The Muvia free trial and your data

The data controller is Superduck S.r.l., the company that makes Muvia, with registered office at Piazza Maestri del Lavoro 7, 20063 Cernusco sul Naviglio (MI), VAT number IT13202240969, REA MI-2708766, share capital € 20.000,00 i.v.

For any question about your data, or to exercise your rights, write to the certified email (PEC) [email protected].

When you request the trial:

• first name, last name, company, job role, sector, company size band and when you expect to start a project;
• your business email, which you confirm through a link;
• the consents you give: to this notice and, if you choose to, to marketing communications;
• a code derived from your IP address with a hash function and a secret value (salt): the IP address itself is not stored;
• the parameters of the campaign you came from (utm), if any.

During the trial:

• the files you upload and the data in them;
• the questions you ask Athena, Muvia's AI assistant, and the answers you get;
• usage events, such as sign-ins and the features you use.

The form's data, except the marketing consent, are needed to start the trial: without them we cannot start it.

PurposeProviding the trial: creating the project, confirming your email, letting you sign in and writing to you about the service, such as activation and deadlines.

Legal basisPerformance of pre-contractual measures and of the contract you request (Art. 6(1)(b) GDPR).

PurposeSecurity and abuse prevention: protecting the service and limiting repeated or automated requests, including with Google reCAPTCHA.

Legal basisLegitimate interest in protecting the service and its users (Art. 6(1)(f) GDPR).

PurposeSales contact about the trial: our sales team may write to you to ask how it went and whether Muvia fits, and we measure which campaigns bring requests.

Legal basisLegitimate interest in following up on a trial request (Art. 6(1)(f) GDPR). You can object at any time, by replying to one of our messages or by writing to the PEC address.

PurposeNewsletters and marketing communications, only if you accepted them in the form.

Legal basisConsent (Art. 6(1)(a) GDPR), optional and revocable at any time. Without it, the trial works just the same.

The request form uses Google reCAPTCHA, a Google service that receives technical data from your browser, including the IP address, to tell a person from an automated program. Google processes them under its own privacy policy.

• The trial project stays active for 14 days, then read-only for another 7 days, and is then deleted, together with every uploaded file, the questions asked to Athena and the rest of its content.
• The service's security and usage logs (sign-ins, actions taken, use of the AI assistant) are not deleted with the project: they are kept for as long as the security of the service and checking its use require, then deleted.
• A request you do not confirm is deleted 7 days after its confirmation link expires.
• The contact record, meaning the form's data and the consents, is kept for 12 months after the trial ends. It is then anonymised: only the sector and the company size band remain.
• If you withdraw your marketing consent or object to the sales contact, we stop using the data for that purpose straight away.

The data are processed by Superduck staff authorised to do so and by providers acting as processors (Art. 28 GDPR), bound by a contract. By category, they are:

• cloud hosting providers, with servers in the European Union;
• email delivery providers, for messages such as the address confirmation and the trial notices;
• AI service providers, which process the questions you ask Athena and the data needed to answer them;
• Google, for reCAPTCHA, as described above.

We do not sell the data, nor share it with third parties for their own marketing.

We host the data in the European Union. Where a provider processes them outside the Union, as may happen with AI services and with Google reCAPTCHA, the transfer takes place under the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

Upload business data or the sample file, not personal data of other people, such as customers, employees or contacts. If one of your files contains any, remove it before uploading: the trial is not meant to process it.

At any time you can ask to access your data, correct it, erase it, restrict its processing, receive it in a machine-readable format and object to processing based on legitimate interest (Articles 15 to 22 GDPR). We take no decision about you based solely on automated processing.

You can withdraw your marketing consent whenever you like, from the link in every message or by writing to the PEC address. Withdrawal does not affect processing carried out before it, nor the trial.

To exercise your rights, write to the PEC address [email protected].

If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali.

This notice covers the free trial only. For the muviabi.com website, the demo booking form and cookies, the site's privacy policy applies, together with its cookie policy.