UGC Privacy Notice Notice pursuant to Articles 13 and 14 of EU Regulation 2016/679 on the protection of personal data (GDPR)
User Generated Contents
Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (hereinafter referred to as "GDPR"), RightMeet Europe S.p.A. (hereinafter referred to as "Quickdate" or "Data Controller"), with its registered office at Via della Cooperazione 21, 40129 Bologna, Italy, acting as the personal data controller, hereby informs you that the personal data of certain individuals, including your employees, legal representatives, and associates, will be processed by RightMeet itself through manual or electronic means, including computers or telematic systems, strictly for the purposes outlined below and ensuring the safety and confidentiality of the data.
Identity and Contact Details of the Data Controller and the Data Protection Officer
The Data Controller is RightMeet Europe S.p.A., represented by its legal representative, with registered office at Via della Cooperazione 21, 40129 Bologna.
The Data Controller has appointed a Data Protection Officer whom you may contact to exercise your rights or obtain information regarding this Notice by writing to RightMeet at Via della Cooperazione 21, 40129 Bologna, or by sending an email to info@rightmeet.co.ke
Categories of Data Obtained from Subjects other than the Data Subject
For the purposes described in the section "Purposes and Lawfulness of Data Processing," RightMeet processes personal data categories obtained directly from the Data Subject (Article 13) or from Users who authorize the Contents (Article 14).
Origin of Personal Data
Personal data is provided directly by the Data Subject (Article 13) or by Users who authorize the Contents (Article 14).
Purposes and Lawfulness of Data Processing
Personal data is processed by the Data Controller pursuant to Article 6 of the GDPR.
The specific purposes of data processing and their legal basis are listed below:
Purpose of Data Processing: User Generated Contents Legal Basis of Data Processing: Performance of a contract or performance of pre-contractual measures (Article 6(1)(b) of GDPR)
Nature of Data Provision and Consequences of Refusal
Data provision is obligatory for the fulfillment of contractual obligations. Therefore, any refusal to provide the obligatory data will result in the inability to pursue the purposes of data processing outlined in this Notice and to conclude the contract.
Categories of Recipients of the Personal Data
The personal data may be processed by Bazaarvoice Inc. as a Data Processor specifically appointed by the Data Controller, pursuant to Article 28 of the GDPR.
The data will also be processed by individuals specifically authorized by the Data Controller pursuant to the GDPR, such as RightMeet employees following specific instructions given by the Data Controller.
The personal data processed by RightMeet may be disclosed through publication on company social network pages (e.g., Instagram, Facebook, Twitter, YouTube) and websites.
Transfers to Countries Outside the EU
For the purposes of data processing described above, personal data may be transferred to the recipients mentioned above in Italy or abroad, including outside the European Union (EU).
The company providing the User Generated Contents service is based in the United States and stores data on Amazon Web Services. The Data Controller provides adequate guarantees (pursuant to Article 46 of the GDPR) through the adoption of standard contractual clauses relating to data protection adopted by the European Commission (Standard Contractual Clauses) with the aforementioned recipients of personal data, who process data both as Data Controllers and Data Processors. These guarantees ensure compliance with data protection requirements and data subject rights adequate for processing within the Union, including the availability of data subject rights, including administrative or judicial remedies and claims for compensation, in the Union or in a third country. To obtain a copy of your data, information about the adequate guarantees, and the location where the data you provided have been made available, you can contact the Data Controller at the following email address: info@RightMeet.co.ke
Retention Period of Personal Data
Personal data processed by RightMeet will be retained for the duration necessary for the performance of the contractual relationship. At the end of this period, the personal data will be anonymized or deleted, except in cases where retention is necessary for other purposes expressly required by law.
The details concerning the duration of the data retention period for the purposes outlined above, as well as the criteria used for determining such periods, are listed below:
Purpose: User Generated Contents Category of Personal Data: Identifiers (email address, IP Address, BV unique identifier, device fingerprint). Additionally, in relation to Sampling only: name, postal address, telephone number. Content data: Ratings given, review content (text/photo/video), questions, answers, nickname. Demographic information: location, age range, gender, other client-specified demographics. Behavioral data: including product interests, website browsing information, transaction data (e.g., online purchases, website registrations). Required Limitation Period Before Deletion: For the entire duration of the contract.
Automated Decision-Making
In pursuit of the purposes listed above, no decision will be made based solely on automated processing that may cause any legal consequences for the Data Subject or similarly have a significant impact on their person.
Rights of the Data Subject
Pursuant to the GDPR, the Data Subject has the following rights that may be exercised towards RightMeet:
a) The right to obtain from the Data Controller confirmation of whether or not personal data concerning the Data Subject is being processed and, if so, to obtain access to their personal data and any information provided for in Article 15, specifically those concerning the purposes of data processing, the categories of personal data in question, or the categories of recipients to whom the personal data has been or will be communicated, the retention period, etc.; b) The right to obtain the rectification of any errors in the personal data concerning the Data Subject, as well as the integration of any data considered incomplete for the purposes of data processing (Article 16); c) The right to obtain the deletion ("right to be forgotten") where one of the grounds provided for in Article 17 applies; d) The right to restrict data processing where one of the cases provided for by Article 18 applies; e) The right to data portability pursuant to Article 20; f) The right to object to data processing pursuant to Article 21;
These rights may be exercised by contacting the Data Protection Officer (DPO) through registered mail with return receipt sent to the following address: Via della Cooperazione 21, 40129 Bologna, or by sending an email to info@rightmeet.co.ke
The Data Subject may also inform the DPO of any circumstances or events that may potentially cause a violation of their personal data (i.e., any violation of security that may accidentally or unlawfully cause the destruction, loss, alteration, unauthorized disclosure, or access to the data), for the purpose of allowing an immediate assessment and, if necessary, taking preventative measures.
Please note that the Data Subject has the right to lodge a complaint with the Data Protection Authority or any other supervisory authority pursuant to Article 13(2)(d) of the GDPR.
© 2024 RightMeet