Pursuant to Article 13 of Regulation (EU) 2016/679, we hereby inform you that your personal data will be processed as described below.
The Data Controller is FG91 S.R.L. (hereinafter referred to as "Data Controller") with registered office in Via Giuseppe Sirtori n. 35 - 20017 Rho (MI), Tel. ***********, E-mail: firstname.lastname@example.org.
Personal data may be processed for the following purposes: (a) to enable the creation of the account and/or to be able to join the subscription; (b) to take full advantage of the Transmission Service (upon subscription) by sharing Contents publicly on the Fastream platform, making it accessible to third parties through search engines.
Personal data processing for account registration and/or subscription is necessary for the execution of the contract. Failure to provide data will make it impossible to establish the contractual relationship. Data processing for Contents sharing is based on consent. If consent is not given, the Contents cannot be shared.
Contact data, identity data, authentication data (username and password), payment data, location data (GPS, IP address, data from the device's sensors, information about what is nearby the device, e.g. Wi-Fi access points and mobile phone signal towers, as well as Bluetooth-enabled devices) and personal data in user’s shared Contents (image, name, voice, etc.).
Personal data concerning completed orders are stored by Data Controller for a period of 10 years after termination of the relationship.
Personal data may be communicated to Data Controller internal or external persons, such as: - consultants, professionals, and service providers (who, if necessary, may have been appointed as data processors or sub-processors) which the Data Controller will use solely for the purposes described above; - Data Controller employees and/or collaborators, in their capacity as authorized persons who have been given specific instructions on the security and proper use of personal data; - authorities, public administrations, and any other entities for which the legislation in force from time to time imposes an obligation to communicate.
Personal data in user’s shared Contents, including name and profile picture data if the user interacts by commenting on Contents shared by third parties, may be disclosed (subject to consent).
Data Controller undertakes to protect confidentiality by processing the personal data provided in compliance with law provisions and in order to guarantee the security, accuracy, updating and relevance of the personal data processed with respect to the stated purposes. Each processing may be carried out either manually or by automated means capable of storing, processing and transmitting personal data; it shall be carried out by technical and organizational measures means that are appropriate, insofar as reasonably necessary and according to the state of the art, to ensure, inter alia, systems and services security, confidentiality, integrity, availability and resilience, avoiding the risk of loss, destruction, unauthorized access or disclosure or any other unlawful use; moreover, it shall be carried out by reasonable measures to ensure the timely deletion or rectification of personal data that are inaccurate in relation to the purposes for which they are processed. The data processed will not be profiled.
Personal data will be processed within the territory of the European Union. In the event that, for technical and/or operational reasons, it becomes necessary to make use of persons or entities located outside the European Union, personal data transfer, limited to the performance of specific processing activities, will be regulated in accordance with the law.
Data subjects’ rights have the right to request at any time to the Data Controller, through the contact details indicated above, access to their personal data, to rectify, erase or limit the processing of their data or to object to their processing, as well as the right to data portability. They may also withdraw their consent to the processing at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal. Data subjects also have the right to permanently delete their account. Finally, data subjects have the right to submit a complaint before the Data Protection Authority.