Skip to main content

PRIVACY POLICY

Information on the processing of personal data pursuant to art. 13 and 14 of the EU Regulation 679/2016 and of the Legislative Decree. 196/2003 and subsequent amendments

Blackout ® Entertaiment di Maccabei Massimiliano is the Data Controller (hereinafter: “Blackout” or “Owner”) pursuant to EU Regulation 679/2016 (from now on: “Regulation”) and Legislative Decree . 196/2003 and subsequent amendments (hereinafter: “Privacy Code”) and considers the privacy and protection of your personal data one of the main objectives of its business. Therefore, we invite you to carefully read this Privacy Notice because it contains important information on the protection of your personal data.

This Privacy Policy, in particular: informs you about your rights regarding the processing of your personal data; allows you to know in a transparent way how we collect and process your personal data and how we guarantee their protection; shows you the ways in which you can exercise your rights and the ways in which we will respond to your requests; is an integral part of the services we offer through the App City Up Perugia, App City Up Assisi and App City Up Fossombrone (hereinafter: “App City Up” and / or “Site”) and the my.cityup website. eu (hereinafter: “My City Up” and / or “Site”), the whole of which constitutes the City Up platform (hereinafter: “Platform” and / or “City Up Platform”); is made pursuant to art. 13 and 14 of the Regulations and pursuant to Legislative Decree 196/2003 to those who interact with the Apps and the Site.

Content index:

  1. GENERAL INFORMATION AND DEFINITIONS (GDPR)
  2. HOLDER OF THE TREATMENT
  3. CATEGORIES OF INTERESTED PARTIES
  4. CATEGORIES OF DATA PROCESSED
  5. SOURCES OF COLLECTION OF PERSONAL DATA
  6. PURPOSE OF THE PROCESSING OF PERSONAL DATA LEGAL BASIS OF THE PROCESSING AND CONSEQUENCES
  7. COMMUNICATION OF PERSONAL DATA
  8. TRANSFERS OF PERSONAL DATA
  9. PLACE OF STORAGE
  10. LIMITS TO STORAGE
  11. SECURITY MEASURES
  12. RIGHTS OF THE INTERESTED PARTY
  13. CHANGES
  14. HOW YOU CAN CONTACT US TO GET INFORMATION
  15. GENERAL INFORMATION AND DEFINITIONS (GDPR)

By “treatment”: any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.

To carry out the processing activities, the Data Controller may also use subjects external to its organization, defined as Data Processors.

These managers process your data according to the instructions of the owner, and exclusively for the purposes established by the owner. Data processors may be, for example, the subjects who provide the technological infrastructure of the City Up Platform.

By “personal data”: any information concerning an identified or identifiable natural person (“interested party”); the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity is considered identifiable, physiological, genetic, psychic, economic, cultural or social.

By “consent of the interested party”: any manifestation of free, specific, informed and unambiguous will of the interested party, with which the same expresses his / her consent, by means of a declaration or unequivocal positive action, that the personal data concerning him / her are subject to treatment.

  1. HOLDER OF THE TREATMENT

Blackout ® Entertaiment di Maccabei Massimiliano (VAT number 02945910541), with registered and operational headquarters Via Appia, 25 – 06123, Perugia – Italy, in the person of the legal representative Massimiliano Maccabei, (CF MCCMSM76C05A475B), email blackout.agency@gmail.com and pec blackout.agency@pec.it.

  1. CATEGORIES OF INTERESTED PARTIES

The data controller, during and for the purpose of the correct performance of its business, may collect, use, consult and more generally treat yours as a counterparty to the contractual relationship.

  1. CATEGORIES OF DATA PROCESSED

The personal data processed are the following:

  1. Navigation data.

The computer systems and software procedures used to operate the City Up Platform acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers used by users who connect to the City Up App and / or the My City Up Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system, the device model used and the user’s IT environment. These data are used only to obtain anonymous statistical information on the use of the City Up Platform to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the City Up Platform or third parties.

  1. Data provided voluntarily by you.

Except for the reference to specific information, this Privacy Policy is intended for the processing of data voluntarily provided by you through the City Up Platform.

  1. SOURCES OF COLLECTION OF PERSONAL DATA

Blackout collects your personal data when registering your Account on the City Up Platform.

  1. PURPOSE OF THE PROCESSING OF PERSONAL DATA, LEGAL BASIS OF THE PROCESSING AND CONSEQUENCES

Your personal data will be processed with automated and non-automated tools. They will be processed, with your consent if necessary, for the following purposes, where applicable:

  1. Service provision: allow the use of the City Up Platform and the provision of the various services provided by it, which can be purchased through the City Up Platform or by contacting Blackout directly.
  2. Response of requests.

