IKFACE CUSTOMER PORTAL PRIVACY NOTICE
Versione / Versión / Version 2026-10-26.1 · In vigore dal / Vigente desde / Effective from 2026-10-26
1. Controller. The controller is INFOKRAUSE S.R.L. unipersonale, Via delle Speronelle 15, 09045 Quartu Sant'Elena (CA), Italy, tax/VAT no. 04126260928. Queries and exercise of rights: privacy@infokrause.com. No data protection officer has been appointed because it is not mandatory; we will appoint one if the law requires it.
2. Scope. This notice covers the IKFace Customer Portal, the partner portals (distribution.ikface.net and the integrator portal), including end-customer contact data entered by distributors and integrators, company registration, demo requests, enrolments, Managed Appliances, licences, support and related communications. It does not cover images, biometric templates or other data that the customer processes in its own IKFace installation: the customer is the controller of those data and, where INFOKRAUSE accesses them for the Managed service or support, the data processing agreement (DPA) applies.
3. Data processed. First name, last name, business e-mail, phone, language and password (hash only); company name, address, country and the user's role; demo requests and communications; customer, enrolment, appliance, installation and licence identifiers; device technical data (UUID, hardware fingerprint, processor, operating system, version, network interfaces and addresses, IP, last connection) needed for security, activation and support; evidence of acceptance and legal text versions; security and audit events; data subject requests. We do not request biometric data.
4. Purposes and legal bases. Creating and verifying the account and managing the demo (pre-contractual steps, Art. 6(1)(b) GDPR); managing appliances, licences, updates and support (contract, Art. 6(1)(b)); preventing abuse and protecting the service (legitimate interest, Art. 6(1)(f)); complying with legal obligations (Art. 6(1)(c)); sending commercial news only with separate, revocable consent (Art. 6(1)(a)).
5. Recipients. Authorised INFOKRAUSE staff and providers acting as processors: infrastructure and backups managed by INFOKRAUSE; Microsoft 365 (Exchange Online) for transactional e-mail; Google reCAPTCHA against abuse; Chatwoot (chat.infokrause.cl, soporte.infokrause.cl) for support, with automatic replies generated by artificial intelligence via Google Gemini (users are told when they are interacting with an AI system); authorised distributors and integrators in the customer's country (in Chile, Tecnologías IP Limitada), for sales and support. We do not sell personal data.
6. Transfers outside the EEA. Some providers, including the distributor in Chile, may process data outside the European Economic Area. In that case we rely on an adequacy decision or the European Commission's standard contractual clauses. A copy of the safeguards is available on request.
7. Retention. Unverified accounts: 7 days; verification tokens: 24 hours; session security evidence: 90 days; rejected or abandoned demos and inactive accounts without licences: 24 months; licences, activations and contractual evidence: 5 years after the end of the relationship; security and audit logs: 24 months; backups: up to 90 days; marketing: until consent is withdrawn. Data are then deleted or anonymised, unless required by law or a dispute.
8. Security. Access control and least privilege, transport encryption, hashing of passwords and tokens, secure sessions, CSRF protection, rate limiting, auditing and separation between the portal, License Manager and appliances.
9. Rights. Access, rectification, erasure, restriction, objection, portability and withdrawal of consent (Arts. 15–22 GDPR), by writing to privacy@infokrause.com. You may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority in your country.
10. Automated decisions and minors. We do not take decisions based solely on automated processing with legal effects. The portal is for businesses and is not directed at minors.
11. Cookies. We use strictly necessary cookies and storage (session, security, language) and keep the privacy preference for up to 180 days (ikface_privacy_consent). Chatwoot loads only if the user allows it or opens the chat; reCAPTCHA only when submitting protected forms (_GRECAPTCHA); Google Analytics only with consent to the «Statistics» category, with no advertising or remarketing. The choice can be changed under «Cookie preferences» in the footer.
12. Changes and language. Changes are published with a new version and date and, if material, notified. Text in Italian, Spanish and English; in case of discrepancy the Italian version prevails.