Privacy Policy

Last Updated: 7 February 2025

TS Mood S.r.l. (“we,” “our,” “the Company”) is committed to protecting the privacy of users of our document management SaaS service (“Service,” “App”). This Privacy Policy describes how we collect, use, and protect personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable regulations.

1. Data Collected

To provide the Service, we collect and process the following categories of personal data:

  • Information about domain users: names, emails, addresses, phone numbers, role, manager data, and last login.
  • User groups on the domain: names, members, and metadata (e.g., login details).
  • Contacts and other automatically saved information: names, emails, and phone numbers of “Other contacts” associated with the domain.
  • Google Contacts: names, phone numbers, addresses, and other information contained in the user’s contacts.
  • Google Drive Files: access and management of files opened with the App (viewing, editing, creating, deleting, sharing, and organizing).
  • Tasks and Activities: creation, modification, organization, and deletion of the user’s tasks and activities.
  • Google authentication and profile data: full name, profile picture, gender, preferred languages, and other publicly available information.
  • Primary email of the Google account.

2. Purpose of Processing

The collected data is processed exclusively for the following purposes:

  • Providing, managing, and improving the Service.
  • Enabling user access and authentication.
  • Personalizing the user experience and optimizing the App’s features.
  • Ensuring security and preventing fraud or unauthorized access.
  • Performing statistical analysis to improve the Service.
  • Ensuring compliance with legal obligations and requests from competent authorities.

3. Legal Basis for Processing

The processing of personal data is carried out in accordance with Article 6 of the GDPR, based on the following legal grounds:

  • Performance of a contract (Art. 6.1(b)): necessary for the provision of the Service.
  • Consent (Art. 6.1(a)): for specific processing operations not strictly necessary for Service provision.
  • Legal obligations (Art. 6.1(c)): to comply with applicable laws.
  • Legitimate interest (Art. 6.1(f)): to enhance security and improve Service quality.

4. Data Sharing and Transfers

Personal data may be shared with:

  • Service providers: third parties that support the Company in managing the Service (e.g., hosting, analytics, customer support). A full list of subprocessors is available upon request.
  • Competent authorities: in case of legal obligations or legitimate government requests.
  • Integration partners: if the user explicitly authorizes connection with other services.

Data may be transferred outside the European Economic Area (EEA) only in compliance with appropriate safeguards under GDPR.

5. Data Security

We implement technical and organizational security measures to protect data from unauthorized access, loss, or unlawful alterations. However, no system is entirely secure, so we encourage users to protect their login credentials.

6. Data Retention and Deletion

Data is retained for the time necessary to provide the Service and comply with legal obligations. Specific retention periods include:

  • Authentication and access data: retained for the duration of the account’s activity.
  • Contact and communication data: retained as long as required for service functionality.
  • Task and activity data: stored until the user deletes it or the account is deactivated.

Upon account termination, personal data will be deleted within 30 days, unless retention is required for legal compliance. Users may also request data deletion via support@regystrum.com, and such requests will be processed within 15 working days.

7. User Rights

In accordance with GDPR, users have the following rights:

  • Access to data (Art. 15 GDPR)
  • Rectification of data (Art. 16 GDPR)
  • Data erasure (right to be forgotten) (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent (if applicable)

Users can review and revoke the app’s permissions to access their Google account at any time via Google Account settings: https://myaccount.google.com/permissions.

To exercise these rights, users can contact us at the address below.

8. Changes to the Privacy Policy

This Privacy Policy may be updated periodically. Users will be informed of significant changes via the Website or direct notifications.

9. Contact Information

For any privacy-related questions or requests, please contact us at:
TS Mood S.r.l.
Rom9 00139 – Via P. Monelli 11
Email: support@regystrum.com
Website: https://www.regystrum.com