Privacy Information

NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 2016/679

Dear User (“Data Subject”), this notice is provided pursuant to art. 13 of EU Regulation 2016/679 (the “Regulation”) in connection with requests for services from our company.

Art. 1 - Data Controller

Under the Regulation, your personal data will be processed by BlasterFoundry, with registered office at Via Ulisse 26, 95022 Aci Catena (CT), Italy (the “Controller”), which can be reached at the e-mail address: info@blasterfoundry.com

The designated Data Processor is Mr Fichera Francesco.

Art. 2 - Types of data processed

The personal data processed belong to the following categories:

general and contact data provided by the Data Subject, including by way of example: first and last name, e-mail address, telephone number, place and date of birth, place of residence;
browsing data: this category includes the IP addresses or domain names of the computers used by those who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response returned (error, success, etc.) and other parameters relating to the user’s operating system and computing environment;
data obtained from profiling cookies: the behaviour and preferences shown by the user while browsing, used to build specific profiles in which that information is stored.

List of cookies and related data used

Technical cookies — always active

bf_consent (Blaster Foundry Srl)

First-party cookie that records the choice made on the cookie banner, so that it is not requested again on every visit.

Personal data processed: the preferences expressed and the date of the choice.

Duration: 6 months. Place of processing: European Union. No consent is required under art. 122 of the Italian Privacy Code.

Analytics — subject to consent

Google Analytics 4 (Google Ireland Limited)

Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the data collected to track and examine the use of this site and to prepare reports on its activity.

Personal data processed: cookie (_ga, _ga_5BBC22511P) and usage data.

Duration: 2 years. Place of processing: Ireland, with possible transfer to the United States. Privacy Policy – Opt Out

Marketing — subject to consent

Meta Pixel (Meta Platforms Ireland Limited)

The Meta Pixel is a campaign measurement and behavioural targeting service provided by Meta Platforms Ireland Limited, which connects activity on this site with the Meta platforms (Facebook, Instagram).

Personal data processed: cookie (_fbp, _fbc) and usage data.

Duration: 3 months. Place of processing: Ireland, with transfer to the United States. Privacy Policy

Both third-party services are managed through Google Tag Manager and are not activated before the Data Subject’s consent, which can be changed or withdrawn at any time from the “Cookie Preferences” link at the bottom of every page.

Art. 3 - Purposes, legal basis and optional nature of the processing

The personal data indicated above will be processed by the Controller for the following purposes:

a) to fulfil the technical obligations necessary to provide the services requested;

b) to fulfil the administrative and accounting/tax obligations necessary to provide the services requested;

c) to comply with any legal obligations;

d) to establish, exercise or defend a legal claim;

e) to carry out direct marketing activities by sending commercial communications (promotions, newsletters, text messages) by electronic means;

f) to carry out statistical analysis and profiling of your habits in order to propose personalised commercial offers.

The legal basis of the processing for purposes a) and b) is art. 6.1 letters a) and b) of the Regulation.

The legal basis of the processing for purpose c) is art. 6.1 letter c) of the Regulation.

The legal basis of the processing for purpose d) is art. 6.1 letter f) of the Regulation.

The legal basis of the processing for purpose e) is art. 6.1 letters a) and f) of the Regulation.

The legal basis of the processing for purpose f) is art. 6.1 letter a) of the Regulation.

Providing your personal data is mandatory for the purposes under a), b), c) and d); failure to provide it will make it impossible to supply the services indicated above.

In some jurisdictions outside the European Union the Controller may be authorised to process personal data without the Data Subject’s consent, or in the absence of one of the legal bases specified above, until the User objects (“opt-out”) to such processing.

Art. 4 - How data is processed

Browsing data is functional to the use of the web platform and its transmission is inherent in the use of Internet communication protocols. The data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and of checking that it works correctly, and is deleted immediately after processing. The data may be used to establish liability in the event of hypothetical computer crimes against the site.

General data will instead be used to identify the customer, as well as to send communications relating to the specific service requested.

Contact data may also be used – subject to consent – to send newsletters, other company communications or promotions relating to the services offered.

Data obtained from profiling cookies is used to send advertising messages in line with the preferences shown by the user while browsing online.

Processing may be carried out using manual, electronic and telematic tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data, as well as compliance with the specific obligations laid down by law.

Art. 5 - Recipients and transfer of personal data

Within the processing operations listed above, your personal data may be disclosed in paper and/or electronic format to the following categories of recipients:

External service providers (purposes a-b).
Public administrations and bodies (purposes b-c).
Consultancy firms working for the company in various fields (purposes b-c-d-e).
Insurance companies and debt collection companies (purposes b-c-d).
Legal and commercial professionals (purposes b-c-d).
Parties managing the IT system (purposes a–b-c-d-e-f).

Art. 6 - Transfer of data outside the EU

As regards any transfer of data to Third Countries, the Controller states that the processing will take place in one of the ways permitted by the law in force, such as the consent of the Data Subject, the adoption of Standard Contractual Clauses approved by the European Commission, the selection of parties adhering to international programmes for the free movement of data (e.g. the EU-U.S. Data Privacy Framework) or operating in countries deemed adequate by the European Commission. Further information is available on request from the Controller at the contact details indicated above.

Art. 7 - Retention of personal data

The personal data indicated above will be kept only for as long as necessary for the purposes for which it is collected, in compliance with the minimisation principle set out in art. 5.1 c) of the Regulation.

As regards commercial communications, the subscription and the related processing are considered valid until the user unsubscribes, which is possible through the link included in every e-mail or from the user’s control panel. Should messages be sent less frequently, at least every thirty-six months a verification message containing the unsubscribe link will be sent to all users.

Further information is available from the Controller, who can be reached at the address indicated above.

Art. 8 - Your privacy rights

As a Data Subject you have the right to ask the Controller, at any time, for access to the personal data indicated above, for its rectification or erasure, or to object to its processing; to request the restriction of processing in the cases provided for by art. 18 of the Regulation; to withdraw the consent given under art. 7 of the Regulation at any time; to obtain, in a structured, commonly used and machine-readable format, the data concerning you, in the cases provided for by art. 20 of the Regulation; and to lodge a complaint with the competent Supervisory Authority (the Italian Data Protection Authority, Garante per la Protezione dei Dati Personali) under art. 77 of the Regulation, should you consider that the processing of your data breaches the legislation in force.

You may submit a request to object to the processing of your data under art. 21 of the Regulation, setting out the reasons that justify the objection: the Controller reserves the right to assess your request, which would not be accepted if there are compelling legitimate grounds for the processing that override your interests, rights and freedoms.

Requests must be addressed in writing to the Controller at the contact details indicated above.