Information about the personal data processing
(Regulation UE 679/2016 Art.13)
The EU Regulation provides for forms of data protection so that they are processed in a lawful, correct and transparent way towards the interested party, collected for specific, explicit and legitimate purposes, adequate, relevant and limited to what is necessary with respect to the purpose, exact and, if necessary, updated, kept for the time strictly necessary.
The processing, compatible with the purposes for which the data are collected, must ensure an adequate personal data security.
User registration on the website www.28studios.eu is subordinated to the preventive reading
and acceptance by the same of this information relating to the processing of personal data and the interested party authorization to its processing.
1. Data Controller
The data controller is the company TWENTY8STUDIOS SRL owner of the website www.28studios.eu, with registered office in Milan, Via Correggio, 20 e-mail firstname.lastname@example.org.
The Data Controller, taking into account the art state and the implementation costs, as well as the nature, the application topic, context and purpose of the processing both when determining the means of processing and at the time of processing itself (so-called risk analysis – accountability), has caused adequate technical and organizational measures, aimed at effectively implementing the principles of data protection and integrating the necessary guarantees in the processing in order to
satisfy the EU Regulation 679/2016 requirement and to protect the data subject rights.
2. Treatment’s Responsible
Veronica Ponti is the person in charge of data processing, specifically appointed and you can contact her for any request concerning the data processing and its methods.
3. Place of treatment
The treatments connected to the web services of this site take place by the headquarters’ Data Controller and are only handled by the persons specifically responsible for the processing.
please note. Treatment must be understood as any operation or operations set, carried out with or without the aid of automated processes and applied to personal data, or personal data sets, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication or any other form available, comparison or interconnection, cancellation or destruction.
4. Types of data treated
4.1. Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected to be associated with identified data subjects, but thanks to their nature, through processing and association with data held by third parties, allow users to be identified.
In This data category are includede IP addresses
or domain named computers used by users who usually connect to the site, URI (Uniform Resource Identifier) requested resources’ adresses, requested time, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating, the given response status of the by the server and other parameters relating to the operating system and the user’s IT environment. These data are used for the unique purpose to obtain anonymous statistical information using the site and to check its right operation and they are deleted immediately after using.
The data could be used to verify responsibility in the event of hypothetical computer crimes against the site: except for this possibility, contacts on data web are will remain for no more than seven days.
4.3. Spontaneously provided Data given by the user
The optional, explicit and voluntary e-mails sending to the addresses indicated on this site, as well as the completion of any data entry forms (form) and / or newsletter subscription forms involves the subsequent acquisition of the sender’s address, necessary for replying to any questions as well as any other personal data included in the message.
EU Regulation information referred to art. n. 13
and the approval to the processing data are not due in case of a spountaneous sending’s curriculum transmitted by the interested parties for the purpose of establishing a working relationship with our organization. The information will still be provided at the time of the first contact following the curriculum sending.
5. Data processing purpose
The personal data provided by the user, including your e-mail address, will be processed, up to your opposition, for the following purposes:
-Navigation on www.28studios.eu website
-Contact by e-mail, sending information and reporting new initiatives on the subject;
-28studios Srl database consultation
-It is aimed for carrying the administrative activities out and managing the contractual relationship with the customer, and fulfilling the financial and accounting obligations, as well as managing the agenda.
6. Processing methods
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
All appropriate technical and organizational measures will be applied to guarantee a level of security appropriate to the risk, so as to ensure, on a permanent basis, confidentiality, integrity, availability and resilience of the GDPR 679/2016 processing systems and services, by persons specifically appointed and in compliance with the provisions of art. 29 of the GDPR 679/2016.
7.Communication and distribution field
The processed data will not be spread, sold or changed with other subjects, without the expressed interested party consent.
Communication data field is limited exclusively to those competents for what concernes all contractual operations fullfillment and legal obligation compliance.
They may therefore be disclosed to third parties belonging to the following categories:
– Subjects who provide for information system management
-Studies or companies belonging to the assistance and consultancy field
-Administrations, public bodies and competent authorities, for the fulfillment of legal obligations and / or provisions of public bodies;
In any case, only the necessary and pertinent data will be communicated to the aforementioned subjects
Respecting the purposes of the processing for which they are responsible which determine the retention period.
8. Data transfer to third countries
We inform you that your personal data will not be transferred either to member states of the European Union or to third countries outside the European Union.
9. Conferment consent
Apart from what we already specified for navigation data, the user is free of providing personal data contained in the forms on the site to receive newsletters, information material, invitations to events or other communications. Failure to provide personal data may let be impossible to obtain the requested services.
10. Data retention period
Personal data are stored according to the following criteria:
– For the time strictly necessary for the fulfillment of legal obligations (for example Document conservation)
– For the time strictly necessary for the provision of any services requested by you;
-For the time strictly necessary to achieve the purposes for which they are processed.
11. Interested party rights
The Regulation gives you the exercise of specific rights, including those to ask to the Data Controller the following:
-Confirmation that your personal data is going to be controlled or not and, if so, the possibility to obtain an access (the access right), linked to the old Regulation article n.15.
– The correction of inaccurate personal data, or the integration of incomplete personal data (the rectification right), linked to the old Regulation article n.16.
– The data cancellation, if one the expected reasons exist according to the Regulation, linked to the old article n. 17
– The processing limitation, when one of the foreseen hypotheses provided by the Regulation (the limitation right), linked to the Regulation art. n. 18
– You can receive in a structured and clear format generated by an automatic device back your personal data given to the Data Controller and you can transfer those data to another Data Controller (right to portability), according to the old Regulation art. n. 20
For any request linked to the personal data processing, as well as to exercise the rights ex. articles from 15 to 22 of EU Reg. 679/2016, please contact:
Treatment Holder 28studios Srl
Adress Via Correggio 20 – 20149 Milano
Phone number 02/76398534
Mail adress email@example.com
Veronica Ponti treatment responsible
The interested party has the right to lodge a complaint with the privacy authority if the Data Controller does not respond to his requests.
The user also has the right, at any time, to request removal from the registered users list on the website www.28 studios.eu in order to no longer receive any service or information. To obtain the cancellation, the user can send a request to firstname.lastname@example.org. The owner undertakes to delete the user from the aforementioned list within 24 hours after receiving
The Owner reserves the right to modify, update, add or remove parts of this information dipending on his decision at any time. Interested persons are required to periodically check for any changes. In order to facilitate this verification, the information contains an update date indication. The site use after changes publication will constitute acceptance of the same one.
Update date: 17th april 2020