Draft notice · legal review pending

Privacy

How The Sipping Bulletin handles personal data, under the EU General Data Protection Regulation (GDPR).

1. Data controller

NiEW Design Srl, Modena, Italy (“NiEW”), is the controller of the personal data processed through this app. Contact for any privacy matter: andrea.violante@niew.it · www.niew.it.

2. What we process, why, and on what legal basis

  • Reading without an account. An anonymous session on your device keeps your topics and alert settings. We count visits and opened content in aggregate, never by person. Legal basis: our legitimate interest in running and improving the app (Art. 6(1)(f)); only technically necessary storage on your device.
  • Your account. If you sign in: your email, your name if your Google account provides it, the company and role you declare, your topics, what you save and your notes, and what you open in the app. Purpose: to give you the service you ask for, on every device. Legal basis: performance of the service you request (Art. 6(1)(b)).
  • Follow-up and next editions, only with your consent. If you tick the separate box (never pre-ticked), NiEW may contact you about the topics you followed and the content you opened, and invite you to the next editions of the Sipping. Legal basis: consent (Art. 6(1)(a)). Everything else works without it, and you can withdraw it at any time (Art. 7(3)).
  • When you contact us. With “Show my interest”, “Book a chat” or “Write to us” we keep the name, company, email, phone (if you give it) and message you send, only to answer you. Legal basis: steps taken at your request (Art. 6(1)(b)).
  • Alerts. If you turn on alerts on your phone or on Telegram, we keep the technical address needed to send them, until you turn them off. Legal basis: the service you request (Art. 6(1)(b)).
  • Security. Error reports without personal data and limits on repeated requests, to keep the app safe. Legal basis: legitimate interest (Art. 6(1)(f)).

3. Signing in with Google

If you choose “Continue with Google”, Google shares with us only your name, your email address and your profile picture (the basic “openid”, “email” and “profile” permissions). We use them only to create your account, show who is signed in and keep your topics and saved items on every device. We do not ask for, and have no access to, anything else in your Google account (no Gmail, Drive, contacts or calendar). We do not use Google user data for advertising, we do not sell it or share it with third parties except the providers listed below that run the service, and we do not use it to train AI models. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Sipping's access at any time from your Google Account (Security, Third-party apps), and ask us to delete your account as described in section 7.

4. What we never do

No advertising, no sale or rental of your data, no profiling you are not aware of, and no decisions about you based solely on automated processing (Art. 22). The AI engine that writes the bulletins works only on public news, never on your personal data. We publish only titles, our own summaries and links to the sources, never full articles.

5. Who processes data for us

Service providers acting on our instructions under data processing agreements (Art. 28): database and sign-in hosted in the European Union (Supabase, Ireland region); app hosting and anonymous visit counts (Vercel); Google, only if you choose to sign in with it; Telegram, only if you choose its alerts; an email provider for sign-in codes; the AI provider that writes the bulletins, which receives public news and topics, never your contact details. Where a provider is outside the European Economic Area, transfers rely on the safeguards of Chapter V GDPR, such as the European Commission's adequacy decision for the EU-US Data Privacy Framework or Standard Contractual Clauses (Arts. 45–46).

6. How long we keep it

The app covers ADIPEC week. Personal data is kept only as long as needed for the purposes above and deleted on a date set before launch; contact requests and consents are kept until you withdraw them or ask us to delete them.

7. Your rights

You can ask NiEW for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest (Arts. 15–21). You can withdraw consent at any time, without affecting what was done before (Art. 7(3)). Write to andrea.violante@niew.it: we answer within one month (Art. 12). You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it) (Art. 77).

8. Do you have to give us your data?

No. You can read the bulletin and the news without an account. Some features (saving, reading past days, the follow-up) need the data described above.

Last updated: 22 October 2026 · draft.