This policy describes (i) how to manage the website www.2812.agency (hereafter, the "Site") and the processing of the personal data of users who consult it, as well as (ii) the processing of personal data of those who, as users or in any other capacity, engage in relationships or contacts with Twenty-Eight Twelve Media Web LTD or otherwise provide Twenty-Eight Twelve Media Web LTD with their personal data , for the purposes and further terms and conditions of this policy, or in relation to which Twenty-Eight Twelve Media Web LTD carries out personal data processing operations (hereafter, the "Data Subjects").
This information is made pursuant to art. 13 of Regulation (EU) No 2016/679 (hereafter "GDPR").
1. holder of the treatment
The Data Controller is Twenty-Eight Twelve Media Web LTD (hereafter, the "Owner"), with registered office in Tyldesley, Manchester (United Kingdom), 33 Dewberry Close,M29 8RD, tel. + 44 077 0671 72 92, email email@example.com
The updated list of any data controllers is available at the Owner's office. Any reference to Twenty-Eight Twelve Media Web LTD or the Data Controller is therefore automatically made to such subjects, if necessary.
2. Place and method of data processing
The processing connected to the website's web services, as well as the processing that is carried out by Twenty-Eight Twelve Media Web LTD in any other capacity pursuant to this information, takes place at the Owner's headquarters and is carried out by internal staff, appropriately appointed, in writing, in charge of the processing, in accordance with the GDPR, and/or by staff outside the Owner's organization, subject to appropriate appointment, always in writing, as data controller, pursuant to art. 28 of the GDPR.
All personal data are processed both in paper format and, mainly, electronically. The same will be stored in a form that allows the identification of the user only for the time strictly necessary to achieve the purposes for which the data was originally collected and, in any case, within the legal limits. Specific security measures are observed to prevent data loss, unlawful or incorrect uses and unauthorized access, in accordance with the GDPR.
In order to ensure that personal data is always accurate, up-to-date, complete and relevant, we invite interested parties to report any changes made to the following email address firstname.lastname@example.org
3. Purpose of treatment
Personal data are processed by the Data Controller for the following purposes:
a) within the limits and for the sole purposes of providing the services accessible through the Site, as well as to allow interested parties to know and deepen the activities and initiatives of the Owner;
b) manage and process, in relation to the above point, the questions and requests for contact with Twenty-Eight Twelve Media Web LTD and the subjects attributable to the Owner's organization formulated by the Interested Parties.
The performance of the activities referred to in (a) and (b) listed above does not require the consent of the Data Subject, since they are services or services performed, in most cases, in execution of requests made directly by the Interested Party pursuant to art. 6, c. 1,(b) of the GDPR.
4. Provision of data and consequences in case of non-provision
The provision of personal data for the above purposes is optional and their failure to provide it will result, as the only consequence, in the impossibility for the Data Controller to manage and process the requests of the Data Subject.
5. Types of data processed
the. Browsing data
The it systems and software procedures responsible for the operation of this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected to be associated with identified subjects but which, by their very nature, could, through processing and associations with data held by third parties, allow to identify the users of the Site.
This data category includes the IP addresses or domain names of the computers used by users connecting to the Site, the Uniform Resource Identifier (URI) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful). , error, etc.) and other parameters related to the user's operating system and IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and for controlling its correct functioning and is erased immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.
Ii. Data voluntarily provided by interested parties or collected from third parties
The optional, explicit and voluntary sending of an e-mail address, as well as the related message, to the contact details indicated on the Site, as well as the sending of messages through the published collection forms, involves the subsequent acquisition of the sender's address and any other personal data entered by the Interested Parties and necessary to respond to their requests.
Specific summary information may be reported or displayed, from time to time and where strictly necessary, on the pages of the Site prepared for particular services on request.
In addition to the above, any further personal data (such as, but not limited to, personal data, contact details, such as telephone number and e-mail address, etc.) provided to the Data Controller, or otherwise collected by the Data Controller from third parties, will be treated by the Data Controller in accordance with this information and within the limits established by the GDPR.
6. Recipients and target groups
No data will be disseminated or transferred to third parties unless with the prior consent of the Data Subject. Should the communication to third parties suppliers or consultants of Twenty-Eight Twelve Media Web LTD be necessary for organizational, administrative or support needs of the services provided, it will be the responsibility of the Data Controller to appoint the latter as data controllers pursuant to the GDPR.
The complete and updated list of these subjects is available at the Owner's office and can be requested at any time by the Interested Parties through a request to be sent to the email address email@example.com
It is understood that the personal data of the Data Subjects may be freely communicated to third parties, such as public authorities, whenever this is permitted by law or requested by an order or measure of a public authority.
7. Transfer of data to third countries
As part of the purposes indicated in this information, the personal data of the Data Subjects will be processed by the Data Controller within the territory of the European Union and will not be disclosed.
8. Retention Period
Personal data will be stored for as long as is strictly necessary to achieve the purposes for which they are collected and subjected to processing. Once the purpose of the processing has been exhausted, i.e. in case of exercise of the right of opposition to the processing or withdrawal of the consent given, the Data Controller will still be entitled to further store personal data in whole or in part, for the purposes permitted by the GDPR (such as the need to assert a right in court). As a rule, personal data will be stored for 2 years from their registration, without prejudice to the legitimate interest of the Data Controller, in accordance with the GDPR, as well as any longer period that is provided in the future in cases governed from time to time by the applicable legislation or the related authorities.
9. Links to other websites
The Data Controller does not control or have the opportunity to supervise either the content or the policies for processing personal data, websites and third-party services accessible through the links contained within the Site. Twenty-Eight Twelve Media Web LTD, therefore, may not under any circumstances be held responsible for the processing carried out through or in connection with such third-party sites.
Users of the Site are therefore invited to pay the utmost attention to this, taking into account the conditions of use and privacy policies published on the portals visited.
10. Rights of data subjects
10.1 Access, cancellation, throttling and portability rights
The persons concerned are granted the rights referred to in Art. 15 to 20 of the GDPR. By way of example, each Interested Party may:
a) obtain confirmation that personal data concerning him is being processing or not;
b) if a processing is in progress, obtain access to personal data and processing information, as well as request a copy of personal data;
c) obtain the rectification of inaccurate personal data and the integration of incomplete personal data;
(d) obtain, if one of the conditions laid down in Art. 17 of the GDPR, the deletion of personal data concerning it;
(c) obtain, in the cases provided for in Art. 18 of the GDPR, the limitation of treatment;
f) receive personal data concerning him in a structured format, common use and readable by automatic device and request their transmission to another data controller, if technically feasible.
10.2 Right of objection
Each Data Subject has the right to object at any time to the processing of his personal data carried out for the pursuit of a legitimate interest of the Data Controller. In the event of an objection, your personal data will no longer be subject to processing, provided that there are no legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the Data Subject, or for the establishment, exercise or defense of a right in court.
10.3 Right to withdraw consent
In the event that consent is required for the processing of personal data, each Data Subject may also revoke at any time the consent already given, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal. Consent can be revoked by writing an email to firstname.lastname@example.org.
With reference to the processing of personal data for the purpose referred to in art 6(c), the Data Controller may not request the consent of the Data Subject, provided that the latter is adequately informed and does not refuse such use, initially or on the occasion of subsequent communications. The Data Subject, at the time of collection and on the occasion of the sending of any communication made for the purposes referred to in this paragraph, is informed of the possibility of opposing the processing at any time, in an easy and free way.
10.5 Right to complain to the Guarantor
Each data subject may also lodge a complaint with the Data Protection Supervisor if they believe that the rights they have acquired under the GDPR have been violated.