The processing of your personal data for the purposes of providing services and responding to requests is necessary to be able to provide you with the requested services. This treatment is based on art. 6, par. 1, lett. b, of the Regulations ([…] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same). The provision of your personal data for these purposes is optional, but failure to provide it would make it impossible to activate or provide the services you requested.

  1. Compliance: fulfilling any obligations under applicable laws, regulations or community legislation, or satisfying requests from the authorities.

The processing of your personal data for this purpose is necessary to comply with legal obligations to which Blackout is subject. This treatment is based, in fact, on art. 6, par. 1, lett. c, of the Regulations ([…] the processing is necessary to fulfill a legal obligation to which the data controller is subject). This processing could involve the storage and communication of your personal data to the authorities for accounting, tax or other obligations.

  1. Carry out direct “Opt-in” via email for services similar to those you have subscribed to, except for your express refusal to receive such communications, which you can express at any time.

It should be noted that the processing of your personal data for this purpose represents a legitimate treatment pursuant to art. 130, paragraph 4, of the Privacy Code, which does not require your consent, provided that these are services similar to those that have already been the subject of your purchase and that you, adequately informed, do not refuse such use, initially or on occasion of subsequent communications received. This means that you can object to the processing of your personal data for this purpose both when requesting the products and services available on the City Up Platform (expressly denying consent to the processing for Marketing purposes), and during subsequent commercial communications. related to your purchase received from the owner, by writing to the contact details of the owner.

  1. Marketing: carrying out marketing activities such as drawing up studies, research, market statistics; send you promotional material relating to the activities, services and products of City Up.
  2. Communication of your data to commercial partners for marketing purposes: to allow Blackout partners to send you promotional material relating to activities strictly connected to the activities, services and products of Blackout and City Up;

These communications can be made via email or text message. It should be noted that the Data Controller collects a single consent for all the marketing purposes described here, pursuant to the General Provision of the Guarantor for the Protection of Personal Data “Guidelines on promotional activities and the fight against spam”, of 4 July 2013. The treatments carried out for the marketing purposes described in this section require your prior consent, pursuant to art. 6, par. 1, lett. a ([…] the interested party has given consent to the processing of their personal data for one or more specific purposes). The provision of your personal data for this purpose is therefore entirely optional and does not affect, in any way, the use of the services. This means that if you do not wish to grant such consent, you can still use the services made available through the City Up Platform. The only consequence of your failure to provide this consent will be that you will not be able to receive Blackout and City Up offers and promotions. In any case, if you wish to object to the processing of your personal data for Marketing purposes, you can do so at any time by contacting the Data Controller at the addresses indicated.

  1. Profiling: where applicable, analyze your interests, habits and consumption choices, in order to be able to send you personalized promotional material on the services offered by City Up.

On this point, it is specified that this profiling activity requires your prior consent and consists in the processing of information relating to your interests and training preferences, as well as your habits of use of our services, by means of automated tools. For example, a consequence of this treatment is that you will receive communications from City Up on events, initiatives and promotions which, based on your habits and preferences in using our services, we believe may be of interest to you. We inform you, in any case, that you will not be subjected to automated decision-making processes pursuant to art. 22 of the Regulation, i.e. you will not be subjected to decisions based solely on automated processing, which produce legal effects that concern you or that significantly affect your person. The treatments performed for the purposes of Profiling described in this section require your prior consent, pursuant to art. 6, par. 1, lett. a ([…] the interested party has given consent to the processing of their personal data for one or more specific purposes). The provision of your personal data for this purpose is therefore entirely optional and does not affect, in any way, the use of the services. This means that, if you do not wish to grant such consent, you can still use the services made available through the City Up Platform. The only consequence of your failure to provide this consent will be that you will not be able to receive promotional communications in line with your interests. In any case, if you wish to object to the processing of your personal data for the purpose of Profiling, you can do so at any time by contacting the Data Controller at the addresses indicated.

  1. Statistics: for statistical purposes, without it being possible to trace your identity.

It should be noted that this processing is not performed on personal data and therefore can be freely carried out by Blackout.

  1. COMMUNICATION OF PERSONAL DATA

Your personal data may be shared, for the purposes referred to in Article 6 of this Privacy Policy, with:

subjects who typically act as data processors, i.e. people, companies or professional firms that provide assistance and advice to Blackout in accounting, administrative, legal, tax and financial matters; subjects delegated to carry out technical maintenance of the IT systems and the City Up Platform; credit institutions, insurance companies and brokers (collectively “Recipients”). By way of example, the City Up Platform relies on a platform provided by Amazon Web Services EMEA SARL, currently located at 38 Avenue John F. Kennedy, L-1855, Luxembourg, which operates as a data processor;

subjects, bodies or authorities to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities;

persons authorized by Blackout to process personal data necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality, such as, by way of example, Blackout employees.

