INSTABRICK

Data controller
Processing of personal information
Use of personal information and lawful bases for processing
Recipients
Retention of data
Your rights
Updates and amendments

Dear Users, this privacy information notice is provided pursuant to Article 13 of European Regulation 2016/679 on the protection of personal information to users accessing our website https://instabrick.org, and applies to all personal data provided by the users and collected and retained by the Data Controller. Please note that this information is provided only for the above website, and not for any other websites and/or applications the user may consult via links to external, third-party pages.

1 - Data controller

The Data Controller is the company GETCOO Srl, based in Villanova di Bagnacavallo (RA), Via Bandoli, 7 - 48012, VAT number: Email: info@getcoo.com. For more information, you can contact the Data Controller at any time using the contact information provided.

2 - Processing of personal information

Personal information can be provided directly by you or collected automatically (usage data) when accessing and browsing the web. You shall be responsible for providing correct and truthful information, and shall confirm, when providing personal information concerning a third party, that you have the right to do so and release the Data Controller from any liability.

3 - Use of personal information and lawful bases for processing

1. Management of requests for information, support or contact requests
Freely, explicitly and voluntarily sending messages to the email addresses provided by the Data Controller entails the acquisition of your contact details, which are required to reply to a message, as well as all personal data included in the message. These categories of data are processed for the purpose of managing support requests or any other request for information received by the Data Controller through the contact details provided through the website. The lawful basis for processing personal data is the execution of a contract in which the user is the interested party or compliance with pre-contractual obligations, as requested by the interested party. The provision of personal information for the aforementioned purpose is optional, but failure to provide it would make it impossible for us to manage any request for information or support.

2. Registration and access to our services
Through the sign-in page, you can fill out the form by entering the required information. By signing in, you authorise the platform to identify you and access our services. The lawful basis for processing personal data is the performance of a contract to which you are a party, or the need to take steps at your request prior to entering into a contract. The provision of personal information for the aforementioned purpose is required, as failure to provide the required data or its incorrect provision would make it impossible for you to sign in and/or access our services.

3. Promotional messages/advertising and market research
You can consent to provide your personal information to receive promotional and marketing communications and information on the services and products offered by the Data Controller at the email addresses provided when signing in, also by subscribing to our Newsletter through the form provided. By giving your consent, you will also receive, among others, requests to fill out, on an optional basis, surveys with the sole purpose of identifying the interest of the target market and future product development prospects, which will contribute to their improvement. The purpose of the processing of the aforementioned categories of data is sending communications by email or other automated tools. The lawful basis for processing is your content, which will legitimate the provision of additional and specific services such as sending information and promotional messages. For this reason, you have the right to withdraw your consent at any time, without prejudice to the lawfulness of the consent-based processing of data prior to withdrawal and without any detrimental consequence following the withdrawal of your consent.

4. Statistical information and data required for the functionality needs of our website
When browsing the website, the Data Controller automatically collects some data, the so-called navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal information whose transmission is implicit in the use of the Internet communication protocols. Even if this information is not collected to be associated with identified interested users, it could, through processing and associations with data held by third parties, lead to user identification. This data category includes IP addresses or the domain names of the computers used by users who connect to the website, URIs identifying specific resources, time of request, the method used to submit the request to the server, the numerical code identifying the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the user's IT environment. The purposes of the processing of these categories of data are to collect statistical information – including aggregated information – on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.) and check the correct functioning of the website and the services provided by it. The lawful basis for processing personal data is the performance of a contract to which you are a party, or the need to take steps at your request prior to entering into a contract. Some data collected automatically when browsing the website are required to access the website and the services provided by it.

4 - Recipients

The Personal Information you provide may be disclosed to specific appointed recipients who will process the data as data processors and/or as the persons in charge of processing. In particular, your personal information may be disclosed to recipients from the following categories: competent authorities for the fulfilment of legal obligations and/or provisions by public bodies, upon request; companies repairing and/or maintaining IT equipment; companies managing the website, and, in general, to allow suppliers to carry out technical, logistical and other activities on our behalf. Our providers have access only to the personal information required to carry out the above activities, and undertake not to use your information for other purposes, and to process it in accordance with current regulations. In any case, processed personal data will be not disseminated. For a comprehensive list of data processors, joint controllers and persons in charge of processing personal data, please send a request to the email address support@instabrick.org

5 - Retention of data

Your personal information will be retained for a period of time calculated based on the purposes for which it was collected and on regulations, if any, on the retention period. Management of requests for information and support and contact requests: any personal data collected when managing requests for information forwarded by a user will be retained for 1 year after request fulfilment, also in order to fully and easily manage any further requests. At the end of this period, the information that can, even indirectly, identify a natural person will be anonymized and stored, in the form of aggregate data, for statistical purposes. Registration and access to our services: any personal data collected and processed in order to allow a user to sign in and use the services offered by the website will be retained for the period of time required for the purpose, until the user asks for his or her profile to be deleted, or, if necessary, for longer periods. Promotional messages: any consent-based personal data collected and processed for promotional and marketing purposes are processed for this purpose until withdrawal of consent. These data may subsequently be processed by the Data Controller only for purposes that require a different retention period, and not for the specific purpose for which the consent was withdrawn. Any personal data collected for market research purposes (filling out questionnaires and surveys) will be retained for 2 years and subsequently anonymized by aggregation. Navigation data are not retained for more than seven days, unless otherwise required by any judicial authority for conducting criminal investigations; after this period, they will be aggregated or anonymized for statistical purposes only.

6 - Your rights

Pursuant to Articles 15 of 22 of (EU) Regulation 2016/679 you have the following data protection rights. Right to access: pursuant to Article 15, you have the right to obtain confirmation of whether your personal data are being processed or not, and, if so, obtain a copy of such data. You also have the right to obtain access to personal data concerning you and any additional information on the purposes for which your personal information is processed, on the recipients, on the retention period and on your rights. Right to rectification: pursuant to Article 16, you have the right to obtain the rectification of inaccurate personal data concerning you and the integration of incomplete personal data concerning you. Right to delete: you have the right to obtain, without undue delay and under one of the conditions provided for by Article 17, the cancellation of personal data concerning you. Right to restrict: under one of the conditions provided for by Article 18 of Regulation 2016/679, you have the right to restrict our processing of your personal data. Right to portability: you have the right to receive personal data concerning you, in a structured, commonly used and machine-readable format, and you have the right to transfer your data to another controller without hindrance, according to the provisions of Article 20 of Regulation 2016/679; Right to object to our processing of your personal information: you have the right to object to our processing of personal data concerning you, according to the provisions of Article 21 of Regulation 2016/679. ¬Moreover, you have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante della Privacy). To exercise any of your rights, please send a request in writing to the Data Controller, and you will receive a reply according to the time limits established by law. Any request for clarification can be addressed in writing to the Data Controller, also through the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924

7 - Updates and amendments

The Data Controller reserves the right to modify, supplement or periodically update this Information in compliance with the applicable legislation or the measures adopted by the Italian Data Protection Authority. An email with a link to the Privacy Policy page on the website will inform you of the aforementioned amendments or additions. However, we kindly ask you to access and consult the Privacy Policy page on a regular basis to see if it was updated.