Privacy Policy

PURSUANT TO ART. 13 LEGISLATIVE DECREE 196/03 AND EU REGULATION 679/2016 (GDPR)

This page describes how personal data collected through this website and related services is managed. For more information on data processing concerning cookies, please read our cookie policy.

Playnet Service Srl, with registered office at Via Giovanni Agnelli 16/18, 70013 – Castellana Grotte (BA), VAT number 05702030726, as data controller (hereinafter referred to as “Controller” or Playnet Service), represented by the pro tempore legal representative Giannuzzi Osvaldo,

informs you,

pursuant to art. 13 Legislative Decree 30.6.2003 n. 196 (hereinafter, “Privacy Code”), pursuant to Directive 2009/136/EC and subsequent amendments, and art. 13 and 14 of EU Regulation 2016/679 – General Data Protection Regulation (hereinafter, “GDPR”), that your data will be processed as follows:

1. SUBJECT OF THE PROCESSING

The Controller processes personal, identifiable data (e.g., name, surname, company name, address, phone, e-mail, banking and payment references, hereinafter referred to as “personal data” or simply “data”) that you provide or that we collect, according to the following methods:

during visits to the websites www.playnetservice.it or playnetservice.it (including the domains and subdomains www.playnetservice.net, playnetservice.net, www.playnetservice.it, and playnetservice.it, hereinafter collectively identified as “www.playnetservice.it”), owned by Playnet Service Srl;

• when registering a personal account on the website www.playnetservice.it;
• when purchasing a product or service offered by Playnet Service;
• through telephone activities;
• by filling out forms available on Playnet Service websites;
• through the purchase of commercial databases or public documents/information.

Specific information on data

• Browsing data

The IT systems and software procedures responsible for this website’s operation automatically acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These are information not collected to be associated with identified subjects but which, by their nature, could allow identification of users through processing and association with data held by third parties. This category includes IP addresses or domain names of users’ computers connecting to the website, URI (Uniform Resource Identifier) addresses of requested resources, time of the request, request method, size of the file obtained in response, numerical code indicating server response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment.

Purpose and legal basis of processing (GDPR – art.13, paragraph 1, letter c)

These data are used solely to obtain anonymous statistical information on site usage and to verify proper functioning. Data may also be used for determining responsibility in case of potential cyber offenses against the website (legitimate interests of the controller).

Scope of communication (GDPR – art.13, paragraph 1, letters e, f)

Data are processed exclusively by internal personnel, duly authorized and trained (GDPR – art.29), and will not be communicated to external parties, published, or transferred outside the EU. Only in case of investigation may they be made available to competent authorities.

Data retention period (GDPR – art.13, paragraph 2, letter a)

Data are normally retained for short periods, except in cases of prolonged retention related to investigative activities.

Provision of data (GDPR – art.13, paragraph 2, letter f)

Data are not provided by the data subject but are automatically acquired by the website’s technological systems.

• Newsletter subscription

The newsletter allows continuous and extensive updates regarding relevant sector information, events, initiatives, offered products/services, and possible promotional offers.

Purpose and legal basis of processing (GDPR – art.13, paragraph 1, letter c)

Only the e-mail address is requested, solely to send the newsletter. Subscription requires the explicit, free, and informed consent (GDPR – art.6, paragraph1, letter a), documented through a dedicated checkbox (GDPR – art.7, paragraph1).

Scope of communication (GDPR – art.13, paragraph 1, letters e, f)

Data are processed exclusively by personnel duly authorized and trained (GDPR – art.29). Access to data may also be granted to the company providing the technological platform and its staff, solely for site maintenance purposes. The personal data and newsletter management platform, on behalf of Playnet Service, is Mailchimp. For information on how this service collects, manages, and processes data, please consult Mailchimp’s legal section. Data will be transferred to the USA.

Data retention period (GDPR – art.13, paragraph 2, letter a)

Data are retained until their voluntary removal, which can be done at any time via the link at the bottom of each message sent.

Provision of data (GDPR – art.13, paragraph 2, letter f)

Failure to provide the e-mail address and consent will prevent receiving the newsletter service.

• Information request

This page allows the data subject to request information. Identification and contact data are required.

Purpose and legal basis of processing (GDPR – art.13, paragraph 1, letter c)

Identification and contact data are requested to respond to the inquiries. Sending a request requires explicit, free, and informed consent (GDPR – art.6, paragraph1, letter a), documented through a dedicated checkbox (GDPR – art.7, paragraph1).

Scope of communication (GDPR – art.13, paragraph 1, letters e, f)

Data are processed exclusively by personnel duly authorized and trained (GDPR – art.29). Access may also be granted to the company providing the technological platform and its staff solely for site maintenance. Data will not be disseminated or transferred outside the EU.

Data retention period (GDPR – art.13, paragraph 2, letter a)

Data are retained for periods compatible with the purpose of collection.

Provision of data (GDPR – art.13, paragraph 2, letter f)

Provision of mandatory fields is necessary to receive a response, while optional fields help staff provide additional useful information to facilitate contact.

