{"id":23367,"date":"2020-08-29T12:14:50","date_gmt":"2020-08-29T10:14:50","guid":{"rendered":"https:\/\/tiledesk.com\/privacy\/"},"modified":"2026-09-18T11:42:07","modified_gmt":"2026-09-18T09:42:07","slug":"privacy-html","status":"publish","type":"page","link":"https:\/\/tiledesk.com\/it\/privacy-html\/","title":{"rendered":"Privacy"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text css=””]<\/p>\n

TILEDESK PRIVACY POLICY 2026<\/b><\/h1>\n

Last updated: 15 September 2026<\/b><\/p>\n

1. About this Privacy Policy<\/b><\/h2>\n

This Privacy Policy explains how <\/span>Tiledesk S.r.l.<\/b> (“Tiledesk”, “we”, “us” or “our”) collects and processes personal data in connection with our websites, cloud platform, applications, APIs and related services.<\/span><\/p>\n

Tiledesk is established in Italy and processes personal data in accordance with:<\/span><\/p>\n

    \n
  • Regulation (EU) 2016\/679 (the <\/span>General Data Protection Regulation \u2013 GDPR<\/b>);<\/span><\/li>\n
  • Italian Legislative Decree No. 196\/2003, as subsequently amended, including by Legislative Decree No. 101\/2018 (the <\/span>Italian Privacy Code<\/b>);<\/span><\/li>\n
  • applicable Italian and European data protection and electronic communications legislation; and<\/span><\/li>\n
  • applicable decisions, guidelines and requirements of the <\/span>Garante per la protezione dei dati personali<\/b> and other competent European supervisory authorities.<\/span><\/li>\n<\/ul>\n

    This Privacy Policy applies to personal data for which Tiledesk acts as <\/span>Data Controller<\/b>.<\/span><\/p>\n

    It also explains, for transparency purposes, how Tiledesk handles personal data contained in customer workspaces, conversations and other customer content when Tiledesk acts as <\/span>Data Processor<\/b> on behalf of its customers. Those processing activities are additionally governed by our <\/span>Data Processing Agreement (“DPA”)<\/b>.<\/span><\/p>\n

    Where Tiledesk processes personal data on behalf of a customer, the customer’s privacy notice and instructions determine the purposes and legal basis of that processing.<\/span><\/p>\n

    [\/vc_column_text][vc_column_text css=””]<\/p>\n

    2. Who is responsible for your personal data?<\/b><\/h2>\n

    Tiledesk is:<\/span><\/p>\n

    Tiledesk S.r.l.<\/b>
    <\/b>Via Fratelli Bandiera 17<\/span>
    <\/span>73010 Soleto (LE)<\/span>
    <\/span>Italy<\/span>
    <\/span>C.F.\/P.IVA: IT05103590757<\/span>
    <\/span>REA LE \u2013 342169<\/span><\/p>\n

    Privacy enquiries and requests may be sent to:<\/span><\/p>\n

    safety@tiledesk.com<\/b><\/p>\n

    Where required by applicable law, information concerning Tiledesk’s Data Protection Officer, if appointed, will be made available through our website and contractual documentation.<\/span><\/p>\n

    <\/h1>\n

     <\/p>\n

    [\/vc_column_text][vc_column_text css=””]<\/p>\n

    3. When Tiledesk is Controller and when Tiledesk is Processor<\/b><\/h2>\n

    The privacy role of Tiledesk depends on the context in which personal data is processed.<\/span><\/p>\n

    3.1 Tiledesk as Data Controller<\/b><\/h3>\n

    Tiledesk generally acts as Data Controller when processing personal data relating to:<\/span><\/p>\n

      \n
    • visitors to Tiledesk websites;<\/span><\/li>\n
    • individuals who create or administer a Tiledesk account;<\/span><\/li>\n
    • customer representatives and authorised users;<\/span><\/li>\n
    • prospective customers and business contacts;<\/span><\/li>\n
    • billing, invoicing and contractual contacts;<\/span><\/li>\n
    • people who contact Tiledesk directly for support, sales or other enquiries;<\/span><\/li>\n
    • marketing communications sent by Tiledesk;<\/span><\/li>\n
    • security, fraud prevention, audit and service administration activities performed for Tiledesk’s own purposes.<\/span><\/li>\n<\/ul>\n

      In these cases, Tiledesk determines the purposes and essential means of the processing.<\/span><\/p>\n

      3.2 Tiledesk as Data Processor<\/b><\/h3>\n

      Where a customer uses Tiledesk to communicate with its own customers, users, employees, prospects or other individuals, the <\/span>customer normally acts as Data Controller and Tiledesk acts as Data Processor under Article 28 GDPR<\/b>.<\/span><\/p>\n

      This includes, depending on the customer’s configuration:<\/span><\/p>\n

        \n
      • live chat conversations;<\/span><\/li>\n
      • AI Agent and chatbot conversations;<\/span><\/li>\n
      • customer support interactions;<\/span><\/li>\n
      • WhatsApp, Facebook Messenger, Telegram and SMS communications;<\/span><\/li>\n
      • email ticketing;<\/span><\/li>\n
      • voice interactions;<\/span><\/li>\n
      • contacts and lead information;<\/span><\/li>\n
      • Knowledge Base content;<\/span><\/li>\n
      • uploaded documents;<\/span><\/li>\n
      • AI prompts and responses;<\/span><\/li>\n
      • data collected through forms and conversational workflows;<\/span><\/li>\n
      • customer-created attributes and metadata;<\/span><\/li>\n
      • information retrieved from or sent to third-party integrations;<\/span><\/li>\n
      • API and webhook payloads; and<\/span><\/li>\n
      • other data that the customer chooses to process through the Services.<\/span><\/li>\n<\/ul>\n

        The customer is responsible for determining the purpose and legal basis for such processing, providing the required privacy information to its data subjects, configuring the Services consistently with applicable law and responding to data-subject requests.<\/span><\/p>\n

        Tiledesk processes this data only on documented instructions from the customer, as further described in the DPA, unless processing is otherwise required by applicable law.<\/span><\/p>\n

        3.3 Customer-selected third-party integrations<\/b><\/h3>\n

        Customers may connect Tiledesk to third-party platforms, APIs, AI providers or other services.<\/span><\/p>\n

        Where the customer independently selects a third-party service, enters its own credentials or API key, or instructs Tiledesk to transmit data to that third party, the processing performed by that provider may be governed directly by the agreement and privacy terms between the customer and the provider.<\/span><\/p>\n

