Privacy notice

Who controls your data

wmie S.R.L., Via Dante Alighieri 93, 09128 Cagliari, Italy, VAT 04014830923, controls account and review data.

Contact privacy@wmie.it for privacy requests.

Purpose and information

We use your email for access verification and invitations. Comments also require your first name, last name, and company.

We store presentation versions, comments, replies, selected locations, optional context images, and necessary security records.

We receive account details from you. An inviter supplies your email when they invite you.

We use these data to operate client reviews, identify decisions, protect access, and preserve necessary business records.

Legal grounds

Our legitimate interests support secure business collaboration, attributable decisions, and necessary records. Article 6(1)(f) of the GDPR provides this basis.

Article 6(1)(b) applies when processing is necessary for a contract with you. Article 6(1)(c) applies to specific legal duties.

You can object to processing based on legitimate interests. We assess each request and explain our decision.

Who sees your data

Authorized reviewers see shared comments, names, and companies. They do not receive your email through the comment interface.

WMIE staff with the required permissions manage access and records. Anyone with an unrestricted link can view its presentation.

Vercel hosts the interface. Neon provides the database, authentication, functions, and private file storage. Resend delivers verification and invitation emails.

Locations and transfers

Application data and function regions use Frankfurt. Provider support, service logs, and email processing can involve countries outside the EEA, including the United States.

Applicable provider agreements and transfer safeguards govern those transfers. Contact us for information about the applicable safeguards.

Retention

Presentations and comments form long-term business decision records. Project closure does not automatically delete them.

WMIE reviews continued necessity at project closure, annually, and after a rights request. Unnecessary personal data require deletion or redaction.

Abandoned or failed temporary imports expire after seven days of inactivity. Expired access metadata expires seven days after access expiry.

Application security events expire after 30 days. Rate-limit records expire 48 hours after their window expires.

Provider logs follow provider retention settings. Recovery copies follow the documented 30-day policy after operational verification.

Cookies and local data

Authentication cookies, short-lived content cookies, access grants, and tab-local comment drafts support requested functions. We use no advertising or analytics trackers.

Sign out to clear WMIE One data in the current tab. Close other review tabs on shared devices.

Presentation-specific external resources require review before publication. Nonessential trackers remain blocked.

Your choices and rights

You can request access, correction, erasure, restriction, portability where applicable, or object to processing. Contact privacy@wmie.it.

We normally respond within one month. Complex requests can require two additional months, with an explanation within the first month.

You can complain to the Italian Data Protection Authority or another competent supervisory authority.

Required identity details enable comments and restricted access. If you omit them, those functions are unavailable.

We use no automated decisions with legal or similarly significant effects. We do not use review content for AI training.