Privacy and cookies
How we handle your data
This page says what data ElectionLab collects, why, for how long, and how you can get it or have it deleted. The site is in beta: if anything here does not match what you see, write to us.
- Data controller
- ElectionLab Italia
- Privacy contact
- info@electionlab.it
- Last updated
If you browse without an account
You can read results, maps, trends and articles without registering and without giving us any data.
Only if you accept usage statistics in the banner do we record which pages you open and a few actions (a search and how many results it returned, an export, a forecast request, a share). We never record text you type. Your IP address is truncated before it is stored (the last digits are zeroed) and we keep only a non-reversible fingerprint of your browser. If you decline, nothing is sent, and what you did before accepting is not recovered.
If you create an account
- First name, last name, email and the occupation you pick from the list: needed to create the account and to understand who uses the service.
- Your password, stored only as a hash: we cannot read it.
- For each sign-in: date, IP address and browser, to protect the account and spot sign-ins that are not yours.
- The six-digit codes we email you to confirm sign-up and to sign in.
- What you create: alerts, forecast scenarios, plan requests, API keys.
- A log of sensitive operations (role changes, deletions, consents), with IP and browser.
The optional profile questionnaire
In your account area you can fill in a questionnaire: year of birth, gender, region, education, work sector and, in a separate section, your political orientation.
Political opinions are a special category of data (GDPR art. 9). We process them only with your explicit consent, separate from every other, which you can withdraw at any time from your account area. Not filling in the questionnaire does not limit your use of the site in any way.
Why we may process it
| Data | Purpose | Legal basis |
|---|---|---|
| Account, sign-ins, email codes | Providing the service you asked for | Contract — art. 6(1)(b) |
| Usage statistics | Understanding what to improve | Consent — art. 6(1)(a) |
| Newsletter and alerts | Sending what you subscribed to | Consent — art. 6(1)(a) |
| Political orientation (questionnaire) | Aggregate analysis | Explicit consent — art. 9(2)(a) |
| Operations log, sign-in IPs | Security and accountability | Legitimate interest — art. 6(1)(f) |
For how long
| Data | Kept for | Then |
|---|---|---|
| Usage statistics | 90 days | Deleted automatically |
| Account and questionnaire | As long as the account exists | Made anonymous 30 days after closure |
| Sign-in sessions | 30 days after expiry | Deleted automatically |
| Operations log | 2 years | Deleted automatically |
| Consent record | No expiry | Kept as proof of what you consented to, detached from your data |
| Newsletter subscription | Until you unsubscribe | Removed |
Who sees it
Data is hosted on Amazon Web Services servers in the Frankfurt region (European Union). Emails are sent through the AWS mail service in the same region. AWS acts as data processor.
We do not sell data, we do not share it with third parties for advertising, and we use no advertising trackers or social buttons that follow you. Whoever analyses usage statistics sees aggregate numbers only, never groups of fewer than five people.
We make no automated decisions about you and we do not profile you.
Your rights
- Get a copy of your data: Account → Profile → Download my data.
- Correct it: from your profile, or by writing to us.
- Delete your account: from your account area. The account stops working immediately; you get a confirmation email and have 30 days to change your mind, then the data becomes anonymous.
- Withdraw a consent: Account → Consents. Withdrawal applies from that moment on.
- Object to processing based on legitimate interest, or ask for it to be restricted: by writing to us.
- Lodge a complaint with the Italian data protection authority (garanteprivacy.it).