Privacy Policy

The purpose of this document is to inform the natural person (hereinafter “Data Subject”) regarding the processing of their personal data (hereinafter “Personal Data”) collected by the data controller, Forge Play Studio sl, VAT number: B26678193, e-mail address info@forgeplay.it, through the application. Modifications and updates will be binding as soon as they are published on the Application. In case of non-acceptance of the changes made to this Privacy Policy, the Data Subject is required to cease using this Application and may request the Data Controller to delete their Personal Data.

Categories of Personal Data Processed

The Data Controller processes the following types of Personal Data provided voluntarily by the Data Subject:

  • Contact data: name, surname, address, e-mail, telephone, images, authentication credentials, any additional information sent by the Data Subject, etc.

The Data Controller processes the following types of Personal Data collected automatically:

  • Navigation and application usage data: such as, for example, pages visited, number of clicks, actions performed, duration of sessions, etc.

Failure by the Data Subject to provide Personal Data for which there is a legal or contractual obligation, or if they constitute a necessary requirement for the conclusion of the contract with the Data Controller, will result in the Data Controller's inability to establish or continue the relationship with the Data Subject. The Data Subject who communicates Personal Data of third parties to the Data Controller is directly and exclusively responsible for their origin, collection, processing, communication, or dissemination.

Cookies and Similar Technologies

Cookies are not used for the transmission of information of a personal nature, nor are persistent cookies of any kind used, nor systems for tracking Data Subjects. Therefore, the Personal Data of Data Subjects are not acquired by the Application through these technologies. Technical session cookies (non-persistent) are used strictly limited to what is necessary for the safe and efficient navigation of the Application.

The processing of Personal Data is necessary:

  • For the performance of the contract with the Data Subject, specifically:
    • fulfillment of any obligation deriving from the pre-contractual or contractual relationship with the Data Subject
  • For a legal obligation, specifically:
    • fulfillment of any obligation provided for by current regulations, laws, and regulations, in particular in tax and fiscal matters

The Personal Data of the Data Subject may also be used by the Data Controller to protect themselves in legal proceedings before the competent courts.

Processing Methods and Recipients of Personal Data

The processing of Personal Data is carried out using paper and IT tools with organizational methods and logics strictly related to the purposes indicated and through the adoption of appropriate security measures. Personal Data is processed exclusively by:

  • Persons authorized by the Data Controller to process Personal Data who have committed to confidentiality or have an appropriate legal obligation of confidentiality;
  • Entities that operate independently as distinct data controllers or entities designated as data processors by the Data Controller in order to perform all processing activities necessary to pursue the purposes stated in this policy (e.g., commercial partners, consultants, IT companies, service providers, hosting providers);
  • Entities or authorities to whom it is mandatory to communicate Personal Data by law or by order of the authorities.

The entities listed above are required to use appropriate safeguards to protect Personal Data and may only access those necessary to perform their assigned tasks. Personal Data will not be indiscriminately disseminated in any way.

Location

Personal Data will not be transferred outside the territory of the European Economic Area (EEA).

Retention Period of Personal Data

Personal Data will be kept for the period of time necessary to fulfill the purposes for which they were collected, in particular:

  • For purposes relating to the execution of the contract between the Data Controller and the Data Subject, they will be kept for the entire duration of the contractual relationship and, after termination, for the ordinary statutory limitation period of 10 years. In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of applicability of the appeal actions;
  • For purposes relating to the legitimate interest of the Data Controller, they will be kept until the fulfillment of such interest;
  • For the fulfillment of a legal obligation, by order of an authority, and for legal protection, they will be kept in compliance with the timelines provided by said obligations, regulations, and in any case until the expiration of the limitation period provided by current regulations;
  • For purposes based on the consent of the Data Subject, they will be kept until the revocation of consent.

At the end of the retention period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject.

Rights of the Data Subject

Data Subjects can exercise certain rights with reference to the Personal Data processed by the Data Controller. In particular, the Data Subject has the right to:

  • Be informed about the processing of their Personal Data;
  • Revoke consent at any time;
  • Limit the processing of their Personal Data;
  • Object to the processing of their Personal Data;
  • Access their Personal Data;
  • Verify and request the rectification of their Personal Data;
  • Obtain the restriction of the processing of their Personal Data;
  • Obtain the deletion of their Personal Data;
  • Transfer their Personal Data to another controller;
  • Lodge a complaint with the supervisory authority for the protection of their Personal Data and/or take legal action.

To exercise their rights, Data Subjects can send a request to the following e-mail address: info@forgeplay.it. Requests will be taken over by the Data Controller immediately and processed as soon as possible, in any case within 30 days.

Last updated: 05/06/2023