        A third-party provider is considered a Tiledesk subprocessor only where Tiledesk appoints that provider to process Customer Personal Data on Tiledesk’s behalf in connection with the provision of the Services.<\/span><\/p>\n

        [\/vc_column_text][vc_column_text css=””]<\/p>\n

        4. GDPR principles<\/b><\/h2>\n

        We process personal data according to the principles established by Article 5 GDPR.<\/span><\/p>\n

        In particular, personal data must be:<\/span><\/p>\n

          \n
        • processed lawfully, fairly and transparently;<\/span><\/li>\n
        • collected for specified, explicit and legitimate purposes;<\/span><\/li>\n
        • adequate, relevant and limited to what is necessary;<\/span><\/li>\n
        • accurate and, where necessary, kept up to date;<\/span><\/li>\n
        • retained no longer than necessary for the applicable purpose;<\/span><\/li>\n
        • processed using appropriate security and confidentiality measures; and<\/span><\/li>\n
        • handled in a manner that enables Tiledesk to demonstrate compliance with applicable data protection requirements.<\/span><\/li>\n<\/ul>\n

          We apply the principles of <\/span>privacy by design and privacy by default<\/b> when designing and operating our Services.<\/span><\/p>\n

          [\/vc_column_text][vc_column_text css=””]<\/p>\n

          PART I \u2013 PERSONAL DATA PROCESSED BY TILEDESK AS CONTROLLER<\/b><\/h1>\n

          5. Personal data we collect<\/b><\/h2>\n

          Depending on your relationship with Tiledesk, we may process the following categories of personal data.<\/span><\/p>\n

          5.1 Account and identification information<\/b><\/h3>\n

          This may include:<\/span><\/p>\n

            \n
          • first and last name;<\/span><\/li>\n
          • username;<\/span><\/li>\n
          • business email address;<\/span><\/li>\n
          • telephone number;<\/span><\/li>\n
          • company and job title;<\/span><\/li>\n
          • account identifier;<\/span><\/li>\n
          • workspace or organisation membership;<\/span><\/li>\n
          • authentication and account-management information.<\/span><\/li>\n<\/ul>\n

            5.2 Commercial and contractual information<\/b><\/h3>\n

            This may include:<\/span><\/p>\n

              \n
            • company information;<\/span><\/li>\n
            • subscription and plan information;<\/span><\/li>\n
            • orders;<\/span><\/li>\n
            • contractual communications;<\/span><\/li>\n
            • customer relationship history;<\/span><\/li>\n
            • quotations and commercial requests.<\/span><\/li>\n<\/ul>\n

              5.3 Billing and payment information<\/b><\/h3>\n

              This may include:<\/span><\/p>\n

                \n
              • billing address;<\/span><\/li>\n
              • company and VAT information;<\/span><\/li>\n
              • invoice information;<\/span><\/li>\n
              • payment status;<\/span><\/li>\n
              • transaction identifiers.<\/span><\/li>\n<\/ul>\n

                Where payment-card details are collected through a payment provider such as Stripe, full payment-card credentials are processed by that provider and are not intended to be stored by Tiledesk.<\/span><\/p>\n

                5.4 Communications with Tiledesk<\/b><\/h3>\n

                When you contact us, we may process:<\/span><\/p>\n

                  \n
                • your contact details;<\/span><\/li>\n
                • the content of emails and support requests;<\/span><\/li>\n
                • attachments you provide;<\/span><\/li>\n
                • meeting or demo information;<\/span><\/li>\n
                • information necessary to investigate and respond to your request.<\/span><\/li>\n<\/ul>\n

                  5.5 Technical and usage information<\/b><\/h3>\n

                  When you use our Websites or Services, we may receive technical data such as:<\/span><\/p>\n

                    \n
                  • IP address;<\/span><\/li>\n
                  • date and time of access;<\/span><\/li>\n
                  • browser type and version;<\/span><\/li>\n
                  • operating system;<\/span><\/li>\n
                  • device information;<\/span><\/li>\n
                  • user agent;<\/span><\/li>\n
                  • pages or functions accessed;<\/span><\/li>\n
                  • session and authentication information;<\/span><\/li>\n
                  • application events;<\/span><\/li>\n
                  • security and audit logs;<\/span><\/li>\n
                  • approximate location inferred from IP address where applicable.<\/span><\/li>\n<\/ul>\n

                    5.6 Marketing information<\/b><\/h3>\n

                    Where applicable, we may process:<\/span><\/p>\n

                      \n
                    • contact information;<\/span><\/li>\n
                    • marketing preferences;<\/span><\/li>\n
                    • newsletter subscriptions;<\/span><\/li>\n
                    • interactions with Tiledesk marketing communications;<\/span><\/li>\n
                    • information relating to commercial interests in our products and services.<\/span><\/li>\n<\/ul>\n

                      6. Why we process personal data and our legal bases<\/b><\/h2>\n

                      We process personal data only where a valid legal basis applies.<\/span><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
                      Purpose<\/b><\/td>\nTypical legal basis<\/b><\/td>\n<\/tr>\n
                      Creating and administering a Tiledesk account<\/span><\/td>\nPerformance of a contract or steps requested before entering a contract \u2013 Art. 6(1)(b) GDPR<\/span><\/td>\n<\/tr>\n
                      Providing the subscribed Services<\/span><\/td>\nArt. 6(1)(b) GDPR<\/span><\/td>\n<\/tr>\n
                      Responding to sales, support and other enquiries<\/span><\/td>\nArt. 6(1)(b) and\/or legitimate interests \u2013 Art. 6(1)(f)<\/span><\/td>\n<\/tr>\n
                      Managing customer and commercial relationships<\/span><\/td>\nArt. 6(1)(b) and Art. 6(1)(f)<\/span><\/td>\n<\/tr>\n
                      Billing, accounting and taxation<\/span><\/td>\nContractual necessity and compliance with legal obligations \u2013 Art. 6(1)(b) and (c)<\/span><\/td>\n<\/tr>\n
                      Protecting the Services, accounts and infrastructure from abuse, fraud and security threats<\/span><\/td>\nLegitimate interests \u2013 Art. 6(1)(f), and legal obligations where applicable<\/span><\/td>\n<\/tr>\n
                      Maintaining technical, operational and security logs<\/span><\/td>\nLegitimate interests \u2013 Art. 6(1)(f)<\/span><\/td>\n<\/tr>\n
                      Establishing, exercising or defending legal claims<\/span><\/td>\nLegitimate interests \u2013 Art. 6(1)(f)<\/span><\/td>\n<\/tr>\n
                      Complying with legal or regulatory obligations<\/span><\/td>\nArt. 6(1)(c)<\/span><\/td>\n<\/tr>\n
                      Sending marketing communications<\/span><\/td>\nConsent under Art. 6(1)(a), where required, or legitimate interests where permitted by applicable electronic-marketing rules<\/span><\/td>\n<\/tr>\n
                      Non-essential analytics or advertising technologies<\/span><\/td>\nConsent, where required by applicable cookie and ePrivacy rules<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                      Where processing is based on legitimate interests, we assess those interests against the rights and freedoms of affected individuals.<\/span><\/p>\n

