INFORMAZIONI PER L’UTENTE AI SENSI DEGLI ARTICOLI 13 E 14 DEL REGOLAMENTO EUROPEO DEL 27 APRILE 2016 N. 679 (“GDPR”)

INTRODUCTION

The company SOUNDTRACK, with registered office in street degli Imbriani 20, c.a.p. 20158, in Milan (MI), telephone 02 94155942, e-mail info@soundtrack.euas data controller, provides information on the processing of personal data collected from users consulting the site web accessible electronically at the following addresses www.tonycarnevale.it and www.tonycarnevale.world

The personal data of the user of the website defined, as the data subject, are collected directly from him or her or acquired by other parties, duly designated as data processors, and are processed in compliance with the GDPR, applicable legislation and in accordance with this information according to principles of correctness, lawfulness, transparency and protection of confidentiality.

1. TYPES OF PERSONAL DATA PROCESSED

1.1. Browsing data, technical, analytics and profiling cookies

The procedures and computer systems set up for the site acquire certain personal data in the course of their normal operation, the transmission of which is implicit in the use of Internet communication protocols, to enable the user to navigate or to provide the requested service.

The company uses:

(i) cookie technical data without which consultation of the site or certain operations could not be carried out or would be more complex and/or less secure;

(ii) cookie analytics to collect navigation data in aggregate and anonymous form for statistical purposes only;

(iii) cookie profiling that can be processed by the company only after the user has given his or her consent..

For detailed information on cookies as well as on third parties who become aware of the data collected through the use of cookies see also the cookie policy available on the website.

1.2. Data processed for promotional and/or commercial purposes and use of profiling cookies

The data collected through the use of profiling cookies indicated in the relevanta cookie policy may also be processed by the company, with the user’s consent, for promotional or commercial purposes, for the purpose described in paragraph 2(c) below.

2. PURPOSE AND LEGAL BASIS OF PROCESSING

Personal data are processed for the purposes set out below.

a. Navigation data: the performance of necessary activities, for which the consent of the data subject is not required:

(i) monitor the proper functioning of the services offered and allow the user to consult the site safely and efficiently;

(ii) collect statistical information in aggregate form to evaluate the effectiveness of services web;

(iii) profiling cookies, for which the user’s consent is required.

b. Personal data: the transfer of data to third parties for the purpose of marketing, including in connection with the use of profiling cookie and statistical services.

The third party recipients of the user’s personal data are indicated in paragraph 3 below; the legal basis for the processing is the express expression of consent by the user (Art. 6(a) GDPR).

3. SUBJECTS WHO MAY ACQUIRE PERSONAL DATA

3.1. Disclosure of personal data

In the course of its activities and in pursuance of the purposes set out in paragraph 2 above, the user’s personal data may be communicated to

a. third parties to carry out marketing activities also related to the use of profiling cookies;

b. third parties for statistical activities aimed at assessing the effectiveness of web services;

c. providers of cloud or IT services to the company;

d. companies belonging to the holder’s group;

e. site operator and development service providers.

3.2. Persons processing personal data

Personal data are processed by:

a. employees or collaborators of the data controller, acting on the basis of instructions from the data controller. The system administrator may also have access to personal data in the course of his/her duties. The names of these persons may be requested from the data controller by addressing them to: info@soundtrack.eu;

b. data processors, a list of which can be obtained from the same e-mail address.

4. PLACE OF DATA PROCESSING

The processing of personal data is carried out by the data controller mainly in Italy on server the data controller and/or the companies appointed as data processors. In connection with the purposes set out in paragraph 2 above, personal data may be transferred to third parties within Europe.

5. DATA RETENTION PERIOD

Personal data will be stored in accordance with the cookie policy.

6. PROCESSING TOOLS

Personal data will be processed by electronic and/or telematic means, according to logic strictly related to the purposes set out in paragraph 2 above, and, in any case, in such a way as to guarantee their security and confidentiality.

7. RIGHTS OF THE INTERESTED PARTY

With regard to your personal data, you may exercise your rights under Articles 15 to 22 of the GDPR and 7(3). In particular, the user has the right to:

(i) ask the holder for access, rectification and deletion;

(ii) object to the processing or request its restriction;

(iii) obtain portability;

(iv) withdraw consent.

8. SUBMISSION OF COMPLAINTS

In relation to any type of data processed by the data controller, without prejudice to the data subject’s right to appeal to any other court, if he/she considers that the processing of his/her personal data has been or is being carried out in breach of the GDPR and of the regulatory provisions applicable from time to time, he/she has the right to lodge a complaint with the data protection authority in accordance with the procedures set out in
www.garanteprivacy.it.

9. HOW TO EXERCISE YOUR RIGHTS. HOW TO CONTACT THE DATA CONTROLLER.

The data subject may at any time exercise the rights referred to in Section 7 above by sending a communication to the following address: info@soundtrack.eu.

The data controller