PRIVACY NOTICE
(pursuant to Article 13, General Data Protection Regulation no. 679/2016/EU)
In accordance with Article 13 of EU Regulation no. 2016/679 (General Data Protection Regulation, the “Regulation”) and Legislative Decree no. 196 of 30 June 2003 (containing the Italian Data Protection Code) and subsequent amendments, HOUSE OF DISASTER Production & Entertainment S.r.l., with registered office at via Alberto da Giussano 18, 20145 - Milan, Italy (the “Company” or the “Controller”), provides below information (the “Privacy Notice”) for the processing of personal data provided by users (the “Users”) for the purpose of registration and use of content on the platform “HODTV “(the “Platform”), in accordance with the license terms and conditions applied by the Company (the “Agreement”)
1. Origin and type of personal data
1.1. The Company processes the following type of personal data relating to the Users:
1.1.1. name and surname;
1.1.2. e-mail address;
1.1.3. data relating to payments’ processing (credit card details, PayPal account information.
1.1.2. e-mail address;
1.1.3. data relating to payments’ processing (credit card details, PayPal account information.
1.2. Neither personal data relating to the special categories, nor personal data relating to criminal convictions or offences referred to in Articles 9 and 10 of the Regulation are processed.
1.3. The Company processes personal data relating to the Users for the following purposes:
1.3.1. execution and performance of the Agreement (including the related administrative, accounting, insurance and tax purposes);
1.3.2. fulfillment of obligations imposed by national and international legislation;
1.3.3. protection of the Company's rights in judicial and extrajudicial settlements, also in relation to breaches of company policies;
1.3.4. pursuing a legitimate interest of the Company, in accordance with paragraph 2.1.3;
1.3.5. subject to the consent of the Users, direct marketing purposes of HOD, aimed at advertising individual audiovisual works and, more in general, the Platform.
1.3.2. fulfillment of obligations imposed by national and international legislation;
1.3.3. protection of the Company's rights in judicial and extrajudicial settlements, also in relation to breaches of company policies;
1.3.4. pursuing a legitimate interest of the Company, in accordance with paragraph 2.1.3;
1.3.5. subject to the consent of the Users, direct marketing purposes of HOD, aimed at advertising individual audiovisual works and, more in general, the Platform.
1.4. The provision of personal data is mandatory for the purposes referred to in paragraphs 1.3.1, 1.3.2, 1.3.3 and 1.3.4. Consequently, by way of example, in the event of failure to provide personal data, the Company may not be in a position to execute the Agreement, or to fulfill obligations imposed by law, or pursue its the legitimate interests.
1.5. The provision of personal data is instead purely optional for the purposes set out in articles 1.3.5 e 1.3.6; consequently, any failure to provide the consent will not prejudice the execution and performance of the Agreement.
2. Legal basis of the processing
2.1. The legal basis for processing personal data referred to in Article 1 is:
2.1.1. for the purposes referred to in Article 1.3.1, the Agreement;
2.1.2. for the purposes referred to in Article 1.3.2, the law provision applicable from time to time;
2.1.3. for the purposes referred to in Articles 1.3.3 and 1.3.4 and, the legitimate interest of the Company, for the processing of personal data in the context of extraordinary M&A transactions (including mergers, acquisitions, corporate restructuring), within the limits strictly necessary for the pursuit of such legitimate interest and on the basis of a suitable balance with the fundamental rights and freedoms of the Users;
2.1.4. for the purposes referred to in Articles 1.3.5 and 1.3.6, the consent of the Users (merely optional).
2.1.2. for the purposes referred to in Article 1.3.2, the law provision applicable from time to time;
2.1.3. for the purposes referred to in Articles 1.3.3 and 1.3.4 and, the legitimate interest of the Company, for the processing of personal data in the context of extraordinary M&A transactions (including mergers, acquisitions, corporate restructuring), within the limits strictly necessary for the pursuit of such legitimate interest and on the basis of a suitable balance with the fundamental rights and freedoms of the Users;
2.1.4. for the purposes referred to in Articles 1.3.5 and 1.3.6, the consent of the Users (merely optional).