                      Where we rely on consent, consent may be withdrawn at any time, without affecting the lawfulness of processing performed before withdrawal.<\/span><\/p>\n

                      7. Cookies and similar technologies<\/b><\/h2>\n

                      Tiledesk websites may use cookies and similar technologies for purposes including:<\/span><\/p>\n

                        \n
                      • providing essential website functionality;<\/span><\/li>\n
                      • maintaining sessions and security;<\/span><\/li>\n
                      • remembering user preferences;<\/span><\/li>\n
                      • measuring website performance;<\/span><\/li>\n
                      • analytics; and<\/span><\/li>\n
                      • marketing or advertising, where enabled.<\/span><\/li>\n<\/ul>\n

                        Cookies or tracking technologies that are not strictly necessary are activated only where permitted by applicable law and, where required, after obtaining the user’s consent.<\/span><\/p>\n

                        Users must be able to reject non-essential cookies as easily as they can accept them and may withdraw their consent through the cookie preference controls.<\/span><\/p>\n

                        More detailed and current information about individual cookies, providers, purposes and retention periods should be provided through Tiledesk’s <\/span>Cookie Policy and Consent Management Platform<\/b>.<\/span><\/p>\n

                        PART II \u2013 DATA PROCESSED THROUGH TILEDESK SERVICES ON BEHALF OF CUSTOMERS<\/b><\/h1>\n

                        8. Customer Service Data<\/b><\/h2>\n

                        When a Tiledesk customer uses the Services, the customer may submit, transmit, store, retrieve or otherwise process information through Tiledesk (“Customer Service Data”).<\/span><\/p>\n

                        Depending on the features enabled by the customer, Customer Service Data may include the following categories.<\/span><\/p>\n

                        8.1 End-user identification and contact data<\/b><\/h3>\n

                        For example:<\/span><\/p>\n

                          \n
                        • name and surname;<\/span><\/li>\n
                        • email address;<\/span><\/li>\n
                        • telephone number;<\/span><\/li>\n
                        • usernames;<\/span><\/li>\n
                        • account identifiers;<\/span><\/li>\n
                        • authenticated user identifiers;<\/span><\/li>\n
                        • anonymous visitor identifiers or UUIDs;<\/span><\/li>\n
                        • social or messaging-channel identifiers;<\/span><\/li>\n
                        • customer-defined profile fields.<\/span><\/li>\n<\/ul>\n

                          8.2 Conversation and support data<\/b><\/h3>\n

                          For example:<\/span><\/p>\n

                            \n
                          • live-chat messages;<\/span><\/li>\n
                          • chatbot and AI Agent conversations;<\/span><\/li>\n
                          • human-agent responses;<\/span><\/li>\n
                          • full conversation transcripts;<\/span><\/li>\n
                          • email and ticket content;<\/span><\/li>\n
                          • internal conversation attributes;<\/span><\/li>\n
                          • timestamps;<\/span><\/li>\n
                          • conversation status;<\/span><\/li>\n
                          • department or agent assignment;<\/span><\/li>\n
                          • tags and routing information;<\/span><\/li>\n
                          • customer support information.<\/span><\/li>\n<\/ul>\n

                            8.3 Attachments and multimedia content<\/b><\/h3>\n

                            Depending on the channel and customer configuration, this may include:<\/span><\/p>\n

                              \n
                            • documents;<\/span><\/li>\n
                            • images;<\/span><\/li>\n
                            • audio;<\/span><\/li>\n
                            • video;<\/span><\/li>\n
                            • email attachments;<\/span><\/li>\n
                            • other files transmitted by users.<\/span><\/li>\n<\/ul>\n

                              8.4 Technical and contextual metadata<\/b><\/h3>\n

                              For example:<\/span><\/p>\n

                                \n
                              • IP address where processed;<\/span><\/li>\n
                              • browser and operating-system information;<\/span><\/li>\n
                              • user agent;<\/span><\/li>\n
                              • source page;<\/span><\/li>\n
                              • language;<\/span><\/li>\n
                              • session identifiers;<\/span><\/li>\n
                              • channel used;<\/span><\/li>\n
                              • country or city information where derived or provided;<\/span><\/li>\n
                              • message and event timestamps;<\/span><\/li>\n
                              • request and conversation identifiers.<\/span><\/li>\n<\/ul>\n

                                8.5 Customer-configured fields and integration data<\/b><\/h3>\n

                                Customers may define additional fields or connect Tiledesk to external systems. Data may therefore include:<\/span><\/p>\n

                                  \n
                                • CRM data;<\/span><\/li>\n
                                • lead information;<\/span><\/li>\n
                                • order information;<\/span><\/li>\n
                                • shipment or tracking information;<\/span><\/li>\n
                                • support-case identifiers;<\/span><\/li>\n
                                • employee information;<\/span><\/li>\n
                                • custom metadata;<\/span><\/li>\n
                                • API data;<\/span><\/li>\n
                                • webhook payloads;<\/span><\/li>\n
                                • information retrieved from external systems.<\/span><\/li>\n<\/ul>\n

                                  The particular categories processed are determined by the customer.<\/span><\/p>\n

                                  8.6 Knowledge Base and AI data<\/b><\/h3>\n

                                  Where AI and Knowledge Base functionality is used, Customer Service Data may also include:<\/span><\/p>\n

