the last update.