Skeleton Key takes appropriate security measures to prevent authorised access, disclosure, modification, or unauthorised destruction of the personal data. Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to Skeleton Key, in some cases, User personal data may be accessible to certain types of persons in charge, involved with the operation of Skeleton Key (administration, marketing, legal, IT) or external parties (such as third-party technical service providers, mail carriers, hosting providers) appointed, if necessary, as Data Processors by Skeleton Key. The updated list of these parties may be requested from Skeleton Key at any time.

Personal data is processed at Skeleton Key’s operating offices and in any other places where the parties involved in the processing are located. Depending on the user’s location, data transfers may involve transferring the user’s data to a country other than their own. Unless specified otherwise, personal data shall be processed and stored for as long as required by the purpose they have been collected for any may be retained for longer if there is applicable legal obligation or based on users’ consent.