                                    \n
                                  • prompts;<\/span><\/li>\n
                                  • questions submitted by users;<\/span><\/li>\n
                                  • AI-generated responses;<\/span><\/li>\n
                                  • documents uploaded to the Knowledge Base;<\/span><\/li>\n
                                  • text extracted from documents;<\/span><\/li>\n
                                  • website or URL content added by the customer;<\/span><\/li>\n
                                  • Q&A content;<\/span><\/li>\n
                                  • PDF, DOCX, CSV or other supported documents;<\/span><\/li>\n
                                  • text segments or chunks;<\/span><\/li>\n
                                  • embeddings or vector representations;<\/span><\/li>\n
                                  • information retrieved from the Knowledge Base to generate a response.<\/span><\/li>\n<\/ul>\n

                                    8.7 Voice data<\/b><\/h3>\n

                                    Where voice functionality is enabled, processing may include:<\/span><\/p>\n

                                      \n
                                    • telephone numbers;<\/span><\/li>\n
                                    • call metadata;<\/span><\/li>\n
                                    • spoken input;<\/span><\/li>\n
                                    • call or conversation content;<\/span><\/li>\n
                                    • transcripts;<\/span><\/li>\n
                                    • information generated by speech-to-text or text-to-speech functionality.<\/span><\/li>\n<\/ul>\n

                                      8.8 Special categories of personal data<\/b><\/h3>\n

                                      Tiledesk does not require customers to submit special-category data under Article 9 GDPR or data relating to criminal convictions and offences under Article 10 GDPR in order to use the standard Services.<\/span><\/p>\n

                                      Customers are responsible for determining whether such data may lawfully be processed through their configured use case and for implementing any additional safeguards, legal bases or contractual measures required by applicable law.<\/span><\/p>\n

                                      Where Tiledesk processes such information on behalf of a customer, it does so solely according to the customer’s documented instructions and the DPA.<\/span><\/p>\n

                                      9. AI and automated processing<\/b><\/h2>\n

                                      Tiledesk provides functions that allow customers to build AI Agents and automated workflows.<\/span><\/p>\n

                                      Depending on customer configuration, information submitted through a conversation may be used to:<\/span><\/p>\n

                                        \n
                                      • generate responses;<\/span><\/li>\n
                                      • retrieve information from a Knowledge Base;<\/span><\/li>\n
                                      • classify a message or request;<\/span><\/li>\n
                                      • extract structured information;<\/span><\/li>\n
                                      • route a conversation;<\/span><\/li>\n
                                      • determine the next step in a workflow;<\/span><\/li>\n
                                      • invoke an external tool or integration; or<\/span><\/li>\n
                                      • assist a human operator.<\/span><\/li>\n<\/ul>\n

                                        When these activities are carried out using Customer Service Data, the customer determines the purpose and configuration of the processing and Tiledesk normally acts as Data Processor.<\/span><\/p>\n

                                        Customers are responsible for determining whether their particular implementation constitutes profiling or automated decision-making within the meaning of the GDPR, including Article 22, and for implementing human oversight and other safeguards where required.<\/span><\/p>\n

                                        In its own role as Data Controller, Tiledesk does not intend to make decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals unless expressly disclosed and permitted by applicable law.<\/span><\/p>\n

                                        10. Data minimisation and customer responsibility<\/b><\/h2>\n

                                        Tiledesk provides configurable features that allow customers to decide what data is collected through their workflows.<\/span><\/p>\n

                                        Customers should configure those features according to the principle of data minimisation and should not collect or transmit personal data that is unnecessary for the intended purpose.<\/span><\/p>\n

                                        In particular, customers are responsible for:<\/span><\/p>\n

                                          \n
                                        • establishing an appropriate legal basis;<\/span><\/li>\n
                                        • providing privacy information to their users;<\/span><\/li>\n
                                        • collecting any required consent;<\/span><\/li>\n
                                        • limiting data fields to what is necessary;<\/span><\/li>\n
                                        • determining appropriate retention periods;<\/span><\/li>\n
                                        • configuring integrations and AI providers appropriately;<\/span><\/li>\n
                                        • determining whether sensitive data can be processed;<\/span><\/li>\n
                                        • responding to data-subject requests; and<\/span><\/li>\n
                                        • complying with sector-specific requirements applicable to their use case.<\/span><\/li>\n<\/ul>\n

                                          PART III \u2013 DISCLOSURE, SUBPROCESSORS AND INTERNATIONAL TRANSFERS<\/b><\/h1>\n

                                          11. Who receives personal data?<\/b><\/h2>\n

                                          Depending on the context, personal data may be disclosed to:<\/span><\/p>\n

                                            \n
                                          • Tiledesk employees and authorised personnel who require access for their duties;<\/span><\/li>\n
                                          • cloud infrastructure and database providers;<\/span><\/li>\n
                                          • AI and Knowledge Base service providers;<\/span><\/li>\n
                                          • communication providers;<\/span><\/li>\n
                                          • email-delivery providers;<\/span><\/li>\n
                                          • payment providers;<\/span><\/li>\n
                                          • CRM and customer-support providers;<\/span><\/li>\n
                                          • analytics and marketing providers, subject to applicable consent requirements;<\/span><\/li>\n
                                          • professional advisers such as lawyers, accountants and auditors;<\/span><\/li>\n
                                          • public authorities, courts or regulators where required by law;<\/span><\/li>\n
                                          • parties involved in a merger, acquisition, restructuring or transfer of business, subject to appropriate confidentiality and data-protection measures.<\/span><\/li>\n<\/ul>\n

                                            We do not sell Customer Service Data.<\/span><\/p>\n

                                            12. Subprocessors<\/b><\/h2>\n

                                            Where Tiledesk acts as Data Processor, it may appoint subprocessors to assist in providing the Services.<\/span><\/p>\n

                                            Tiledesk requires subprocessors to enter into written contractual arrangements imposing appropriate confidentiality, security and data-protection obligations in accordance with Article 28 GDPR.<\/span><\/p>\n

                                            The applicable subprocessor may depend on:<\/span><\/p>\n

                                              \n
                                            • the features selected by the customer;<\/span><\/li>\n
                                            • the communication channel used;<\/span><\/li>\n
                                            • integrations enabled by the customer;<\/span><\/li>\n
                                            • the AI provider selected;<\/span><\/li>\n
                                            • the customer’s deployment configuration.<\/span><\/li>\n<\/ul>\n

