Information pursuant to EU Regulation 2016/679 ("GDPR")
When you use our services, you agree that our company may collect some of your personal information. This page is intended to tell you what data we collect, why we collect it and how we use it.
We process two types of data:
⦁ data provided by the user
⦁ data that we automatically collect
USER- SUPPLIED DATA
When you browse our site, we ask you to provide us with some data that you need to use our service.
These are, for example, the data that we ask you to provide:
⦁ address, email and password
⦁ other data that change depending on the contact form you are filling out (e.g. if you are filling out a contact form to request information about one of our services, we ask you for your profession, city of residence and other relevant information)
⦁ phone number
DATA OF THIRD PARTIES
If you provide personal data of third parties, such as those of your family or friends, you must be sure that they have been adequately informed and have consented to its processing in the manner described in this policy.
DATA THAT WE AUTOMATICALLY COLLECT
We collect the following data through the services you use:
⦁ technical data: e.g. IP address, browser type, information about your computer, data about the current (approximate) location of the instrument you are using;
⦁ data collected using cookies or similar technologies: for more information, please visit this section.
We use the data collected to offer you our service every day, to inform you about our business activities or to offer you a more personalized service in line with your interests.
1.1. To guarantee you access to our services and improve their delivery
We use your data to guarantee you access to our services and their delivery, including:
⦁ Commenting on articles and pages of our site
⦁ Using contact forms
⦁ Newsletter registration
These treatments are necessary to correctly provide the services of Creatiwa Studio S.r.l.s to the users who adhere to them.
Such processing is based on the legitimate interest of the Data Controller (see point 3.1) and you may object at any time.
1.2. To inform you about our business activities
We use the data collected, if you have expressly given us your consent, to inform you about promotional activities that may be of interest to you.
⦁ communicate to you promotional, commercial and advertising activities about events, initiatives or partnerships of Creatiwa Studio S.r.l.s , by e-mail, SMS or push notifications.
⦁ to carry out analysis and reporting activities related to promotional communication systems
1.3. To offer you a personalized service
We process the data collected, if you have expressly given us your consent, to analyse your consumption habits or choices in order to offer you a more personalized service in line with your interests and to improve our commercial offer.
3.1. Data controller
The data controller is Creatiwa Studio S.r.l.s located in Salerno (IT), Via Scavata Case Rosse, SNC, 84131.
The data controller uses data processors to achieve the purposes specified in point 1 and a Data Protection Officer (DPO) to oversee the protection of personal data.
Please refer to point 3.2 below for each request relating to your personal data.
3.2. Data Protection Officer (DPO) and contact information
The designated Data Protection Officer pursuant to art. 37 of GDPR is Letizia Giugliano.
We remind you that you may at any time contact the DPO and send any question or request relating to your personal data and respect for your privacy by writing to email@example.com.
3.3. Subjects to whom personal data may be communicated
The data collected as part of the provision of the service may be communicated to:
⦁ companies that carry out functions strictly connected and instrumental to the operation – also technical – of the services of Creatiwa Studio S.r.l.s , such as suppliers that provide services aimed at the review and verification of ads, suppliers of direct marketing and customer care services, companies that provide storage, administrative, payment and billing services.
⦁ administrative and judicial bodies and authorities in accordance with legal obligations
⦁ Your personal data may be transferred outside the European Union for processing by some of our service providers. In this case, we ensure that this transfer is carried out in accordance with applicable legislation and that an adequate level of personal data protection is guaranteed based on an adequacy decision, standard clauses defined by the European Commission or Binding Corporate Rules.
Under no circumstances do we transfer or sell personal data to third parties.
4.1. Access to personal data
You can, at any time, ask to see the personal data in our possession by writing an email to firstname.lastname@example.org.
4.2. Export and cancellation of the processing of personal data
To export your personal data (takeout) or ask for their cancellation you can send a request to the address email@example.com from the email address with which you registered for the newsletter on the website www.creatiwa.eu.
Your personal data will be exported within 30 days or, if the export becomes particularly complex, within three months.
The cancellation will be carried out within the technical timescale foreseen and in accordance with the storage period explained in point 5 below.
4.3. Exercise of your rights
Any individual using our service can:
⦁ obtain from the owner, at any time, information about the existence of their personal data, the origin of the same, the purposes and methods of treatment and, if present, to obtain access to personal data and information referred to in Article 15 of the GDPR
⦁ to request the updating, rectification, integration, deletion, limitation of data processing in the event that one of the conditions provided for in Article 18 of the GDPR is met, the transformation into anonymous form or the blocking of personal data, processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected and/or subsequently processed
⦁ oppose, in whole or in part, for legitimate reasons, the processing of data, even if pertinent to the purpose of collection and processing of personal data for purposes of commercial information or sending advertising materials or direct selling or for carrying out market research or commercial communication. Each user also has the right to revoke his or her consent at any time without prejudice to the lawfulness of the processing based on the consent given before revocation.
⦁ to receive your personal data, provided knowingly and actively or through the use of the service, in a structured format, in common use and readable by automatic device, and to transmit them to another data controller without hindrance
⦁ lodge a complaint with the Guarantor Authority for the protection of personal data in Italy
We remind you that for any question or request regarding your personal data and respect for your privacy you can write to firstname.lastname@example.org.
Personal data will be stored in paper and/or electronic/informatics form and for the time strictly necessary to fulfil the purposes set out in point 1, in compliance with your privacy and current regulations.
For direct marketing and profiling purposes, we will keep your data for a maximum period equal to that provided for by the applicable regulations (respectively 24 and 12 months).
Invoices, accounting documents and transaction data are kept for 11 years in accordance with the law (including tax obligations).
In the case of exercising the right to be forgotten through a request for express cancellation of personal data processed by the owner, we remind you that such data will be kept, in a protected form and with limited access, solely for the purpose of ascertaining and prosecuting crimes, for a period not exceeding 12 months from the date of the request and afterwards will be deleted in a secure manner or anonymized in an irreversible manner.
Finally, we remind you that for the same purposes, data relating to telematic traffic, excluding in any case the contents of communications, will be kept for a period not exceeding 6 years from the date of communication, pursuant to art. 24 of Law no. 167/2017, which implemented EU Directive 2017/541 on counter-terrorism.
The data are collected from the subjects indicated in point 3, according to the indications of the reference legislation, with particular regard to the security measures provided for by the GDPR (art. 32) for their treatment through computerized, manual and automated tools and with logic strictly related to the purposes indicated in point 1 and in any case in order to ensure the security and confidentiality of the data.
This information may be subject to change. If substantial changes are made to the use of the data relating to the user by the Owner, the latter will notify the user by posting them in full prominence on its pages or by alternative or similar means.