Before providing us with any information about you, please read this policy carefully to understand who we are, what data we process, for what purposes and how, and what rights you can exercise regarding the processing of your personal data.
- Who is the Data Controller?
The Data Controller is ________________ with registered office in _________________at Via _____________ You can contact the owner by telephone at n._________________ e.mail: privacy@maduniverse.co
- What data do we process and where do we collect your personal data?
You provide us with your data by filling in the forms on the site in the Contact Section or by requesting information regarding our services or by writing to us via email
We process your personal details, contact details, email address or telephone number that you left us by filling out the contact form or by writing to us.
We do not process any data that qualifies as “Special Category of Personal Data” ex Article 9 of EU Regulation 679/2016 – GDPR (i.e., data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; biometric data uniquely identifying a natural person, or genetic data or data concerning health, sex life, or sexual orientation) or data relating to criminal convictions and offenses pursuant to Article 10 of the GDPR. If it is necessary to process this type of data, we will obtain your prior consent.
Some data is stored by the server because it is automatically acquired while you browse our website. This data identifies your computer or certain actions you take on the website. This data allows us to identify you only if we cross-reference it with other information. To better understand the technical aspects, please read our cookie policy and Privacy Policy. There, you will find a more detailed explanation of how we collect browsing data and how long it is retained.
On what legal basis? Your data is processed based on your free and informed consent to respond to your information request or, in some cases, to fulfill a contract or a pre- or post-contractual obligation.
We may also process web traffic data on the basis of a legitimate interest, to a strictly necessary and proportionate extent, to ensure network and information security, avoid or restore service disruptions, prevent fraudulent access, etc., as specified in Recital 49 of EU Regulation 2016/679.
Where? Your data is processed at our headquarters, or at the data centers of the Company that manages the hosting space (Hostinger) in Vilnius or, in any case, in Europe, in compliance with the provisions of the GDPR.
We also inform you that the data processed electronically may be processed in cloud mode using the OVH platform which has server in Milan, Italy.
- Do we do profiling?
By profiling, EU Regulation 679/2016 defines “any form of automated processing of personal data consisting of the use of such data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning his or her performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.”
MAD Universe does not strictly perform profiling, but may use advertising services for marketing purposes, using cookies (the operation of which will be explained in detail in the Cookies Policy, which we invite you to read) or conduct sales analysis, generally processing your data anonymously.
However, it does not use automated decision-making or data analysis processes, nor are your data used for the issuance of judicial and administrative documents or provisions.
If you are interested in knowing exactly what data is processed for marketing purposes, you can contact us to share your opinion and obtain an explanation of the techniques used.
- Why do we process your data?
We process your common data for the following purposes:
- to respond to the information request you sent us if you filled out the appropriate form in the “Contacts” section or elsewhere, to contact you again if you have made a request or have expressed interest in receiving more information about the content of our services;
- to comply with laws, regulations, and EU legislation, as well as with provisions issued by supervisory authorities (for example, to obtain your consent to data processing or otherwise) or to protect our rights, including in court, or to perform anonymous statistics (for example, anonymous market research or anonymous web traffic monitoring);
- to promote our business through newsletters, participation in trade fairs, meetings or sector focal points, direct e-mail marketing (DEM), advertisements or banners on other information portals, advertising techniques, in order to optimize the offer itself.
Processing for these purposes will only take place if you have given us explicit consent.
- Do you have to give us your consent to process your data?
Regarding the processing referred to in point D1), if you want us to respond to your request or provide you with our administrative, IT, and support services, you must give us your consent; otherwise, we would not be able to fulfill your requests or establish any relationship with you.
Regarding the processing referred to in point D2), your consent is not required; in accordance with Privacy legislation, their processing can/must be carried out by the Data Controller without the consent of the data subject.
Regarding the processing referred to in point D 3), consent is optional: if you do not wish to receive newsletters, and do not wish, in any way, to be involved in MAD Universe promotional campaigns, you are free to deny your consent.
