Policy Privacy
Pursuant to Legislative Decree no. 196 of 30 June 2003 (“Personal Data Protection Code”) and European Regulation 27/4/2016 no. 679, the processing of your personal data will be based on the principles of correctness, lawfulness, minimisation, proportionality, necessity, transparency and protection of the confidentiality and rights of each user. This privacy policy applies exclusively to the online activities of this web app and is valid for visitors/users of the web app. It does not apply to information collected through channels other than this web app. The purpose of the privacy policy is to provide maximum transparency regarding the information the web app collects and the use of that information. Providing your personal data by filling in the forms available on the web app (e.g. in the “user registration” or “contact us” section) allows us to fulfil your request and to be able to respond to your requests in the best possible way.
Should you not wish to consent to the processing of your data for the above-mentioned purposes, we will not be able to process your request and allow you to register for the web app and subsequently request a subscription to use the services. Unless otherwise specified, all data requested by the web app are mandatory and are marked with an asterisk. Among the personal data collected in the “contacts” section, either independently or through third parties, are: – For companies: VAT number, SDI, Company name, E-mail, Tax code, Region, Pec. – For private individuals: Name, Surname, Tax Code, E-mail. It is also possible to write a message for service information or assistance and, in this case, the first name, last name, e-mail address and message are mandatory. The content of the message entered in the contact form and the correspondence with the user will be stored by the Data Controller in accordance with current legislation pursuant to art. 2220 of the Italian Civil Code, i.e. for 10 years. This web app processes user data in a lawful and correct manner, taking appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. The processing is carried out by means of computer and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the owner, in some cases, categories of persons involved in the organisation and maintenance of the web app (administrative, sales, marketing, legal, system administrators) or external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) may have access to the data.
Rights of data subjects
At any time, as a data subject, you may exercise your rights vis-à-vis the data controller pursuant to Article 7 of Legislative Decree No. 196 of 30 June 2003 and Article 15 of Reg. Eur. 679/2016, which we summarise below:
1. The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, even if they have not yet been recorded, and communication of such data in intelligible form. 2. The data subject shall have the right to be informed: – the origin of the personal data; – the purposes and methods of processing; – the logic applied in the event of processing carried out with the aid of electronic instruments; – the identification details of the data controller and of any data processors; – the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in or outside the territory of the State, data processors or persons in charge of processing.
3. The interested party has the right to obtain – updating, rectification or, where interested therein, integration of the data; – deletion, transformation into anonymous form or blocking of data processed in breach of the law, including data whose retention is not necessary for the purposes for which the data were collected or subsequently processed; – certification to the effect that the operations as per point 3) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. The data subject has the right to object, in whole or in part – on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection, without prejudice to the possible consequences in terms of non-performance of the service requested; – to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research – of commercial communication. The above rights shall be exercised by making a request to the data controller or processor without formalities, including through an agent, which shall be answered without delay.
Data Deletion
The deletion requested by the data subject of the data or data uploaded to the web app can be carried out in the following ways: 1. Personal data: the complete deletion of the data entered during registration and the deletion of the account from the Database and third party services in use by BlockChainRE may be arranged.
2. Uploaded data: the deletion of notarised data and created NFTs from the web app’s database may be ordered; this deletion does not include the possibility of deleting blockchain data and files uploaded to the IPFS distributed storage. Notarised data on the blockchain are anonymous, in the form of hashes, and by technological nature can no longer be removed from the blockchain once entered.
As far as IPFS is concerned, files are uploaded to this storage by encrypting their address (or CID), using the keys from the user’s wallet, and only the user in possession of the decrypted address can view these files in the clear on IPFS; even in this case, the deletion of data from Blockchain and IPFS storage is not possible by technological nature, however, by no longer retrieving or searching for the file on the IPFS network, the file itself is forgotten and will in fact no longer be detectable.
Data controller
The data controller in accordance with the laws in force is BlockChain.RE s.r.l., with registered office in Via Carnia, 19, 20045 Lainate (MI), P.IVA 12434700964, E-mail: [email protected]
Data processor
The web hosts used and processing data on behalf of BLockChainRE s.r.l. are appointed as data controllers, are located in the European Economic Area and act in accordance with European regulations. Third parties that process data on behalf of the Data Controller are appointed as data processors.
Place of data processing
Treatment related to the web services offered by this web app, placed “in hosting” at Data Center located within the European Union, are carried out at the headquarters of the Company owner of the treatment and are only handled by employees, collaborators or partners of BlockChainRE s.r.l. in charge of treatment, or by any persons in charge of occasional maintenance operations. No data from the web service is communicated or disseminated. The personal data provided by users who access the service are used only to perform the service itself or the service requested and are communicated to third parties only where this is necessary for that purpose.
Retention period and termination of processing
The Data are processed and stored for the time required by the purposes for which they were collected and for purposes related to the execution of a contract between the data controller and the User and will be held until the execution of such contract is completed and, in any case, for a period of not less than 10 years pursuant to Article 2220 of the Italian Civil Code. In the event of termination of processing for any reason, pursuant to Art. 16 of Legislative Decree 196/03 and Art. 17 of Reg. Eur. 679/20016, your data will be: – destroyed, subject to the limits determined by the nature of the data and the state of technology, as indicated in the paragraph “Data deletion”, once the storage obligations imposed by Article 2220 of the Civil Code, Articles 19 and 22 of Presidential Decree no. 600/1973 or other specific regulations have expired;
– retained for exclusively personal purposes and not intended for systematic communication or dissemination; – retained or transferred to another data controller, for historical, statistical purposes, in accordance with the law, regulations, Community legislation and the codes of ethics and good conduct signed pursuant to Articles 12 of Legislative Decree 196/2003 and 40 of the Eur. 679/2016.
Log files
The web app makes use of log files. Information collected in an automated manner during user visits is therefore stored. The information collected includes the following – Internet Protocol (IP) address; – browser type and parameters of the device used to connect to the web app; – name of the Internet Service Provider (ISP); – date and time of visit; – visitor’s web page of origin (referral) and exit; – number of clicks. The aforementioned information is processed automatically and collected in an exclusively aggregate form in order to obtain statistical information on the use of the services (most visited pages, number of visitors per time slot, etc.) and to verify the correct functioning of the web app, and for security reasons, in accordance with the laws in force on the subject, in order to block attempts to damage the web app itself or other users, or in any case harmful or criminal activities.
This data is never used for user identification or profiling, but only for the purpose of protecting the web app and its users (as of 25 May 2018, this information is processed according to the legitimate interests of the owner). The data collected by the web app during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the specified activities. In any case, the data collected by the web app will never be provided to third parties, for any reason whatsoever, unless it is a legitimate request by a judicial authority and only in the cases provided for by law.
This information is updated to February 2023
