Privacy Notice pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR)
1. Preamble
This notice is provided, pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter, the "Regulation" or "GDPR"), by ANIMA Blockchain SRL, as Data Controller of the personal data of users who access and interact with the website https://www.animablockchain.com (hereinafter, the "Website").
This notice describes the methods and purposes of processing personal data collected through the Website, as well as the rights granted to data subjects.
2. Data Controller
The Data Controller is:
ANIMA Blockchain SRL
Registered Office: Via Del Lauro 9, Milano 20121 (MI), Italy
Tax Code / VAT Number: 12313090966
Email: contact@animablockchain.com
3. Types of Personal Data Processed
ANIMA Blockchain SRL collects and processes the following categories of personal data, within the limits and according to the methods described in this notice:
- Personal and contact data: name, surname, email address, phone number;
- Professional and business data: company name, VAT number;
- Navigation data: IP address, user agent, session identifiers, access logs, referrer, request time, response status.
Data may be provided directly by the data subject through forms on the Website or automatically acquired during navigation.
4. Purposes and Legal Basis of Processing
Personal data is processed by the Controller for the following purposes:
a) Management of requests submitted through Website forms ("Book a Demo", "Contacts", "Support requests")
- Legal basis: Performance of pre-contractual measures taken at the request of the data subject (art. 6, par. 1, lett. b GDPR);
- Provision: Mandatory. Failure to provide data makes it impossible to follow up on the request.
b) Sending promotional communications and newsletters
- Legal basis: Consent of the data subject (art. 6, par. 1, lett. a GDPR);
- Provision: Optional. Lack of consent does not affect the use of the Website, but makes it impossible to receive promotional communications.
c) Direct marketing activities and commercial follow-up
- Legal basis: Consent (art. 6, par. 1, lett. a GDPR);
- Provision: Optional.
d) Compliance with legal, regulatory and fiscal obligations
- Legal basis: Compliance with a legal obligation to which the Controller is subject (art. 6, par. 1, lett. c GDPR);
- Provision: Necessary for compliance with legal obligations.
e) Legal defense
- Legal basis: Legitimate interest of the Controller in protecting its rights (art. 6, par. 1, lett. f GDPR);
- Provision: Automatic, where necessary.
5. Processing Methods
Data is processed using computer, electronic and paper tools, in compliance with the principles of lawfulness, fairness, transparency, data minimization, accuracy, integrity and confidentiality referred to in art. 5 of the GDPR.
Processing takes place in compliance with adequate technical and organizational measures, in accordance with articles 25 and 32 of the GDPR.
No automated profiling activities or automated decision-making processes that produce legal effects on the data subject are carried out.
6. Data Retention
Personal data will be kept for the time strictly necessary to achieve the purposes for which it was collected, in compliance with the principle of storage limitation (art. 5, par. 1, lett. e GDPR), and in particular:
- Data for request management: 12 months from the last interaction with the user;
- Data processed for marketing/newsletter purposes: until consent is revoked, and in any case for a maximum period of 24 months;
- Data processed for legal obligations: for the period required by applicable regulations (e.g. 10 years for tax purposes).
7. Communication and Transfer to Third Parties
Personal data may be communicated to third parties, appointed as Data Processors pursuant to art. 28 of the GDPR, for purposes strictly connected to the provision of requested services, including:
- Cloud, hosting and CRM service providers;
- Newsletter, marketing automation and tracking service providers;
- Subjects responsible for technical maintenance of the Website;
- Accounting, tax or legal consultants.
Data may also be communicated to independent Data Controllers in cases provided by law, or to exercise a right in court.
Personal data will never be subject to dissemination.
Any transfers of personal data to third countries (outside the EEA) will take place exclusively within the limits and according to the methods provided for in articles 44 and following of the GDPR, guaranteeing an adequate level of protection.
8. Data Subject Rights
The data subject, pursuant to arts. 15 and following of the GDPR, has the right to:
- obtain confirmation of the existence or not of personal data concerning them;
- access their data and receive a copy;
- request rectification or updating of inaccurate or incomplete data;
- obtain erasure ("right to be forgotten") of personal data where applicable;
- restrict processing;
- object, for legitimate reasons, to processing;
- receive data in a structured format and transmit it to another controller ("portability");
- withdraw consent previously given at any time;
- lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
Requests may be exercised at any time by sending a communication to: contact@animablockchain.com
9. Changes and Updates
This notice may be subject to updates, in accordance with regulatory or technical developments. In case of substantial changes, users will be informed with appropriate notice on the Website or via email. We invite you to periodically consult this section.
10. Cookies
For information on the use of cookies, please refer to the Cookie Policy available at the following link: https://animablockchain.com/cookies-policy