                                              12.1 Core infrastructure and service subprocessors<\/b><\/h3>\n

                                              At the date of this Policy, Tiledesk publicly identifies the following core providers:<\/span><\/p>\n\n\n\n\n\n\n\n\n
                                              Provider<\/b><\/td>\nActivity<\/b><\/td>\nCategories of data potentially processed<\/b><\/td>\nPrincipal processing location<\/b><\/td>\n<\/tr>\n
                                              Amazon Web Services EMEA SARL<\/b><\/td>\nCloud infrastructure\/database hosting<\/span><\/td>\nService data, including conversations, interactions and stored customer information<\/span><\/td>\nEuropean Union<\/span><\/td>\n<\/tr>\n
                                              Google Ireland Limited \/ Google Cloud<\/b><\/td>\nCloud infrastructure\/database services<\/span><\/td>\nService data<\/span><\/td>\nEuropean Union<\/span><\/td>\n<\/tr>\n
                                              MongoDB GmbH<\/b><\/td>\nManaged cloud database services<\/span><\/td>\nService data<\/span><\/td>\nEuropean Union<\/span><\/td>\n<\/tr>\n
                                              Pinecone Systems, Inc.<\/b><\/td>\nVector database \/ Knowledge Base retrieval<\/span><\/td>\nContent and documents used for Knowledge Base\/vector retrieval<\/span><\/td>\nEuropean Union<\/span><\/td>\n<\/tr>\n
                                              OpenAI Ireland Ltd<\/b><\/td>\nLLM processing and AI\/RAG functionality where OpenAI-backed functionality is used<\/span><\/td>\nPrompts, messages, retrieved Knowledge Base content and related AI input\/output as applicable<\/span><\/td>\nEuropean Union and\/or United States depending on service configuration and processing arrangement<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                              The precise data transmitted depends on the feature used.<\/span><\/p>\n

                                              12.2 Optional feature-specific providers<\/b><\/h3>\n

                                              Where the relevant feature or integration is enabled, personal data may also be processed through providers including:<\/span><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
                                              Provider<\/b><\/td>\nFunction<\/b><\/td>\nData concerned<\/b><\/td>\n<\/tr>\n
                                              Celonis, Inc. \/ Make<\/b><\/td>\nWorkflow automation<\/span><\/td>\nData selected by the customer for transmission through the integration<\/span><\/td>\n<\/tr>\n
                                              HubSpot, Inc.<\/b><\/td>\nCRM, marketing, sales and customer-service integration<\/span><\/td>\nData selected by the customer for transmission to HubSpot<\/span><\/td>\n<\/tr>\n
                                              Mailgun Technologies, Inc.<\/b><\/td>\nEmail\/SMTP delivery<\/span><\/td>\nEmail address, message and related SMTP\/email information<\/span><\/td>\n<\/tr>\n
                                              Meta Platforms<\/b><\/td>\nFacebook Messenger integration<\/span><\/td>\nAccount\/channel information and message content<\/span><\/td>\n<\/tr>\n
                                              Meta Platforms<\/b><\/td>\nWhatsApp Business integration<\/span><\/td>\nAccount information, telephone number, message content and relevant media<\/span><\/td>\n<\/tr>\n
                                              Peaberry Software, Inc. \/ Customer.io<\/b><\/td>\nCustomer communications and marketing automation<\/span><\/td>\nName, email address, telephone number and campaign-related information as configured<\/span><\/td>\n<\/tr>\n
                                              Qapla’ S.p.A.<\/b><\/td>\nShipping and e-commerce integration<\/span><\/td>\nName, email, order and tracking information where used<\/span><\/td>\n<\/tr>\n
                                              Telegram<\/b><\/td>\nTelegram messaging integration<\/span><\/td>\nAccount identifiers, telephone number where available and message content<\/span><\/td>\n<\/tr>\n
                                              Twilio Inc.<\/b><\/td>\nSMS and\/or communication functionality<\/span><\/td>\nTelephone number, name where supplied, message or communication content<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                              Some providers offer different regional hosting or processing environments. The region applicable to a particular integration may therefore depend on Tiledesk’s or the customer’s configured account and selected service region.<\/span><\/p>\n

                                              Tiledesk maintains a separate <\/span>Subprocessor List<\/b>, which should be consulted for the current legal entity, processing activity, categories of data, processing\/hosting regions and applicable international-transfer mechanism for each Tiledesk-appointed subprocessor.<\/span><\/p>\n

                                              Providers connected directly by customers using customer-owned credentials or API keys are not necessarily Tiledesk subprocessors.<\/span><\/p>\n

                                              13. International transfers of personal data<\/b><\/h2>\n

                                              Tiledesk is an Italian company and seeks to use European processing locations where appropriate and available. However, use of certain service providers, AI services, communication channels or customer-selected integrations may result in personal data being transferred to or accessed from countries outside the European Economic Area (“EEA”).<\/span><\/p>\n

                                              Tiledesk does <\/span>not<\/b> rely on the former EU-US Privacy Shield framework.<\/span><\/p>\n

                                              Where personal data is transferred outside the EEA, Tiledesk uses an appropriate transfer mechanism under Chapter V GDPR, as applicable. These may include:<\/span><\/p>\n

                                              13.1 Adequacy decisions<\/b><\/h3>\n

                                              Personal data may be transferred to a country, territory or organisation recognised by the European Commission as providing an adequate level of protection under Article 45 GDPR.<\/span><\/p>\n

                                              For transfers to the United States, this may include transfers to an eligible organisation participating in the <\/span>EU-US Data Privacy Framework<\/b>, where applicable.<\/span><\/p>\n

                                              13.2 Standard Contractual Clauses<\/b><\/h3>\n

                                              Where no applicable adequacy decision exists, Tiledesk may rely on the European Commission’s <\/span>Standard Contractual Clauses adopted by Commission Implementing Decision (EU) 2021\/914<\/b>, together with appropriate contractual, organisational and technical safeguards.<\/span><\/p>\n

                                              Where required, Tiledesk assesses the circumstances of the transfer and whether supplementary measures are appropriate.<\/span><\/p>\n

                                              13.3 Other GDPR transfer mechanisms<\/b><\/h3>\n

                                              Where applicable, transfers may also rely on another mechanism recognised under Articles 46 or 47 GDPR, such as approved Binding Corporate Rules.<\/span><\/p>\n

                                              Derogations under Article 49 GDPR are used only where their legal requirements are met and they are appropriate to the specific transfer.<\/span><\/p>\n

                                              Information on the safeguards applicable to a particular Tiledesk-appointed subprocessor may be requested by contacting <\/span>safety@tiledesk.com<\/b>, subject to any necessary protection of confidential or commercially sensitive information.<\/span><\/p>\n