3. Sharing of personal dataing of personal data
3.1. Processed personal data may be communicated to the subjects appointed by the Company as external data processors, in compliance with the provisions of the Regulation.
3.2. Personal data processed may also be disclosed to other companies supplying goods or services, in their capacity of external data processors or data controllers.
3.3. Processed personal data may also be disclosed to other subjects, independent data controllers (including public entities), if required by the law.
4. Cross-border (extra-EEA) data transfer
4.1. The processed personal data are stored on servers located within the EEA.
4.2. Without prejudice to Article 4.1, the Users acknowledge that, for certain specific operations, and upon their prior consent or upon other legal basis, their personal data may be processed outside the EEA. The transfer of Users’ personal data to subjects established outside the EEA will in any case be made through the implementation of suitable safeguards and organizational security measures, in accordance with the applicable laws. The Users are entitled to obtain a copy of personal data transferred outside the EEA and to receive information about the countries in which the data are stored, upon request to the data controller at the addresses referred to in Article 7 of this Privacy Notice.
5. Data retention
5.1. Processed personal data are stored for a period equal to the duration of the Agreement and for 10 years following its termination, without prejudice to cases in which the storage of such personal data for a longer period is required for any judicial dispute, request of competent authorities or in accordance with the applicable law provisions.
5.2. Upon expiry of the retention periods personal data will be or deleted, anonymized or aggregated.
6. Rights of the Users
6.1. In accordance with the Regulation, Users are granted with the following rights and faculties:
6.1.1. the right to be informed on the data processing purposes and modalities;
6.1.2. the right to access data pertaining to them;
6.1.3. the right to obtain a copy of the data, if the latter is stored in countries outside the European Union, as well as to obtain indication of the place where such data is stored or transferred;
6.1.4. the right to request the rectification, the updating or the integration of data;
6.1.5. the right to request the erasure or the anonymisation of data or the blocking of the data processing;
6.1.6. the right to object, in whole or in part, to any processing performed through automated decision-making processes, including profiling;
6.1.7. the right to withdraw their consent to the processing, where given, freely and at any time;
6.1.8. the right to data portability, i.e. the right to receive Data in a structured format, commonly used and readable by automatic devices, and the possibility to transmit said data to another controller freely and without hindrances;
6.1.9. the right to request the limitation of data processing;
6.1.10. the right to contact the Company data protection officer, if appointed;
6.1.11. the right to file a complaint with the personal data protection Supervisor.
6.1.2. the right to access data pertaining to them;
6.1.3. the right to obtain a copy of the data, if the latter is stored in countries outside the European Union, as well as to obtain indication of the place where such data is stored or transferred;
6.1.4. the right to request the rectification, the updating or the integration of data;
6.1.5. the right to request the erasure or the anonymisation of data or the blocking of the data processing;
6.1.6. the right to object, in whole or in part, to any processing performed through automated decision-making processes, including profiling;
6.1.7. the right to withdraw their consent to the processing, where given, freely and at any time;
6.1.8. the right to data portability, i.e. the right to receive Data in a structured format, commonly used and readable by automatic devices, and the possibility to transmit said data to another controller freely and without hindrances;
6.1.9. the right to request the limitation of data processing;
6.1.10. the right to contact the Company data protection officer, if appointed;
6.1.11. the right to file a complaint with the personal data protection Supervisor.
6.2. The Author may exercise the rights referred to in paragraphs 6.1.1 to 6.1.9 6.1.1 a 6.1.9 by sending a request to the data controller at the addresses referred to in Article 7 of this Privacy Notice.
7. Data controller
7.1. The data controller is HOUSE OF DISASTER Production & Entertainment with registered office in via Alberto da Giussano 18, 20145 - Milan, Italy. For any communication regarding this Privacy Notice please refer to the aforementioned address or to info@houseofdisaster.it.
8. Miscellaneous
8.1. The Company has the right to modify this Privacy Notice, also on the basis of the concrete modalities of implementation of the Regulation in each Member State (as well as in the light of any executive measures of the Regulation issued by the Data Protection Authorities).