# Privacy Policy – Discover Italy - Doc Auto
**Internal Document Management & Automation Application**
**Last updated: November 13, 2026**
## 1. Introduction
Discover Italy dmc Srl ("Discover Italy", "we", "our", or "the Company") is committed to protecting personal information and ensuring transparency regarding the processing of data through its internal business applications.
This Privacy Policy describes how **Discover Italy - Doc Auto**, an internal document management and automation application, accesses, processes, stores, and protects information, including data accessed through Google Drive API and Google Sheets API.
The application is developed exclusively for the administrative and operational activities of Discover Italy DMC and is not intended for public registration or general consumer use.
This Privacy Policy supplements the general Privacy Policy available on the official Discover Italy website.
## 2. Data Controller
The Data Controller responsible for the processing of personal data is:
**Discover Italy dmc Srl**
Via Fiumicello a Loreto 7
80142 Naples, Italy
VAT Number: IT10476561211
**Email:** discoveritalydmc@gmail.com
**Website:** https://www.discoveritalydmc.com
For questions concerning this Privacy Policy or the processing of personal data through the application, please contact the Company using the email address provided above.
## 3. Purpose of the Application
Discover Italy - Doc Auto is designed to automate selected internal document management operations.
Its intended functions include:
- Identifying business emails received from specifically authorized senders.
- Retrieving relevant email attachments and documents accessible through authorized download links.
- Organizing and storing documents in designated Google Drive folders.
- Reading document processing rules from an internally maintained Google Sheet.
- Preventing duplicate document archiving.
- Maintaining technical processing records and identifying errors requiring manual intervention.
The application is designed for internal administrative, accounting, reservation management, and operational purposes.
It is not intended for advertising, behavioral profiling, or commercial exploitation of personal information.
## 4. Information Accessed and Processed
Depending on the authorized functions being performed, the application may process the following categories of information.
**4.1 Business Email Information**
Information originating from authorized corporate email accounts may include:
- Sender and recipient email addresses.
- Message subjects and dates.
- Relevant message content.
- File names and attachment metadata.
- Documents attached to messages.
- Links used to retrieve invoices, tickets, receipts, and other business documents.
Email access is performed through the corporate email infrastructure using IMAP authentication. The application does not require Gmail API access for these email operations.
**4.2 Google Sheets Information**
The application accesses an internally maintained Google Sheet containing operational configuration information, including:
- Authorized sender email addresses.
- Processing status and rules.
- Applicable email accounts.
- Accepted document formats.
- Document retrieval settings.
**4.3 Google Drive Information**
The application may access file and folder names, identifiers, metadata, and file content through the Google Drive API.
Documents stored or managed through the application may include supplier invoices, receipts, tickets, booking confirmations, and other operational or accounting records.
Such documents may contain personal information, including names, contact details, booking references, transaction information, and other information necessary for business administration.
**4.4 Technical Information**
The application may generate operational records documenting processing dates, document identifiers, file names, processing results, and technical errors.
These records are used to monitor the system, identify failures, and prevent duplicate processing.
## 5. Google API Access and Permissions
Discover Italy - Doc Auto uses Google APIs to support its internal document management functions.
### Google Sheets API
**Permission:** `https://www.googleapis.com/auth/spreadsheets.readonly`
This permission allows the application to read Google Sheets data.
The application uses this access to retrieve the authorized sender list and document processing configuration. It does not require permission to edit or delete spreadsheet content.
### Google Drive API
**Permission:** `https://www.googleapis.com/auth/drive`
This permission technically provides access to view, create, modify, and delete files within the authorized Google Drive account.
The application's intended automated operations are limited to the designated Discover Italy corporate document repository.
These operations include locating folders, creating monthly subfolders, uploading documents, and verifying previously archived files.
Although the OAuth permission is account-wide, the application's operational design restricts its intended file-management activity to the designated document archive.
The application is not intended to search, analyze, modify, or distribute unrelated Google Drive content.
## 6. How Google User Data Is Used
Information obtained through Google APIs is used solely for the internal document management functions described in this Privacy Policy.
In particular, Google Sheets information is used to determine which documents the application is authorized to process, while Google Drive information is used to organize, store, retrieve, and verify authorized business documents.
Discover Italy does not use Google user data accessed through the application to:
- Sell personal information or business data.
- Deliver targeted or personalized advertisements.
- Create advertising profiles.
- Transfer information to data brokers.
- Determine creditworthiness.
- Train or develop general-purpose artificial intelligence models.
- Conduct surveillance or unauthorized monitoring of individuals.
**Discover Italy - Doc Auto's use of information received through Google APIs will comply with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the applicable Limited Use requirements.**
Access to Google user data by authorized personnel is limited to legitimate, authorized business purposes and applicable legal requirements.
## 7. Legal Basis for Processing
Where personal data is processed through the application, Discover Italy relies on the applicable legal grounds under Article 6 of the General Data Protection Regulation (EU) 2016/679.
Depending on the particular processing activity, these may include:
**Performance of a contract — Article 6(1)(b)**
Where processing is necessary to perform contractual obligations involving the data subject, including relevant travel services and booking administration.
**Compliance with legal obligations — Article 6(1)(c)**
Where processing is necessary to meet applicable accounting, tax, recordkeeping, or other statutory obligations.
