1. Introduction
The AWorld Privacy Policy describes how we collect, use, store, and protect your data in compliance with applicable data protection laws. It explains the types of personal information we gather, the purpose of its collection, and the measures taken to ensure data security. Additionally, this document provides details on user rights regarding their data and how they can manage or request access to it.
2. AWorld Privacy Policy
AWorld is committed to data protection, which is why we have prepared this policy so you can be aware of how we will handle your data. This Privacy Policy applies to AWorld's websites, mobile applications, and related services. By using the AWorld service, you agree that AWorld collects, uses, and shares your data in accordance with this Privacy Policy.
Data Controller
The data controller is AWorld Srl Società Benefit, based at Corso Regina Margherita n. 1
Bis – 10124 Turin, Italy, VAT 11867110014, represented by its legal representative.
Contact: privacy@aworld.org
Data Protection Officer
The Data Protection Officer is Dr. Debora Marianna Pagano.
Contact: privacy@emade.pro
Purpose of Processing
The personal data you provide will be used to:
- Improve the AWorld platform and its services;
- Inform you about AWorld's available services;
- Authorize access to the AWorld platform and its services;
- Analyze the AWorld's performance and the services offered;
- Track user movements for footprint calculation purposes;
- Analyze data related to steps and physical exercise minutes;
- Create content and surveys related to sustainability;
- Manage your participation in special programs, surveys, campaigns, and contests related to sustainability;
- Ensure the security of our services, including user authentication;
- Assist you in using the platform;
- Comply with Terms of Use and other agreements;
- Analyze data solely for assigning Gem Points and Experience Points (XP);
- Investigate possible fraud or violations of the Terms of Use or this Privacy Policy;
- Resolve disputes involving the data subject or the Data Controller.
Categories of Processed Data
The personal data processed include:
A - Contact Data: Name, surname, email, age, and nationality, necessary for creating an AWorld account. Without this data, you cannot create an account, and you cannot use AWorld platform. If you are under 16 years of age, you need parental consent to create an AWorld account, as outlined in the Terms and Conditions.
You can also register using social logins, such as Google, Facebook, or Apple. If you choose to use a social login, AWorld may receive your name, surname, and email address from the social provider. The information you input, such as your age, name, surname, and email address, will not be included in your public profile.
By default, when creating an account, you will need to choose a nickname, which will be visible to other AWorld users. You can find instructions on how to set and modify your nickname in the Terms and Conditions.
B - Images: You can add this data with your consent, provided the feature is available. By default, following the latest update, your profile picture is visible to other AWorld users. However, if you wish to modify it, you can follow the settings outlined in the Terms and Conditions.
C - Tracking and Location Data: Only with your explicit, specific, and freely given consent. Collected through the Mobility Assistant, this data is necessary for activating mobility-related missions. Location data are collected both in the background and when in use.
C - Tracking and Location Data: Collected exclusively upon your explicit, specific, and freely given consent. These data, gathered through the Mobility Assistant, are necessary for activating mobility-related missions.
- C1 - Location data are collected in the background.
- C2 - Location data are collected while the app is in use.
D - Consumption Habits: related to your habits that impact sustainability, this data is necessary to receive scores in AWorld. The data is processed by our Artificial Intelligence ("AI") to assess your environmental impact and support you, based on the information you provide, in improving your impact with missions tailored specifically for you. Our AI is proprietary, ensuring that your information is not shared with third parties.
E - Data Related to Steps and Exercise Minutes: Collected exclusively upon your
explicit,
specific, and freely given consent. The data are gathered from the user's device application and are
limited to the number of steps recorded and the duration of exercises performed. These data are
necessary for activating wellness-related missions and are collected exclusively while the app is in
use.
Such data are processed by our Artificial Intelligence (“AI”) to assess your environmental impact and,
based on the information you provide, to support you in improving your impact through missions
specifically designed for you.
Our AI is proprietary, ensuring that your information is not shared with third parties.