In these cases, without your consent, we will not be able to process your data, in compliance with the prohibitions set out in the GDPR and the Legislative Decree no. 185/1999 about unwanted communications.
We also inform you that if you are already our customer, you may receive new communications relating to services similar to those you have already used, unless you withdraw your consent, pursuant to art. 130, paragraph 4, of Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
You can always change your consent and privacy settings by contacting us and explicitly requesting removal from our databases and deletion of your data. Please note that, in the event of a revocation, it will be immediately implemented but will be definitively effective within a maximum of 15 days of receipt, requiring technical time to align all the information systems we use.
- How do we process your data and how long do we keep it?
We process your data using IT tools, adopting every security measure to prevent it from being lost, disclosed, deleted, etc.
We process your data for the time necessary for the purpose for which we collected it.
In particular, we will process your contact details until we have responded to your request.
If you have given us your consent to process your data for the marketing purposes, we will retain your data for 2 years from collection, or for a longer period if you continue to be our customer and, therefore, confirm, in fact, your interest in receiving updates.
We have also excluded the processing of your data when the purposes pursued in individual cases can be achieved through the use of anonymous data (such as, for example, in market research aimed at improving services) or through other methods that allow the data subject to be identified only when necessary or at the request of the authorities and the police (such as, for example, data relating to traffic and your presence on the website or your IP address).
At the end of the retention period your data will be deleted Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
- Who do we share your data with?
Your data will be shared only with our staff who are handling your request or who will contact you if you have expressed interest and are available to receive further information about our services.
We may also grant access to your data for the purposes of hardware or software maintenance necessary for the operation of the portal or to optimize our services or develop other services. This includes access to external parties who, solely for the purpose of providing the requested service, may become aware of your personal data. These parties will be duly appointed as Data Processors pursuant to Art. 28 of the GDPR. All parties to whom your data is disclosed are required, like us, to process it in accordance with the law.
Except for the cases of disclosure mentioned above, the data will not be disclosed to third parties except to comply with legal obligations or respond to legal and judicial requests.
We do not disseminate your data, that is, we do not make it accessible to an indeterminate number of subjects, nor do we disclose it to others for their own purposes.
- Rights
We remind you that you have the right to exercise the following rights at any time, without formal constraints and free of charge:
- the right to request the presence of and access to personal data concerning you (Art. 15 “Right of access”) and to be informed if the processing involves the transfer of data to a third country or to an international organization and, if this occurs, the right to know what adequate safeguards have been adopted for the transfer;
- right to obtain the rectification/integration of inaccurate or incomplete data, without undue delay, as well as their updating also by providing an additional declaration (Art.16 “Right of rectification”)
- right to obtain, if there are justified reasons, the deletion of data (Art.17 “Right to deletion or to be forgotten”)
- right to obtain restriction of processing (Art. 18 “Right to restriction”)
- for the period necessary for the data controller to verify the accuracy of such personal data,
- where the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- although the data controller no longer needs them for the purposes of the processing, the personal data are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pursuant to Article 21, paragraph 1, pending the verification whether the legitimate grounds of the controller override those of the data subject;
- The right to receive your personal data in a structured, commonly used and machine-readable format, as well as the right to transmit that data to another controller without hindrance from the controller. In exercising this right, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible (Art. 20 “Right to data portability”).
- right to object to processing for legitimate reasons, even if pertinent to the purpose of collection, if carried out through an automated decision-making process, such as for data processed for direct marketing purposes (Art. 21 Right to object to an automated decision-making process);
- right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Article 22 Automated Decision-Making);
- right to be notified in the event of a data breach, under the conditions set out in art. 34 of EU Regulation 2016/67
- right to withdraw previously granted consent
Requests can be sent to the Data Controller’s office by email to privacy@maduniverse.co
We remind you that, in any case, you have the right to lodge a complaint with an Italian Supervisory Authority (Guarantor for the Protection of Personal Data,www.garanteprivacy.it)