**Legitimate interests — Article 6(1)(f)**
Where processing is necessary for the legitimate interests of Discover Italy in organizing business documents, maintaining operational records, reducing administrative errors, and protecting business information, provided such interests are not overridden by the rights and freedoms of the individuals concerned.
The specific legal basis depends on the nature and purpose of the relevant processing activity.
## 8. Data Storage and Retention
Documents processed through the application are intended to be stored in designated Google Drive folders controlled by Discover Italy.
The application may also temporarily store documents on authorized corporate infrastructure during retrieval, verification, and transfer operations.
Temporary copies should be deleted when no longer necessary for successful processing, troubleshooting, or other justified operational purposes.
Archived documents are retained for periods determined by their business purpose and applicable legal obligations.
For example, accounting documents may be subject to statutory retention requirements, while temporary technical records should be kept only as long as necessary for operational verification and security.
Original email messages remain subject to the Company's corporate email retention procedures.
Personal information will not be retained longer than necessary for the purposes for which it was processed, unless longer retention is required or permitted by applicable law.
## 9. Data Security
Discover Italy is committed to implementing appropriate technical and organizational measures to protect information processed through the application.
The security arrangements designed for the application include:
- Authentication through Google OAuth 2.0.
- Restricted storage of authentication credentials and access tokens.
- Encrypted connections when communicating with Google APIs and corporate email servers.
- Limitation of operational access to specifically authorized personnel.
- Configuration-based restrictions on document processing.
- Verification of authorized senders and document download destinations.
- Operational logging and duplicate detection.
- Review of unsuccessful or unexpected processing operations.
No electronic information system can guarantee absolute security. Discover Italy therefore seeks to maintain safeguards appropriate to the nature of the data, the available technology, and the associated risks.
## 10. Data Sharing and Third-Party Service Providers
Discover Italy does not sell personal information processed through Discover Italy - Doc Auto.
Information may be processed through technology providers necessary to operate the application, including:
**Google LLC and relevant Google entities**
For Google Drive storage, Google Sheets access, OAuth authentication, and associated Google API services.
**Corporate hosting and email service providers**
For the technical operation of the automation, corporate email connectivity, temporary processing, and system administration.
**Authorized service providers and personnel**
Where access is necessary for legitimate administrative, accounting, technical support, or operational purposes, subject to applicable contractual and confidentiality obligations.
Information may also be disclosed when required by applicable law or a legally binding request from a competent authority.
Discover Italy does not authorize unrelated third parties to access Google user data for their independent advertising or commercial purposes.
## 11. International Data Transfers
Depending on the infrastructure and contractual arrangements of the technology providers used, personal information may be processed or accessed outside the European Economic Area.
Where international transfers of personal data occur, Discover Italy will apply the safeguards required by applicable data protection legislation, including appropriate transfer mechanisms where necessary.
Information about relevant transfer arrangements may be requested using the contact details provided in this Privacy Policy.
## 12. Access Authorization and Revocation
The application is intended for access by specifically authorized Google accounts.
Authorization to access Google services is granted through Google's OAuth 2.0 consent process.
An authorized Google account holder can review and revoke the application's access through the Google Account security settings:
https://myaccount.google.com/connections
Revoking access may prevent the application from performing Google Drive and Google Sheets operations until authorization is restored.
Revocation does not automatically delete documents previously archived for legitimate business or legal purposes. Requests concerning such information may be submitted to Discover Italy.
## 13. Rights of Data Subjects
Subject to the conditions and limitations established by applicable data protection law, individuals whose personal data is processed may exercise their rights under the GDPR.
These rights may include:
- Access to their personal data.
- Rectification of inaccurate or incomplete information.
- Erasure of personal data where legally applicable.
- Restriction of processing.
- Objection to processing based on legitimate interests.
- Data portability where applicable.
- Withdrawal of consent where consent constitutes the legal basis for processing.
Requests may be addressed to:
**discoveritalydmc@gmail.com**
Individuals also have the right to lodge a complaint with the relevant supervisory authority, including the Italian Data Protection Authority (*Garante per la Protezione dei Dati Personali*).
Official website: https://www.garanteprivacy.it
## 14. Automated Processing and Decision-Making
The application automates technical document retrieval, classification, and archiving activities based on predefined operational rules.
It is not designed to perform automated decision-making that produces legal effects or similarly significant effects on individuals within the meaning of Article 22 GDPR.
The application does not perform automated customer profiling.
## 15. Changes to This Privacy Policy
Discover Italy may update this Privacy Policy to reflect changes in application functionality, technical infrastructure, legal requirements, or applicable Google API policies.
Updates will be published on this page with a revised date.
Where required by applicable law or Google API policies, affected users will be informed of material changes and any additional consent or authorization will be obtained before new data uses are introduced.
## 16. Contact Information
For any questions, concerns, or requests concerning privacy and data protection related to Discover Italy - Doc Auto, please contact:
**Discover Italy dmc Srl**
Via Fiumicello a Loreto 7
80142 Naples, Italy
**Email:** discoveritalydmc@gmail.com
**Website:** https://www.discoveritalydmc.com
**Application:** Discover Italy - Doc Auto
**Application information:**
https://www.discoveritalydmc.com/discover-italy-doc-auto
---
*This Privacy Policy applies specifically to Discover Italy - Doc Auto, an internal business document management application. It supplements, and does not replace, the general privacy information provided by Discover Italy dmc Srl for its website, customers, suppliers, and other business activities.*