• Cookies

To learn more about how we process cookies and their use, please carefully read our cookie policy.

2. METHODS AND PURPOSES OF PROCESSING

Processing of your personal data is carried out through the operations listed in art. 4 Privacy Code and art. 4 n.2 GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data.

Your personal data are processed both on paper and electronically and/or automatically.

The Controller will process personal data for the time necessary to achieve the above purposes and, in any case, for no more than 20 years from the end of the relationship for Service Purposes or until a request for deletion for Marketing Purposes.

Your personal data are processed:

A. Without your explicit consent (art. 24 lett. a, b, c of the Privacy Code and art. 6 lett. b, e of GDPR), for the following Service Purposes:

• • to fulfill pre-contractual, contractual, and fiscal obligations arising from relationships with you;
  • to comply with legal obligations, regulations, EU law, or authority orders (e.g., anti-money laundering);
  • to exercise the Controller’s rights, e.g., the right of legal defense.

B. Only upon your specific and separate consent (art. 23 and 130 of the Privacy Code and art. 7 GDPR), for the following Marketing Purposes:

• • to send commercial communications via e-mail, mail and/or SMS and/or telephone contacts, newsletters;
  • to send advertising material on products or services offered by the Controller;
  • to send invitations to events or other specific marketing initiatives;
  • to send news or updates regarding websites owned by Playnet Service.

All data are processed lawfully, fairly, and transparently towards the data subject, in compliance with the general principles set forth in art.5 GDPR.

Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorized access.

3. ACCESS TO DATA

Your data may be accessed for the purposes described in art. 2.A) and 2.B):

• by employees and collaborators of the Controller or Group companies in Italy and abroad, as internal processors and/or system administrators;
• by third-party companies or other entities (e.g., business partners, banks, professional firms, consultants, insurance companies for insurance services, etc.) performing outsourced activities on behalf of the Controller, as external data processors.

4. DATA COMMUNICATION

Without the need for explicit consent (ex art. 24 lett. a, b, d of Privacy Code and art. 6 lett. b, c of GDPR), the Controller may communicate your data for purposes under art. 2.A) to supervisory bodies, judicial authorities, and entities legally required to receive such data.

These entities will process the data as independent data controllers.

Your data will never be publicly disclosed.

5. DATA TRANSFER

Personal data processed by Playnet Service are stored on servers located within the European Union. In some cases, when using third-party services connected to www.playnetservice.it outside the EU, the Controller ensures that the data transfer will comply with applicable law, subject to standard contractual clauses provided by the European Commission.

6. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND

Provision of data for purposes in art. 2.A) is mandatory. Without it, we cannot guarantee the services described in art. 2.A).

Provision of data for purposes in art. 2.B) is optional. You may decide not to provide any data or later refuse processing of already provided data: in that case, you will not receive newsletters, commercial communications, or advertising material related to the Controller’s services.

You will still have the right to use the Services in art. 2.A).

7. RIGHTS OF THE DATA SUBJECT

As a data subject, you have the rights under art. 7 Privacy Code and art. 15 GDPR, namely:

1. to obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet recorded, and to receive it in an intelligible form;
2. to obtain the indication of:
   • the origin of personal data;
   • the purposes and methods of processing;
   • the logic applied in case of processing with electronic tools;
   • the identification details of the controller, processors, and the representative designated under art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 GDPR;
3. the entities or categories of entities to whom personal data may be communicated or who may become aware of them as designated representatives in the State territory, processors, or authorized staff;
4. to obtain:
   • updating, rectification, or, if interested, integration of data;
   • deletion, anonymization, or blocking of data processed unlawfully, including data not necessary for the purposes for which they were collected or subsequently processed;
   • confirmation that the operations under the above letters a) and b) have been made known, including content, to those to whom the data were communicated or disclosed, except when this is impossible or requires disproportionate effort compared to the right protected;

to object, in whole or in part:

• for legitimate reasons to the processing of personal data concerning you, even if relevant to the purpose of collection;
• to the processing of personal data for sending advertising, direct sales, market research, or commercial communication using automated calling systems without an operator, via e-mail, and/or traditional marketing methods via phone and/or mail;
• It should be noted that the right to object described above for direct marketing purposes using automated methods extends to traditional methods. Where applicable, you also have the rights under arts.16-21 GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

METHODS OF EXERCISING RIGHTS

You can exercise your rights at any time by sending:

• a registered letter with return receipt to Playnet Service Srl, Via Giovanni Agnelli 16/18, 70013 – Castellana Grotte (BA), VAT number 05702030726;
• an e-mail to [email protected];
• a certified e-mail to [email protected].

CONTROLLER, PROCESSOR, AND AUTHORIZED STAFF

The Data Controller is Playnet Service Srl, with registered office at Via Giovanni Agnelli 16/18, 70013 – Castellana Grotte (BA), VAT number 05702030726.

The updated list of external processors under Legislative Decree 196/03 and authorized staff is kept at the operational headquarters of the Data Controller.

Also read the cookie policy.