Privacy policy contact form
Information on the processing of personal data related to the completion of the contact form
This notice complements the website’s navigation policy in order to illustrate how the Data Controller will specifically process the data entered in this form: you are therefore invited to read the navigation notice here.
Identity and contact details of the data controller
Metaverso s.r.l., hereinafter also referred to as “Metaverso” or “Data Controller” with registered office in via Strada Muson, n. 2/C – 31011 – Asolo (TV), and can be contacted at the e-mail address [email protected], at the PEC [email protected] or at the telephone number +39 0423 951655.
Purpose and legal basis
A. Handling of requests for information: personal data are processed for all needs related to the processing of requests for information and/or estimates.
B. Marketing: personal data are processed to carry out opinion and approval surveys, send commercial communications containing information on products or services, as well as promotions or invitations to events in which the Controller will participate.
C. Defence purposes: the Controller may need to process personal data for the management of extrajudicial or judicial disputes and litigation.
| Purposes | Legal basis (common data) | Legal basis (special data) |
|---|---|---|
| A. | Execution of pre-contractual measures; Legitimate interest of the Controller in responding to requests received. |
/ |
| B. | Consent. | / |
| C. | Legitimate interest of the Controller in ascertaining, exercising or defending a right. | Establishing, exercising or defending a right. |
Conservation period
| Purposes | Storage time |
|---|---|
| A. | 36 months from the last expression of interest by the potential client. |
| B. | 24 months from the granting of consent. |
| C. | 10 years from the final resolution of the dispute. |
Nature of conferment and consequences in the event of refusal
| Purposes | Nature | Consequences |
|---|---|---|
| A. | Necessary | Inability to receive the requested information. |
| B. | Optional | Inability to receive commercial/promotional communications. |
| C. | Necessary | Inability to handle litigation. |
Scope of communication
Data are processed by authorised internal staff for specific tasks and are communicated externally according to the following rules.
| Purposes | Categories of external addressees. |
|---|---|
| A. | Companies belonging to the same business group, companies offering hosting/management services for technology platforms. |
| B. | Companies belonging to the same business group, companies offering hosting/management services for technology platforms. |
| C. | Law firms; debt collection or assignment companies; judicial authorities. |
Since the data are also processed by means of IT tools, they may also be visible to persons servicing/maintaining such systems.
Data transfer to a third country or international organisation
The Controller transfers personal data to the countries and under the conditions summarised below:
| Purposes | Country | Condition of lawfulness of the transfer |
|---|---|---|
| A. | The technology partner Google operates servers all over the world, so the data may be processed on servers located outside the country where the data subject is located. | Adequacy Decisions, Data Privacy Framework, Model Contractual Clauses. |
| B. | United States of America | Data Privacy Framework. |
| C. |
Rights of Interested Parties
The person to whom the personal data refer has the following rights:
Access: it is possible to know whether one’s personal data is being processed and, if so, to obtain a copy of it.
Rectification: you can request that your personal data be updated, corrected (if inaccurate) and incomplete data be supplemented.
Deletion: it is possible to obtain the deletion of one’s personal data under certain conditions (for more information contact the Data Controller).
Limitation: it is possible to request that data be flagged, so as to limit its processing in the future, under certain conditions (for more information contact the Data Controller).
Objection: you may object to the processing of your personal data, on grounds relating to your particular situation, where the processing is based on a legitimate interest or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller; you may also object to the processing of personal data for direct marketing purposes.
Portability: it is possible to receive in a structured format the personal data provided to the Controller and to transmit them to another controller if the processing is based on consent or contract and is carried out by automated means.
Withdrawal of consent: it is possible to withdraw consent for the purposes for which it was requested, without prejudice to the lawfulness of the processing carried out up to that point.
The concrete rights that can be exercised with respect to the processing activities performed are:
| Purposes | Exercisable right | ||||||
|---|---|---|---|---|---|---|---|
| Accessed | Rectification | Deletion | Limitation | Opposition | Portability | Revocation of consent | |
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | X | |
| C. | X | X | X | X | X | ||
In order to exercise the above rights, you may use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and forward it to the following address: [email protected]. The data subject may request from the same address to obtain further details in relation to the above-mentioned information (e.g. legitimate interest balancing test or list of data controllers).
It is possible to lodge a complaint with a supervisory authority: for Italy, Autorità Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).