                                              PART IV \u2013 RETENTION AND SECURITY<\/b><\/h1>\n

                                              14. How long we retain personal data<\/b><\/h2>\n

                                              Tiledesk applies the GDPR principle of storage limitation.<\/span><\/p>\n

                                              Retention depends on the type of personal data, why it is processed, contractual requirements, customer instructions and applicable legal obligations.<\/span><\/p>\n

                                              14.1 Account and contractual data<\/b><\/h3>\n

                                              Account and customer-administration data is generally retained for the duration of the account or commercial relationship and subsequently for the period necessary to comply with legal obligations or establish, exercise or defend legal claims.<\/span><\/p>\n

                                              14.2 Accounting and invoicing data<\/b><\/h3>\n

                                              Accounting, invoicing and tax records are retained for the periods required by Italian law, generally <\/span>10 years<\/b>, subject to any longer period required in connection with proceedings, audits or other legal obligations.<\/span><\/p>\n

                                              14.3 Sales and support communications<\/b><\/h3>\n

                                              Sales enquiries and support communications are retained for as long as necessary to manage the relevant request and subsequently where reasonably necessary for customer relationship management, security, contractual evidence or legal claims.<\/span><\/p>\n

                                              14.4 Marketing data<\/b><\/h3>\n

                                              Where marketing is based on consent, data is processed until consent is withdrawn or the data is no longer necessary for the relevant marketing purpose.<\/span><\/p>\n

                                              Where a person opts out of marketing, Tiledesk may retain limited information in a suppression list in order to ensure that the opt-out continues to be respected.<\/span><\/p>\n

                                              14.5 Technical and security data<\/b><\/h3>\n

                                              Technical, access and security logs are retained for periods proportionate to their purpose, taking into account security requirements, investigation needs and legal obligations.<\/span><\/p>\n

                                              Data relevant to an identified security incident may be retained for longer where necessary to investigate, remediate or establish legal claims.<\/span><\/p>\n

                                              14.6 Customer Service Data<\/b><\/h3>\n

                                              Where Tiledesk acts as Data Processor, retention is determined by:<\/span><\/p>\n

                                                \n
                                              • the applicable Service and subscription configuration;<\/span><\/li>\n
                                              • documented customer instructions;<\/span><\/li>\n
                                              • the DPA;<\/span><\/li>\n
                                              • the applicable Order Form or agreement; and<\/span><\/li>\n
                                              • legal obligations applicable to Tiledesk.<\/span><\/li>\n<\/ul>\n

                                                At the end of the processing relationship, Customer Personal Data is deleted or returned in accordance with the DPA, subject to applicable legal-retention requirements.<\/span><\/p>\n

                                                Residual copies may remain for a limited period in backup systems until they are overwritten or deleted as part of the normal backup lifecycle, provided that such data remains protected and is not used for other purposes.<\/span><\/p>\n

                                                15. Security measures<\/b><\/h2>\n

                                                Tiledesk applies technical and organisational measures designed to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR.<\/span><\/p>\n

                                                Depending on the relevant Service and deployment, these measures include:<\/span><\/p>\n

                                                Access and identity security<\/b><\/h3>\n
                                                  \n
                                                • role-based and workspace-level access controls;<\/span><\/li>\n
                                                • access limited according to operational need;<\/span><\/li>\n
                                                • controlled access profiles for authorised personnel;<\/span><\/li>\n
                                                • one-way password hashing;<\/span><\/li>\n
                                                • enterprise Single Sign-On support where applicable;<\/span><\/li>\n
                                                • logging of authentication and relevant configuration events.<\/span><\/li>\n<\/ul>\n

                                                  Encryption and network security<\/b><\/h3>\n
                                                    \n
                                                  • encryption of traffic in transit using <\/span>TLS 1.2 or higher<\/b>;<\/span><\/li>\n
                                                  • encrypted internal cloud communications using mTLS where applicable;<\/span><\/li>\n
                                                  • network-protection mechanisms;<\/span><\/li>\n
                                                  • Web Application Firewall protections;<\/span><\/li>\n
                                                  • DDoS mitigation controls.<\/span><\/li>\n<\/ul>\n

                                                    Availability and resilience<\/b><\/h3>\n
                                                      \n
                                                    • managed multi-availability-zone database infrastructure where applicable;<\/span><\/li>\n
                                                    • encrypted off-site backups;<\/span><\/li>\n
                                                    • point-in-time database recovery mechanisms;<\/span><\/li>\n
                                                    • project history and rollback capabilities where available.<\/span><\/li>\n<\/ul>\n

                                                      Monitoring and traceability<\/b><\/h3>\n
                                                        \n
                                                      • cloud-resource audit logging;<\/span><\/li>\n
                                                      • application audit logs;<\/span><\/li>\n
                                                      • security-event monitoring and alerting;<\/span><\/li>\n
                                                      • monitoring of relevant configuration changes.<\/span><\/li>\n<\/ul>\n

                                                        Application security<\/b><\/h3>\n
                                                          \n
                                                        • automated and manual code review;<\/span><\/li>\n
                                                        • regular application and security updates;<\/span><\/li>\n
                                                        • vulnerability-management activities;<\/span><\/li>\n
                                                        • external penetration testing and vulnerability assessments performed periodically.<\/span><\/li>\n<\/ul>\n

                                                          Organisational measures<\/b><\/h3>\n
                                                            \n
                                                          • confidentiality obligations;<\/span><\/li>\n
                                                          • access authorisation procedures;<\/span><\/li>\n
                                                          • personnel instructions and security policies;<\/span><\/li>\n
                                                          • employee background or reference checks where permitted by applicable law;<\/span><\/li>\n
                                                          • procedures for managing security incidents and personal-data breaches.<\/span><\/li>\n<\/ul>\n

                                                            Where Tiledesk acts as Data Processor and becomes aware of a Personal Data Breach concerning Customer Personal Data, Tiledesk notifies the relevant customer without undue delay and in accordance with the timeframe specified in the DPA.<\/span><\/p>\n

                                                            No online service can guarantee absolute security. Tiledesk therefore periodically reviews its safeguards considering the state of the art, implementation costs, nature and scope of the processing and risks to individuals.<\/span><\/p>\n

                                                            PART V \u2013 YOUR RIGHTS<\/b><\/h1>\n

                                                            16. GDPR rights<\/b><\/h2>\n

                                                            Where Tiledesk acts as Data Controller, and subject to the conditions established by applicable law, you may have the right to:<\/span><\/p>\n