In any case, the data provided will not be disseminated unless required by law or expressly authorized by the interested party.

  1. TRANSFERS OF PERSONAL DATA

The data controller may transmit some data of the interested party to countries outside the European Economic Area, and in particular to internet service providers (server providers, cloud providers, etc.). In this case, the transfer will take place in accordance with the adequacy decisions (such as the EU-US privacy shield). Indeed, transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission.

More information is available by sending a written request to the Data Controller at the addresses indicated.

  1. PLACE OF STORAGE

The processing will take place using paper, IT and telematic tools, exclusively by personnel appointed by the data controller and specially trained, at the operational headquarters, as well as at the external managers appointed at their legal and operational offices.

  1. LIMITS TO STORAGE

We will keep your personal data for different times depending on the purpose for which we collected them:

Provision of services and response to requests: we will keep the data for the time strictly necessary to achieve the purposes. In any case, since these are treatments carried out for the provision of services, Blackout will make use of the right, allowed by the law (Article 2946, Civil Code), to keep the personal data necessary to protect their interests, for the time required by law. .

Compliance: we will keep the data for the time required by the specific obligation or applicable law;

“Soft Spam”: we will keep the data until you have opposed the processing, requesting that they no longer be the subject of commercial communications;

Marketing and Profiling: as a general rule, until your consent is revoked.

More information about the data retention period and the criteria used to determine this period can be requested by sending a written request to the addresses indicated. In any case, the possibility for Blackout to keep your personal data for the period of time allowed and allowed by Italian law to protect its interests (Article 2947, paragraphs 1 and 3, of the Civil Code) is reserved.

  1. SECURITY MEASURES

The data controller pursuant to art. 25 EU Reg. 679/2016 adopts physical, electronic and procedural security measures appropriate to the sensitivity of the information in its possession. These measures vary according to the sensitivity, format, location, quantity and methods of distribution and storage of personal data and include measures to protect personal data against unauthorized access. Security measures include the integrity of transmitted and received data, firewalls, antivirus, access and authorization controls, user authentication, training of employees, disaster recovery measures.

  1. RIGHTS OF THE INTERESTED PARTY

The interested party has the following rights regarding the protection of personal data that can be exercised against the data controller by writing to his email address or by means of a communication to be sent by means of a.r. to the registered office: the right of access (Article 15 of EU Reg. 679/2016, i.e request on how to use and process personal data); the right of rectification (Article 16 of EU Reg. 679/2016 i.e correction of any inaccuracies in personal data); the right of cancellation (Article 17 of EU Reg. 679/2016 cancellation of personal data in the event that there is no longer a legal basis that justifies the processing or if the interested party withdraws consent); the right to limit the processing (Article 18 of the GDPR i.e. the interested party disputes the accuracy of personal data and the limitation of the processing of personal data takes place for the time necessary to consider the interested party’s request); the right to portability (Article 20 EU Reg. 679/2016 ie receipt of personal data and transmission of stored personal data to another holder; the right to object (Article 21 EU Reg. 679/2016) and the right to object in any moment, to the processing of personal data concerning him; the right to withdraw his consent to the processing of personal data (Article 7 of EU Reg. 679/2016 ie to withdraw consent to the processing at any time in the absence of reasons); the right to submit a complaint to the supervisory authority (Article 77 of EU Reg. 679/2016). The data controller and the Data Protection Officer undertake to respond to the requests to exercise the above rights within thirty days from their receipt at the addresses indicated in this information.

  1. CHANGES

This Privacy Policy is effective from 22/06/2020. The data controller reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. The changes will be binding as soon as they are published on the site. We therefore invite you to visit this section regularly to get acquainted with the most recent and updated version of the information and so that the interested party is always updated on the data collected and on the use that the data controller makes of it. In any case, if the changes involve new or further processing and in any case in the cases provided for by current legislation, the data or personal data of the interested party will not be subject to further processing without his explicit consent

  1. HOW YOU CAN CONTACT US TO GET INFORMATION

To exercise your privacy rights or for any other request for information regarding the processing of your personal data, you can write to the Data Controller: Blackout ® Entertaiment di Maccabei Massimiliano (VAT number 02945910541), with registered office and operational headquarters in Via Appia, 25 – 06123, Perugia Italy, in the person of the legal representative pt Massimiliano Maccabei, (Tax Code MCCMSM76C05A475B), email blackout.agency@gmail.com and pec blackout.agency@pec.it.

Apri chat
Ciao!
Possiamo aiutarti?