fbpx

Privacy Policy

This notice is provided in accordance with Article 13 of Regulation 679/2016 (EU) (“GDPR”) to users who access and browse the website www.pick-roll.com and Pick-Roll APP.

This policy describes how the website manages personal data processing for users who access it. It does not apply to any third-party websites you may be redirected to from this website.

Personal Data We Collect

  • Registration Data: Information you provide when filling out the registration form to create your account, enabling you to use our services (e.g., name, surname, email, phone number, etc.).
  • Technical Browsing Data: Information related to your IP address, identifiers of the devices used to access the website or services, browser characteristics, and access times.
  • Browsing Data for Profiling: Information indirectly provided through the use of the service, obtained and analyzed with the user’s consent.

Purposes and Legal Bases for Processing

The data and cookies we collect will be processed solely to provide the requested services and for any additional purposes you have consented to.

It is also a legitimate interest to use this data for direct marketing purposes related to products or services similar to those of the initial contract, provided you have been adequately informed and have not initially refused such use or objected in subsequent communications. For other marketing communications, processing is based on consent, which is optional, does not affect access to services, and can be withdrawn at any time.

Disclosure, Sharing, and Access to Data

Your personal data will not be disseminated but may be shared, where necessary, to provide services with third parties (e.g., technical service providers, postal couriers, hosting providers, IT companies). If required, these third parties will be appointed as Data Processors to carry out technical or organizational tasks essential for service delivery.

Access to the data is also granted to Pick-Roll SRL staff involved in the organization and data processing (administrative, commercial, marketing, customer service, and system administrators).

An updated list of Data Processors can be requested at any time from the Data Controller.
The right to share your data with third parties remains valid only if you have provided specific and optional consent.

Data Transfer Abroad

Your personal data will be processed within the European Union by Pick-Roll SRL.

If it becomes necessary to use entities located outside the EU for technical and/or operational reasons, or if data must be transferred to technical systems and services managed in the cloud and located outside the EU, such processing will comply with Chapter V of the GDPR. It will be authorized based on specific decisions by the EU. Necessary precautions will be taken to ensure full data protection, including:

a) Adequacy decisions for third-party countries by the European Commission.
b) Appropriate safeguards provided by the third-party recipient under Article 46 of the GDPR.
c) Adoption of corporate binding rules (Binding Corporate Rules, or BCRs).

Duration of Processing and Data Retention

In accordance with Article 5.1(e) of the GDPR, Pick-Roll SRL will process the data you provide for the entire duration of the requested services and retain it for 12 months afterward to complete administrative tasks. Additionally, data will be stored as required to fulfill legal obligations.

If you have authorized profiling, anonymized data will be deleted 12 months after the start of processing.

Your Rights

Pick-Roll SRL ensures that you can exercise your rights under Article 12 of the GDPR at any time. Specifically, you have the right to:

  • Access: Know if the Data Controller holds or processes personal data related to you and obtain a full copy (Art. 15).
  • Rectification: Correct inaccurate personal data or complete incomplete personal data (Art. 16).
  • Erasure: Request the deletion of your personal data under the conditions specified in the GDPR (Art. 17).
  • Restriction: Request that processing be limited to certain data if specific conditions are met (Art. 18).
  • Portability: Receive all your personal data in a structured, commonly used, machine-readable format or request its transfer to another controller without impediments (Art. 20).
  • Objection: Object, in whole or in part, to the processing of data for marketing purposes or automated profiling (Art. 21).

To exercise these rights, you can contact the Data Controller/Data Protection Officer at the following details:

You also have the right to file a complaint with the Data Protection Authority by contacting them at garante@gpdp.it or visiting their website at http://www.gpdp.it.