Privacy Policy
YOUniversal Media SRL and Nexify Limited, as part of the YOUniversal Group, jointly manage the website www.scanrated.com (hereinafter, the "Website"). YOUniversal Media SRL, with registered office in Via Marsala, 29h, Roma (Italia), P. IVA e C.F. 10817061004, registered at the Companies Register of Rome with the number RM 1257250, and Nexify Limited, with registered office at The Eir Building, 4 Harbourmaster Place, Custom House Dock, Dublin 1, D01 K6X5, Ireland (collectively, the "Data Controllers"), are responsible for processing personal data of users browsing the Website (hereinafter, "Users"). This Privacy Policy is provided pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, "Regulations", or the "Applicable Regulations").
The Data Controllers take utmost account of their Users' right to privacy and the protection of their personal data. For any information related to this Privacy Policy, Users can contact the Data Controllers at any time, via any of the following means:
- By sending a registered letter with return receipt to the registered office of YOUniversal Media SRL, Via Marsala, 29h - 00185 Roma (Italia) or to Nexify Limited, The Eir Building, 4 Harbourmaster Place, Custom House Dock, Dublin 1, D01 K6X5, Ireland
- By sending an email to the address info@youniversal.com
The Data Controllers have not identified a Data Protection Officer (DPO), as they are not obliged to appoint such an officer pursuant to Article 37 of the Regulation. However, Users can also contact the designated Data Protection Officer (DPO) whose contact details are below: Shibumi S.r.l. – E-mail: dpo_sl@soft.it
1. Purpose of processing
Users' personal data will be processed lawfully by the Data Controllers pursuant to Article 6 of the Regulations for the following processing purposes:
- Provision of the service, or to allow navigation of the Website by the User. This includes all personal data whose transmission is implicit in the use of Internet communication protocols, used by the computer systems and software procedures to operate the Website and acquired during their normal functioning: the IP addresses or domain names of the computers utilized by the Users, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method applied in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (positive outcome, error, etc.), and other parameters relating to the operating system and the User's IT environment. Such data is used solely to compile anonymous statistical information on the utilization of the Website and to verify its correct operation. Without prejudice to the other provisions contained within this Privacy Policy, the Data Controllers will not make Users' personal data accessible to other Users and/or third parties under any circumstances.
- Administrative/accounting purposes, i.e., activities of an organizational, administrative, financial, and accounting nature such as internal organizational activities and functional tasks necessary for the fulfillment of contractual and pre-contractual obligations;
- Legal obligations, i.e., to fulfill the obligations set out by the law, by an authority, by regulations or by legislation and to establish responsibility in the event of any cybercrime against the Website.
2. Data processing and storage methods
Users' personal data will be processed using electronic means, as strictly necessary to achieve the purpose for which they are processed, and in any event, ensuring the confidentiality of the data.
The personal data of the Website Users will be kept for the time strictly necessary to carry out the primary purposes described above in Section 1, or in any case as necessary for the protection pursuant to Civil Law of the interests of both the Users and the Data Controllers.
3. Scope of communication and dissemination of data
The personal data of the Users may be disclosed to the employees and/or collaborators of the Data Controllers in charge of managing the Website. These subjects, who are instructed by the Data Controllers in accordance with Article 29 of the Regulations, will process the User's data exclusively for the purposes indicated in this Policy and in compliance with the provisions of the Applicable Regulations.
The personal data of Users may also be disclosed to third parties operating as External Data Processors handling the personal data on behalf of the Data Controllers, such as IT and logistic service providers necessary for the operation of the Website, outsourcing or cloud computing service providers, professionals and consultants.
Users have the right to obtain a list of any eventual Data Processors appointed by the Data Controllers by request to the Data Controllers as indicated in Section 4 below.
4. Rights of the Data Subject
Users may exercise their rights pursuant to the Applicable Regulations by contacting the Data Controllers as follows:
- By sending a registered letter with return receipt to the registered office of the Data Controllers: YOUniversal Media SRL, Via Marsala, 29h - 00185 Roma (Italia) or Nexify Limited, The Eir Building, 4 Harbourmaster Place, Custom House Dock, Dublin 1, D01 K6X5, Ireland
- By sending an email to the address info@youniversal.com
Pursuant to the Applicable Regulations, the Data Controllers hereby declare that Users have the right to obtain information on: (i) the source of their personal data; (ii) the purposes of its being processed and the methods used to do so; (iii) the logic applied to the processing, if carried out by means of electronic tools; (iv) the identity of the Data Controllers and the Data Processors; (v) the parties or categories of parties to whom the personal data may be communicated or who may gain knowledge of it in their capacity as data processing managers or persons in charge of processing.
Furthermore, Users have a right to:
- access, update, rectify or, should they wish to do so, integrate their data;
- the deletion, anonymisation or blocking of data processed unlawfully, including data that does not need to be retained for the purposes for which it was collected or subsequently processed;
- confirmation that those to whom the data is communicated or disclosed are notified of the actions referred to under points (a) and (b), including their content, unless the fulfilment thereof proves impossible or involves using methods that are clearly disproportionate to the right being protected.
Furthermore, Users have:
- the right to withdraw consent at any time, whereby the processing is based on their consent;
- (if applicable) the right to data portability (the right to receive all personal data concerning the Data Subject in a format that is structured, commonly used and readable by automatic devices), the right to limit the processing of personal data and the right to be deleted ("right to be forgotten");
- the right to object: i) in whole or in part, for legitimate reasons, to the processing of personal data concerning the Data Subject, even if pertinent to the purpose of the collection; ii) whereby it is believed that processing of the data is in breach of the Regulations, the right to file a complaint with the Supervisory Authority (in the Member State in which the Data Subject normally resides, in which they work or in which the alleged violation has occurred). The Italian supervisory authority is the Authority for the Protection of Personal Data with offices in Piazza di Montecitorio no. 121, 00186 - Rome (www.garanteprivacy.it).
The Controllers are not responsible for updating all links that can be viewed in this Policy, therefore whenever a link is not functional and/or current, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by the link.