The Controller of the processing carried out through the Site is Multiverse S.R.L., as defined above, reachable at the email address: info@multiversestudio.it. The Data Protection Officer (hereinafter, “DPO”) can be contacted at the following contact details: info@multiversestudio.it.

Among the Personal Data collected by this Application, independently or through third parties, there are: Cookies; Usage Data; various types of Data; email; first name; last name.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the Data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application. Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation. Users who have doubts about which Data is mandatory are encouraged to contact the Controller. Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy. The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Application.

Processing Methods:
The Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Controller, in some cases, other subjects involved in the organization of this Application (administrative, commercial, marketing, legal personnel, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) appointed also, if necessary, as Data Processors by the Controller, may have access to the Data. The updated list of Processors may always be requested from the Data Controller.

Place:
The Data are processed at the Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Controller. The User's Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to details on the processing of Personal Data.

Retention Period:
Unless otherwise indicated in this document, Personal Data are processed and stored for the time required by the purpose for which they were collected and may be stored for a longer period due to any legal obligations or based on the Users' consent.

The processing we intend to carry out, subject to your specific consent where necessary, has the following purposes:
• To allow the provision of the Services requested by you, namely:
• access to the reserved area of the Site;
• request for contact by Multiverse;
• concluding a contract;
• responding to requests for quotes via the appropriate form;
• responding to requests for assistance or information; b) The data provided may be processed, subject to explicit and specific consent, for direct sales purposes and/or for sending promotional and marketing communications, including sending newsletters and market research, through automated tools (sms, mms, email, push notifications, fax) and non-automated tools (paper mail, telephone with operator), as well as for the analysis of personal data, purchasing choices, and behavioral preferences on the Site, in order to better structure personalized communications and commercial proposals, to perform general analyses and, in general, for profiling activities.

The legal basis for the processing of personal data for the purposes referred to in section 4 (a) is Art. 6.1.b) of the Regulation as the processing is necessary for the provision of the Services or for the response to requests from the data subject. The provision of personal data for these purposes is optional, but any failure to provide it would entail the impossibility of activating the Services provided by the Site, responding to requests, or evaluating CVs. The purpose referred to in section 4 (c) represents a legitimate processing of personal data pursuant to Art. 6.1.c) of the Regulation. Once personal data has been provided, the processing is indeed necessary to fulfill a legal obligation to which Multiverse is subject. The data provided for the purposes referred to in section 4 (b) may be processed, subject to explicit and specific consent, for carrying out direct sales and/or for sending promotional and marketing communications, including sending newsletters and market research, through automated tools and non-automated tools, as well as for profiling activities. The legal basis for the processing of your data for these purposes is Art. 6, paragraph 1, letter a) of the Regulation. Commercial profiling and direct marketing processing are optional and depend on the user's free choice; therefore, failure to provide consent for these purposes will not affect the use of the services. For processing carried out for the purpose of direct sending of its own advertising material or direct sales or for carrying out its own market research or commercial communications in relation to products or services of the Controller similar to those already purchased, Multiverse may use, without the consent of the data subject, the email and paper mail addresses pursuant to and within the limits permitted by Art. 130, paragraph 4 of the Code and by the provision of the Authority for the protection of personal data of June 19, 2008. The legal basis for the processing of your data for this purpose is Art. 6, paragraph 1, letter f) of the Regulation (Legitimate Interest). The data subject has the possibility to object to such processing at any time, initially or on the occasion of subsequent communications, easily and free of charge, also by writing to the email address: info@multiversestudio.it, as well as to obtain immediate confirmation confirming the interruption of such processing (Art. 15 of the Regulation). Where necessary, specific summary information on the processing of personal data and requests for consent will be progressively reported or displayed on the pages of the Site prepared for particular services.

• Your personal data may be shared, for the purposes referred to in section 4 above, with:
  • Subjects typically acting as Data Processors pursuant to Art. 28 of the Regulation, namely:
  • persons, companies, or professional firms providing assistance and consultancy to the Controller in accounting, administrative, legal, tax, financial, and debt collection matters relating to the provision of the Services;
  • subjects with whom it is necessary to interact for the provision of the Services (for example, hosting providers);
  • or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks);
  • Subjects, bodies, or authorities, independent data controllers, to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities;
  • Persons authorized by Multiverse to process Personal Data pursuant to Art. 29 of the Regulation necessary to carry out activities strictly related to the provision of the Services, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (e.g., Multiverse employees);
  • Subject to your specific consent, third parties with whom the Controller has entered into commercial agreements and/or conventions, belonging to the following categories: professionals and communication and marketing companies; professionals and companies operating in the legal, tax/fiscal, financial, accounting/administrative, insurance, training fields; professionals and companies in the health, medical/pharmaceutical sector and leisure service providers, for their marketing and communication purposes.

Regarding the possible transfer of Data to Third Countries, the Controller informs that the processing will take place according to one of the methods permitted by the law in force, such as for example the consent of the data subject, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free movement of data or operating in Countries considered safe by the European Commission. More information is available, upon request, from the Controller at the contacts indicated above.

Personal data processed for the purposes referred to in section 4 (a) will be kept for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and limitation of storage pursuant to Art. 5.1.e) of the Regulation. In any case, Multiverse will process personal data for the time necessary for contractual and legal obligations. More information regarding the data retention period and the criteria used to determine this period can be requested by writing to the Controller at the email address info@multiversestudio.it.

Pursuant to Articles 15 and following of the Regulation, you have the right to ask at any time for access to your Personal Data, the rectification or erasure of the same, the limitation of processing in the cases provided for by Art. 18 of the Regulation, to obtain in a structured format, commonly used and readable by automatic device, the data concerning you, in the cases provided for by Art. 20 of the Regulation. At any time, you can revoke pursuant to Art. 7 of the Regulation the consent given; propose a complaint to the competent supervisory authority pursuant to Article 77 of the GDPR (Garante per la Protezione dei Dati Personali) pursuant to Art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force. You can formulate a request for opposition to the processing of your data pursuant to Article 21 of the GDPR in which to provide evidence of the reasons justifying the opposition: the Controller reserves the right to evaluate the request, which would not be accepted in the event of the existence of compelling legitimate grounds to proceed with the processing that prevail over your interests, rights, and freedoms.
Requests should be addressed in writing to the Controller at the email address info@multiversestudio.it.