Effective Date: December 30, 2024
Last Updated: December 30, 2024
Daniel Perrera, operator of Gesso
dan@perrera.com
Gesso collects Personal Data from its users. Among the types of Personal Data collected are:
Name and email address, payment information, notes, drawings, and files created or uploaded by users, and Usage Data, including session statistics and device information.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy. Personal Data may be freely provided by the user, or, in the case of Usage Data, collected automatically when using Gesso.
Unless specified otherwise, all Data requested by Gesso is mandatory, and failure to provide it may make it impossible to provide the Services. Where certain Data is marked as optional, users may choose not to provide it without affecting the availability or functionality of the Service. Users who are unsure about which Personal Data is mandatory are encouraged to contact the Owner.
The use of Cookies or other tracking tools by Gesso or by third-party services used by Gesso serves to provide the Services required by the user and for additional purposes as described in this document. Users are responsible for any third-party Personal Data obtained, published, or shared through Gesso and confirm that they have the third party’s consent to provide the Data to the Owner.
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data. Data processing is carried out using computers and IT-enabled tools, following organizational procedures strictly related to the purposes outlined in this policy.
In addition to the Owner, Data may be accessible to certain authorized persons involved in the operation of Gesso (such as administration, customer support, or technical personnel) or external parties (such as hosting providers or payment processors) appointed as Data Processors. An updated list of these parties may be requested from the Owner at any time.
Data is processed at the Owner's operating location and in any other places where the parties involved in the processing are located. Data transfers may involve transferring the User's Data to a country other than their own. Users can contact the Owner for more information about such transfers.
Personal Data is processed and stored for as long as required by the purposes for which it was collected.
Data collected for contract performance will be retained until the contract is fully performed. Data collected based on the user’s consent will be retained until consent is withdrawn. The Owner may be required to retain Data for longer periods to comply with legal obligations or upon request from authorities.
Once the retention period expires, Personal Data will be deleted, and certain rights (such as access or portability) may no longer be enforceable.
Data is collected to provide the Services, ensure compliance with legal obligations, and detect malicious activity. Specific purposes include:
Account and Content Management, Payment Processing, and Analytics.
Gesso uses analytics tools to monitor and analyze traffic and behavior. For example, Google Analytics may collect Usage Data to improve the service. Users may opt out of Google Analytics by consulting its privacy policy.
Cookies are used to improve user experience and performance. Users may manage cookie preferences via their browser settings.
The Owner processes Personal Data based on one of the following legal bases:
User consent for specific purposes, necessity for contract performance, compliance with legal obligations, or legitimate interests pursued by the Owner.
The Owner will clarify the specific legal basis for processing upon request.
Users have the right to withdraw consent, object to processing, access, update, or delete their Data, restrict Data processing, or request Data portability. Users also have the right to lodge a complaint with a data protection authority.
Requests to exercise these rights can be directed to the Owner using the contact information provided in this document.
Gesso may be required to disclose Personal Data upon request from public authorities. System logs and maintenance files may also collect technical information (e.g., IP addresses) for security and diagnostic purposes.
The Owner reserves the right to modify this privacy policy at any time. Users will be notified of material changes via email or within Gesso 30 days before the changes take effect. Users are encouraged to check this page frequently for updates.
Personal Data (or Data): Information that identifies or can identify a natural person.
Usage Data: Information automatically collected through the Service, such as session statistics and device details.
Owner (or Data Controller): The individual responsible for determining the purposes and means of Data processing, in this case, Daniel Perrera.
For questions about this policy, contact:
Daniel Perrera
dan@perrera.com