F - Data Collected Through Cookies: This information may be collected only when you access the AWorld website. A cookie is a piece of data stored on the user’s computer that is tied to the user’s data. Certain data are stored by the user’s browser through cookies. You are free to accept or deny cookie functions via our cookie banner. However, some cookies may be necessary for the website to function properly. Further information about cookies and how to manage them is available on the website.
G - Camera usage: The AWorld app may request access to the device's camera solely to allow users to scan QR codes required for certain platform activities.
- Camera access is strictly limited to QR code scanning and is not used for any other purposes.
- Using the camera does not grant access to the device's photo library, files, or any stored media.
- Camera access is granted only with the user’s consent and can be revoked at any time through the device settings.
Consequences of Data Refusal
In the event that authorization for the processing of data outlined in points A and D (lifestyle and consumption habits) is not granted, you will not be able to create an account or use AWorld.
If authorization for the processing of data outlined in points C, C1, C2, and E is not granted, you will not be able to access specific services that require the processing of the corresponding data indicated in the section “Categories of Processed Data”.
All consents can be withdrawn or modified at any time in the dedicated section within your account on the platform.
Transfer of Data
Your personal data will not be transferred to countries outside the European Union.
Processing Methods
Personal data is handled with appropriate security measures to prevent unauthorized access or disclosure. In addition to the Data Controller, authorized personnel and external Data Processors may have access to the data. A list is available upon written request to the Data Controller.
Data Retention
Data is retained for as long as necessary for the purposes for which it was collected. Once the retention period expires, the data will be anonymized, and the rights to access, erase, or rectify the data can no longer be exercised.
Therefore:
- Personal Data collected for the execution of a contract will be retained until the contract is fully performed.
- Personal Data collected for the legitimate interests of the Controller will be retained until those interests are fulfilled. You can request more information on this from the Controller.
- The Controller may be required to retain Personal Data longer due to legal obligations or authority orders.
- At the end of the retention period, Personal Data will be anonymized. Therefore, once this period expires, the right to access, delete, rectify, and transfer the Data can no longer be exercised.
User Rights
You can exercise certain rights regarding the data processed by the Controller. You have the right to revoke consent, oppose the processing of your data, access your data, request corrections or deletions, limit processing, and receive your data in a structured format.
Specifically, you have the right to:
- Revoke consent at any time. You may withdraw the consent previously given for the processing of your personal data.
- Object to data processing when it is carried out on a legal basis other than consent. Further details on the right to object are provided below.
- Access your data. You have the right to obtain information about the data processed by the Controller and receive a copy.
- Verify and request rectification. You can verify the accuracy of your data and request updates or corrections.
- Request restriction of processing. Under certain conditions, you can request the restriction of your data processing. In this case, the Controller will not process your data for any other purpose except storage.
- Request deletion or removal of your personal data. Under certain conditions, you can request that the Controller delete your data.
- Receive your data or transfer it to another controller. You have the right to receive your data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred to another controller without obstacles. This right applies when your data is processed by automated means and based on your consent, a contract, or pre-contractual measures.
- File a complaint. You can file a complaint with the relevant data protection authority or take legal action. A template provided by the Privacy Authority may be used for this purpose.
According to the relevant article, you have the right to request the deletion, anonymization, or blocking of data processed unlawfully, as well as to object, for legitimate reasons, to the processing of your data.
You have the right to object, in whole or in part, to:
- The processing of your personal data for legitimate reasons, even if it is pertinent to the purpose of the collection;
- The processing of your personal data for advertising, direct sales, or market research purposes.
How to Exercise Rights
To exercise your rights, you may submit a request, accompanied by an identification document, using the contact details of the Controller provided in this document. Requests are processed free of charge and handled by the Controller as quickly as possible, within one month.
Changes to the Privacy Policy
AWorld reserves the right to modify this policy and inform users of any changes on this page. Please check regularly for updates.
Last modified: February 18, 2025