In short: you don't need to register or give us personal data to leave feedback. What we collect, and why, is written below in plain words.
Every piece of data we collect has its own legal ground, and it is not the same one for all of them.
Performance of the service you ask for (Art. 6(1)(b) GDPR): the browser identifier, the technical cookies, the email you connect to your Personal Area, and the data of your card, carnet, queue place or order. Without these we could not give you what you asked for, which is why we do not ask for your consent.
Consent (Art. 6(1)(a) GDPR): visit statistics (ht_stats), Google Analytics, the optional name and email left with a feedback, and notifications. You can withdraw it at any time, and withdrawing it does not affect what happened before.
Legal obligation and legitimate interest (Art. 6(1)(c) and 6(1)(f) GDPR): the cookie that remembers your cookie choice, which exists only so we can respect it, and the security of the platform against abuse.
You can use the services without creating a profile. If you choose to keep them with your email address, we verify it with a link and connect your cards, carnets, plans and bookings to your Personal Area for that business. The same email address at a different business is a separate profile.
The access link expires after 20 minutes and can be used once. The technical cookie ht_personal_ followed by the business identifier keeps you signed in for 30 days; the ht_personal_pending_ cookie holds the link awaiting your confirmation for at most 20 minutes. Both are httpOnly cookies and do not depend on analytics consent.
From your Personal Area you can sign out of the device you are using or of every device. The profile and the services you saved stay available for a later recovery by email.
The email address you connect is collected on behalf of the business you connect it to, which is its data controller, and we use it to send you the access link and to recognise you at that business. It does not sign you up to promotions, it is not used for anything else and it does not reach other businesses.
When you hold your phone to a HappyTap tag or scan a QR code, we record that the page was opened, which tag you came from, the date and time, and minimal technical information about the device (device type and browser).
We do not collect your location, your contacts, or any data from your accounts.
To give you back your things — the card with the points you earned, the carnet you paid for, your place in the queue, the order you sent — your browser keeps a random identifier. It does not contain your name and does not identify you as a person, but it does identify the browser you are using: it is therefore a pseudonym, not anonymous data, and for us it is personal data in every respect.
The cookie is called ht_visitor, lasts about 13 months — the life of a yearly carnet or a points collection — and is created at the moment you ask for one of those things, not merely because you opened a page. Without it we could not provide the service you asked for, which is why we do not ask for your consent to set it.
Counting your visits is a different matter and lives in a second cookie, ht_stats: it is what lets us say “this is your third visit”, greet you when you come back, and produce the numbers the business reads in its dashboard. We only write it if you allow it from the banner, we delete it as soon as you change your mind, and without it the service works identically: you lose the greeting and the count, not the card.
Your choice is kept in a third cookie, ht_consent, for six months: it is what allows us to respect it. ht_visitor and ht_stats are httpOnly, meaning no script on the page can read them.
You can send a rating and a comment without leaving any personal data. Name and email are always optional.
If you do leave them, we keep them in a separate cookie (ht_customer, 6 months, also httpOnly) for two reasons: to let the business reply to you, and to save you retyping them next time.
Besides the cookies of the feedback flow, business owners who sign in to the dashboard have a session cookie (ht_session) that lasts 7 days and only serves to keep them signed in.
The language you choose on the site is remembered in a technical cookie (ht_lang, one year): it only serves to reopen pages in the language you picked and contains nothing else.
We do not use advertising profiling cookies and we do not sell data to anyone.
To understand how the service is used we use Google Analytics 4, but only if you allow it: until you accept from the banner, the script is not even loaded and no analytics cookie is written.
If you accept, Google Analytics sets two first-party cookies, _ga and _ga_ followed by the stream identifier, with a default lifetime of two years. They serve to tell visits apart and to keep session state.
The data collected (page views, referral source, device type) is processed by Google and reaches us in aggregate form. We do not send Google your name, your email address or the text of your feedback.
The processing involves a transfer of data to the United States, where Google's servers are. The transfer relies on the EU-US adequacy decision of 10 July 2023 (EU-US Data Privacy Framework), which Google LLC adheres to, and secondarily on the European Commission's standard contractual clauses.
You can change your mind at any time with the "Cookie preferences" link in the footer. The service works normally if you decline.
If you turn on notifications, your browser generates an installation identifier that lets us send you messages. You can revoke the permission at any time from the site settings in your browser: from that moment you will receive nothing further.
Notifications only concern offers and news from the business you gave consent for.
Each business sees only the feedback received on its own tags. No data is shared between different businesses.
Aggregated and anonymous data may be used for statistics on how the service performs.
Cookies last for the periods listed in the table below; the data on our servers instead follows the life of the service it belongs to.
Cards, carnets, plans and bookings stay for as long as the business's service is active and you can still use them: a closed points collection or a spent carnet is of no use to anyone, and from that point only the business's accounting record remains.
Feedback, ratings and comments stay available to the business for as long as it uses the platform. Optional name and email stay attached to the feedback until you ask for their deletion or withdraw your consent.
Queue numbers and orders are short-lived: they serve the day and are superseded by the service itself.
You can ask for deletion at any moment and we carry it out: we do not wait for an expiry. If a business stops using HappyTap, the data collected on its behalf is deleted or anonymised.
For the data you leave with a single business (for example the email connected to your Personal Area there), that business is the data controller: HappyTap processes it on their behalf as a data processor.
You can exercise your rights — access, rectification, erasure, restriction, objection and portability — by writing to info@happytap.it: we forward the request to the business concerned when the data is theirs.
You can ask at any time for the data concerning you to be deleted or anonymised by writing to info@happytap.it.
Clearing the site data from your browser removes every cookie and stops the device from being recognised.
| Cookie | Type | Lifetime | Purpose | Legal basis |
|---|
| ht_personal_* | Technical | 30 days | Keeps you signed in to the Personal Area of a business | Performance of the service |
| ht_personal_pending_* | Technical | 20 minutes | Holds the access link awaiting confirmation | Performance of the service |
| ht_visitor | Technical (pseudonym) | 13 months | Links cards, carnets, queue and orders to the browser | Performance of the service |
| ht_stats | First-party analytics | 13 months | Visit counting and statistics in the business dashboard | Consent |
| ht_consent | Technical | 6 months | Remembers your cookie choice | Legal obligation |
| ht_customer | Functional | 6 months | Stores the optional name and email left with a feedback | Consent |
| ht_session | Technical | 7 days | Keeps the business owner signed in to the dashboard | Performance of the service |
| ht_lang | Technical | 1 year | Remembers the language chosen for the site | Performance of the service |
| _ga, _ga_* | Third-party analytics | 2 years | Aggregate statistics via Google Analytics 4 | Consent |
