Privacy notice
Updated 23 September 2026.
Data controller
x3system di Giorgio Corrente. For any request, write to the address at the bottom of this page.
What data we process
Account: email, company or practice name and VAT number if you enter them, registration date. Needed to sign in and to invoice.
Licence: serial, uses bought and spent, date of last use. Needed to run the service and to document the invoice.
Profile: printer address and administrator user name, if you save them to pre-fill the wizard. Never the printer password.
Technical data: IP address and time of requests to the licence server, to limit abuse. Kept in memory for a few minutes; server logs keep error lines.
The wizard and the Winkie service on the PC never send documents, file names or scan contents. They talk to the internet to check the licence, look for updates and, unless you turn it off, send the anonymous telemetry described below.
Anonymous telemetry from the Winkie service, on by default: Winkie and Windows versions, whether scan reception is on, printer brand, the names of the warnings shown, and counts of scans received, address-book updates that succeeded or failed (with the error type), the data-connection mode the printer uses (PASV, EPSV or PORT) and update checks. It comes with a random code created on the PC, not derived from the PC or the licence, which changes if you turn sending off and on again; you can read it in the Winkie menu as “Codice assistenza”. Never IP or network addresses, names of the PC, of people or of address-book entries, folders, files, users, passwords, licence or error texts. The address a report comes from is only used to limit how often it can arrive and is not stored. Turn it off in the wizard (step 1) or from the Winkie menu, under “Dettagli tecnici”: on the last send the server deletes everything tied to that code.
Why and for how long
Performance of the contract (licence and invoice) and tax obligations: account, licence and invoice data are kept for the duration of the relationship and the ten years required by tax law.
Security of the service: technical data is kept for the time needed to detect abuse.
Telemetry: reports are kept for 90 days, then only daily totals without the code remain (active installs, scans, address-book updates). It is used to understand how Winkie works in the field and to fix it; we never link it to account or licence data.
We send no marketing. The emails you receive are the service’s own: sign-in links, purchase confirmations, the notice when few uses are left.
Who processes it
The licence server is run by x3system in Italy. The site goes through Cloudflare (delivery and protection network) and emails are sent through Resend; both process data on our behalf.
Invoices are issued with Odoo, x3system’s management software, and sent to the Italian exchange system (SDI) as required by law.
Cookies
A single technical cookie, “winkie_portal”, keeps your session open for 30 days after the sign-in link. No tracking or advertising cookies. The chosen language is saved in your browser.
Your rights
You can ask for access, rectification, erasure and portability of your data, and you can complain to the Italian data protection authority (Garante). Write to the address below: we answer within 30 days.