1. Data Controller
MailUp S.p.A. with registered office in Viale F. Restelli 1, 20124 Milan (Italy) (the “Company”
or the “Controller”
) is ensuring compliance with the rules on personal data processing by providing the following information on the processing of data that is received or in any case collected while browsing this site.
2. Processed data, purpose and legal grounds for processing
Data generated by accessing the site
The information systems and the software used for this site acquire, during their normal use, certain personal data which is implicitly transferred while using Internet communication protocols.
Such data (such as, for example, domain names, IP addresses, operating system used, type of device and browser used in the connection) is not coupled with any additional personal information and is used for: i) retrieving anonymous statistical information on the use of the site; (ii) managing control needs of the methods used for site browsing; and iii) ascertaining liability in the case of cybercrime.
The legal ground for processing data is to render the site’s features functional following the user’s access.
Data voluntarily provided by the user
The personal data provided by the user through the form are collected and processed for the following:
- Carrying out reporting activities with the client based on contractual agreements. In the case of trial periods of the services offered by MailUp, the contact data could be used to directly survey the user’s experience of those services after the trial period has lapsed;
administrative purposes and performing obligations under the law, for example, accounting, tax, or adhering to court orders;
- Having received specific consent, sending newsletters and marketing materials via email, periodically;
- Having received specific consent, receiving updates on our activities and new postings on our blog;
- Having received specific consent, receiving promotional notices on event invites, training, webinars, special promotions or participating in market research and analysis;
- In the case of curriculum vitae, exclusively for the selection process.
The legal ground for processing data is the execution of a contract to which the data subject is a party or the execution of precontractual measures adopted upon requests of the same. In the cases expressly stated, the legal ground for processing data is the consent freely given by the data subject.
Data collected through the MailUp platform
For further detailed information, we hereby specify that in the notices sent, MailUp uses its MailUp Platform which, through statistical data collection (for example, web beacons), allows us to check whether a message was viewed, count the number of clicks on hyperlinks contained within the email, record the IP address or the type of browser used to open the email, and check similar details. The collection of such data is necessary for the use of the platform and constitutes a substantial part of the site’s functionality to send messages.
The legal ground for processing data is the execution of a contract to which the data subject is a party.
3. Nature of data provision
Aside from what is specified for browsing data and for data collected through the MailUp Platform, the provision of data is:
Optional, with regard to the purposes under a), b) and f) but any refusal shall make it impossible for MailUp to perform its undertakings pursuant to the contract obligations;
Optional, with regard to the purposes under c), d) and e) and their use is conditional on having obtained a specific consent. Any refusal shall make it impossible for MailUp to send any newsletters or advertising materials or invites to MailUp’s events and initiatives.
4. Processing methods and length of storage
The data collected shall be processed using electronic, or in any case, automated, computer and telematic, or manual methods that are logically strictly related to the purpose for which the personal data was collected, and in any case, in a manner to guarantee the security of the same. The data shall be stored for a term that is strictly necessary for the management of the purposes for which the data was collected, in compliance with the law in force and the legal obligations. In any case, MailUp has enacted practices that prohibit the storage of data for an indeterminate term and therefore limits the storage term in compliance with the principle of minimising data processing.
5. Persons authorised to process data, data processors and disclosing of data
Data processing of the data collected is carried out by persons working within MailUp that are appointed for this end and authorised to process data according to specific rules provided under the law in force.
The data collected, if necessary or fundamental to execute the indicated purposes, may be used by external third-party Processors, or depending on the case, disclosed to the same independent controllers and more specifically:
The companies belonging to our corporate group for the purposes indicated under point 1, letters a), b) and f);
Individuals, companies, associations or groups of professionals that provide assistance and advice to our Company, for the purposes indicated under point 1, letters b) and f);
Companies, entities or associations that provide services connected and instrumental to carrying out the above-mentioned purposes (market analysis and research, management of payments through credit cards, information system management).
The data collected may also be transferred abroad, to companies both belonging and not belonging to our corporate group, including countries outside the European Union, in the form and manner envisaged in the current law, guaranteeing, in any case, an adequate level of protection.
In any case, personal data shall never be disseminated.
6. Data Subject’s Rights
It is possible to access, object to the processing or request the erasure, the modification or the updating of all the personal data collected by MailUp, at any time, by exercising the right to limit the data processing and the movement of data, by sending an email to: firstname.lastname@example.org
7. Data Processor
The controller has appointed the data processor, who may be contacted via the following email: email@example.com
April 01, 2018