                                                              \n
                                                            • access<\/b> your personal data;<\/span><\/li>\n
                                                            • obtain <\/span>rectification<\/b> of inaccurate or incomplete personal data;<\/span><\/li>\n
                                                            • obtain <\/span>erasure<\/b> of personal data;<\/span><\/li>\n
                                                            • request <\/span>restriction<\/b> of processing;<\/span><\/li>\n
                                                            • object<\/b> to processing based on legitimate interests;<\/span><\/li>\n
                                                            • object at any time to processing for <\/span>direct marketing<\/b>;<\/span><\/li>\n
                                                            • receive certain personal data in a structured, commonly used and machine-readable format and exercise your right to <\/span>data portability<\/b>;<\/span><\/li>\n
                                                            • withdraw consent<\/b> at any time where processing is based on consent;<\/span><\/li>\n
                                                            • obtain safeguards in relation to certain forms of <\/span>automated decision-making<\/b>, where applicable; and<\/span><\/li>\n
                                                            • lodge a complaint with a competent supervisory authority.<\/span><\/li>\n<\/ul>\n

                                                              To exercise rights concerning personal data for which Tiledesk is Controller, contact:<\/span><\/p>\n

                                                              safety@tiledesk.com<\/b><\/p>\n

                                                              We may request information reasonably necessary to verify your identity before responding to a request.<\/span><\/p>\n

                                                              Requests will be handled within the time limits established by the GDPR.<\/span><\/p>\n

                                                              17. Requests concerning a Tiledesk customer’s chatbot, AI Agent or communication channel<\/b><\/h2>\n

                                                              If you interacted with an organisation that uses Tiledesk \u2014 for example through its website chatbot, live chat, WhatsApp service or AI Agent \u2014 that organisation is normally the <\/span>Data Controller<\/b> for your conversation.<\/span><\/p>\n

                                                              You should therefore direct your privacy request to that organisation.<\/span><\/p>\n

                                                              If Tiledesk receives a request concerning Customer Personal Data for which it acts solely as Data Processor, Tiledesk will, where appropriate, refer or transmit the request to the relevant customer and will provide the assistance required under the DPA and applicable law.<\/span><\/p>\n

                                                              Tiledesk will not independently decide whether Customer Personal Data should be deleted, corrected, disclosed or otherwise modified except where authorised by the customer or required by law.<\/span><\/p>\n

                                                              18. Right to complain<\/b><\/h2>\n

                                                              You have the right to lodge a complaint with the data-protection supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.<\/span><\/p>\n

                                                              As Tiledesk is established in Italy, the relevant Italian supervisory authority is:<\/span><\/p>\n

                                                              Garante per la protezione dei dati personali<\/b><\/p>\n

                                                              Information about how to submit a complaint is available through the Garante’s official website.<\/span><\/p>\n

                                                              We encourage you to contact us first at <\/span>safety@tiledesk.com<\/b> if you have concerns about the way we process your personal data.<\/span><\/p>\n

                                                              PART VI \u2013 OTHER INFORMATION<\/b><\/h1>\n

                                                              19. Children and minors<\/b><\/h2>\n

                                                              Tiledesk’s account-based commercial Services are designed primarily for businesses and professional users and are not intended to be directly marketed to children.<\/span><\/p>\n

                                                              Customers that use Tiledesk Services to interact with children or minors are responsible for determining whether such use is lawful, providing appropriate privacy information and obtaining parental or other authorisation where required.<\/span><\/p>\n

                                                              If we learn that personal data has been collected by Tiledesk in its role as Data Controller contrary to applicable child-data protection requirements, we will take appropriate steps to delete or otherwise lawfully handle that information.<\/span><\/p>\n

                                                              20. Self-hosted and on-premise deployments<\/b><\/h2>\n

                                                              Tiledesk can also be deployed by customers on infrastructure controlled by the customer or another provider selected by the customer.<\/span><\/p>\n

                                                              For a fully self-hosted implementation, Tiledesk may not receive or have access to conversation or Customer Service Data stored within that environment.<\/span><\/p>\n

                                                              In such cases, this Privacy Policy continues to apply to personal data independently provided to Tiledesk, such as account, contractual, billing, support or commercial information, but the customer is responsible for the personal data processed within its own deployment.<\/span><\/p>\n

                                                              21. Third-party services and websites<\/b><\/h2>\n

                                                              Our Websites and Services may contain links to, or enable integrations with, third-party services.<\/span><\/p>\n

                                                              Unless a third-party provider acts as a processor or subprocessor on Tiledesk’s behalf, its processing of personal data is governed by its own privacy notice and contractual terms.<\/span><\/p>\n

                                                              Customers should evaluate the privacy and security practices of third-party services before enabling integrations that cause Customer Personal Data to be transmitted to those services.<\/span><\/p>\n

                                                              22. Changes to this Privacy Policy<\/b><\/h2>\n

                                                              We may update this Privacy Policy to reflect:<\/span><\/p>\n

                                                                \n
                                                              • changes to our Services;<\/span><\/li>\n
                                                              • new functionality;<\/span><\/li>\n
                                                              • changes to our processing activities or providers;<\/span><\/li>\n
                                                              • regulatory or legal developments;<\/span><\/li>\n
                                                              • improvements to our privacy and security practices.<\/span><\/li>\n<\/ul>\n

                                                                When we update the Policy, we will change the <\/span>“Last updated”<\/b> date.<\/span><\/p>\n

                                                                Where a change materially affects how personal data is processed, we will provide additional notice where required, for example through the Services, website or email.<\/span><\/p>\n

                                                                Previous versions may be retained for accountability and reference purposes.<\/span><\/p>\n

                                                                23. Contact us<\/b><\/h2>\n

                                                                For questions concerning this Privacy Policy, our privacy practices or the exercise of your rights, contact:<\/span><\/p>\n

                                                                Tiledesk S.r.l.<\/b>
                                                                <\/b>Via Fratelli Bandiera 17<\/span>
                                                                <\/span>73010 Soleto (LE), Italy<\/span><\/p>\n

                                                                Privacy contact:<\/b> safety@tiledesk.com<\/span><\/p>\n

                                                                <\/p>\n

                                                                Contact Us<\/strong><\/p>\n

                                                                <\/p>\n

                                                                If you have questions or need to contact us about this Privacy Policy, please email us at\u00a0safety@tiledesk.com.<\/p>\n

