Privacy Policy

1. Introduction

Source-DAM ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital asset management platform and related services.

Source-DAM is a business-to-business (B2B) service for organizations and professional users. We are based in the European Union and comply with the General Data Protection Regulation (GDPR) and other applicable EU privacy laws.

2. Data Controller

Source-DAM acts as the data controller for personal data collected through our platform. For any privacy-related inquiries, please contact us at privacy@source-dam.com.

3. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, company name, and password when you create an account.
• Usage Data: Information about how you use our platform, including pages visited, features used, and actions taken.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Content Data: Files, images, and metadata you upload to our platform.
• Communication Data: Information from your communications with our support team.

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract Performance: To provide our services as agreed in our Terms of Service.
• Legitimate Interests: To improve our platform, ensure security, and communicate with you.
• Consent: Only where specifically required for optional activities we may introduce in the future.
• Legal Obligations: To comply with applicable laws and regulations.

5. How We Use Your Information

• To provide, maintain, and improve our platform
• To process transactions and send related notifications
• To respond to your inquiries and provide customer support
• To send operational and account-related service communications
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

6. Data Sharing and Transfers

We may share your information with:

• Service Providers: Third parties who help us operate our platform (hosting, authentication, billing, support, and security operations).
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

For international data transfers outside the EU, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on adequacy decisions.

Our current processor and subprocessor vendors are listed on the Legal Hub.

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Limit how we process your data.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time for consent-based processing.

To exercise these rights, contact us at privacy@source-dam.com.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law. When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required for legal purposes.

9. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments.

If we become aware of a personal data breach, we will handle notifications in line with applicable law.

Additional security disclosure details are available on our Security page.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@source-dam.com

You also have the right to lodge a complaint with your local supervisory authority, including the Italian Garante per la protezione dei dati personali.