                                                                \u00a0<\/p>\n

                                                                [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

                                                                [vc_row][vc_column][vc_column_text css=””] TILEDESK PRIVACY POLICY 2026 Last updated: 15 September 2026 1. About this Privacy Policy This Privacy Policy explains how Tiledesk S.r.l. (“Tiledesk”, “we”, “us” [\u2026]<\/span><\/p>\n","protected":false},"author":188999850,"featured_media":-1,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_wpcom_ai_launchpad_about_page":false,"_wpcom_ai_launchpad_gallery_page":false,"_wpcom_ai_launchpad_contact_page":false,"_wpcom_ai_launchpad_events_page":false,"_wpcom_ai_launchpad_video_page":false,"_wpcom_ai_launchpad_portfolio_piece":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"footnotes":""},"class_list":["post-23367","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\nPrivacy Policy Tiledesk | GDPR e Protezione dei Dati<\/title>\n<meta name=\"description\" content=\"Scopri come Tiledesk raccoglie, tratta, protegge e conserva i dati personali nel rispetto del GDPR, inclusi sub-responsabili, sicurezza, trattamento tramite AI e diritti privacy.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tiledesk.com\/it\/privacy-html\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy Tiledesk | GDPR e Protezione dei Dati\" \/>\n<meta property=\"og:description\" content=\"Scopri come Tiledesk raccoglie, tratta, protegge e conserva i dati personali nel rispetto del GDPR, inclusi sub-responsabili, sicurezza, trattamento tramite AI e diritti privacy.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tiledesk.com\/it\/privacy-html\/\" \/>\n<meta property=\"og:site_name\" content=\"Tiledesk\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/tiledesk\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-18T09:42:07+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data1\" content=\"21 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/privacy-html\\\/\",\"url\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/privacy-html\\\/\",\"name\":\"Privacy Policy Tiledesk | GDPR e Protezione dei Dati\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/#website\"},\"datePublished\":\"2020-08-29T10:14:50+00:00\",\"dateModified\":\"2026-09-18T09:42:07+00:00\",\"description\":\"Scopri come Tiledesk raccoglie, tratta, protegge e conserva i dati personali nel rispetto del GDPR, inclusi sub-responsabili, sicurezza, trattamento tramite AI e diritti privacy.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/privacy-html\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/tiledesk.com\\\/it\\\/privacy-html\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/privacy-html\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/\",\"name\":\"Tiledesk\",\"description\":\"Conversational Automation for Customer Engagement\",\"publisher\":{\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/#organization\",\"name\":\"Tiledesk\",\"url\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/tiledesk.com\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/tiledesk_website.png?fit=3420%2C1038&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/tiledesk.com\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/tiledesk_website.png?fit=3420%2C1038&ssl=1\",\"width\":3420,\"height\":1038,\"caption\":\"Tiledesk\"},\"image\":{\"@id\":\"https:\\\/\\\/tiledesk.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/tiledesk\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy Tiledesk | GDPR e Protezione dei Dati","description":"Scopri come Tiledesk raccoglie, tratta, protegge e conserva i dati personali nel rispetto del GDPR, inclusi sub-responsabili, sicurezza, trattamento tramite AI e diritti privacy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tiledesk.com\/it\/privacy-html\/","og_locale":"it_IT","og_type":"article","og_title":"Privacy Policy Tiledesk | GDPR e Protezione dei Dati","og_description":"Scopri come Tiledesk raccoglie, tratta, protegge e conserva i dati personali nel rispetto del GDPR, inclusi sub-responsabili, sicurezza, trattamento tramite AI e diritti privacy.","og_url":"https:\/\/tiledesk.com\/it\/privacy-html\/","og_site_name":"Tiledesk","article_publisher":"https:\/\/www.facebook.com\/tiledesk\/","article_modified_time":"2026-09-18T09:42:07+00:00","twitter_card":"summary_large_image","twitter_misc":{"Tempo di lettura stimato":"21 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/tiledesk.com\/it\/privacy-html\/","url":"https:\/\/tiledesk.com\/it\/privacy-html\/","name":"Privacy Policy Tiledesk | GDPR e Protezione dei Dati","isPartOf":{"@id":"https:\/\/tiledesk.com\/it\/#website"},"datePublished":"2020-08-29T10:14:50+00:00","dateModified":"2026-09-18T09:42:07+00:00","description":"Scopri come Tiledesk raccoglie, tratta, protegge e conserva i dati personali nel rispetto del GDPR, inclusi sub-responsabili, sicurezza, trattamento tramite AI e diritti privacy.","breadcrumb":{"@id":"https:\/\/tiledesk.com\/it\/privacy-html\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tiledesk.com\/it\/privacy-html\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/tiledesk.com\/it\/privacy-html\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/tiledesk.com\/it\/"},{"@type":"ListItem","position":2,"name":"Privacy"}]},{"@type":"WebSite","@id":"https:\/\/tiledesk.com\/it\/#website","url":"https:\/\/tiledesk.com\/it\/","name":"Tiledesk","description":"Conversational Automation for Customer Engagement","publisher":{"@id":"https:\/\/tiledesk.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tiledesk.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/tiledesk.com\/it\/#organization","name":"Tiledesk","url":"https:\/\/tiledesk.com\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/tiledesk.com\/it\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/tiledesk.com\/wp-content\/uploads\/2022\/07\/tiledesk_website.png?fit=3420%2C1038&ssl=1","contentUrl":"https:\/\/i0.wp.com\/tiledesk.com\/wp-content\/uploads\/2022\/07\/tiledesk_website.png?fit=3420%2C1038&ssl=1","width":3420,"height":1038,"caption":"Tiledesk"},"image":{"@id":"https:\/\/tiledesk.com\/it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/tiledesk\/"]}]}},"jetpack_likes_enabled":false,"jetpack_shortlink":"https:\/\/wp.me\/PcfkHd-64T","jetpack_sharing_enabled":true,"permalink_manager":null,"_links":{"self":[{"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/pages\/23367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/users\/188999850"}],"replies":[{"embeddable":true,"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/comments?post=23367"}],"version-history":[{"count":22,"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/pages\/23367\/revisions"}],"predecessor-version":[{"id":27812,"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/pages\/23367\/revisions\/27812"}],"wp:attachment":[{"href":"https:\/\/tiledesk.com\/it\/wp-json\/wp\/v2\/media?parent=23367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}