INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679

Upset srl (hereinafter also “Upset”) respects privacy and undertakes to process personal data with the utmost care and in full compliance with the applicable provisions on the subject, including Regulation (EU) 2016/679 (hereinafter also only the “GDPR”) and Legislative Decree 196/2003, also updated pursuant to Legislative Decree 101/2018.
This information therefore has the purpose of informing you, with the utmost transparency, about the processing of personal data that is carried out by Upset in carrying out its business activity, also including promotional activities related to the latter, including the sending of communications. promotional by email.
Before forwarding any type of information and / or personal data, even by filling in the forms made available in the “contacts” section shown at the bottom of each page of the site www.cinefoodstudios.com, we invite you to read this information carefully.

HOLDER OF THE PROCESSING OF PERSONAL DATA

The owner of the processing of personal data is Upset srl, with registered office in via Ossani n. 24, Faenza (RA), reachable at the following addresses:

Telephone: +39 334 9380937
Email: [email protected]

TYPES OF PERSONAL DATA PROCESSED

In carrying out its business, Upset processes personal identification and contact data, including, for example: name, surname, email address, telephone number and country of origin.
The aforementioned personal data may be collected by Upset through your interaction with the Site (through the form available in the “contacts” section, accessible via the following link: https://cinefoodstudios.com/work-with-us/), as well as in the ordinary performance of their business activities, including promotional activities, for example through its commercial network, as well as on the occasion of initiatives and events organized by Upset and / or in which Upset participates.
Following registration to the mailing list, using the appropriate form at the bottom of each page of the website www.cinefoodstudios.com, subject to your consent, Upset may also process your email address and the indication of your sector of belonging in the ” scope of the promotional activity detailed below.

PURPOSE OF THE TREATMENT

In carrying out its business activity, Upset processes personal data for purposes related to the services requested or related to the production, distribution, promotion, advertising and sale of its products.
In particular, Upset processes personal data to respond to requests for information regarding its products (including estimates, technical and / or commercial information, also sent via the form available in the “contacts” section of its website), to provide assistance after-sales, as well as, more generally, to manage relations with its commercial partners and with other subjects with whom it interacts in carrying out its business (including its suppliers), also in the fulfillment of contractual obligations, to fulfill obligations imposed by law, including those in accounting and tax matters, as well as to protect their prerogatives and manage any disputes.
Upset may also process personal data to send its customers information on previously purchased products and / or similar products (so-called “soft spam”).
With prior consent, Upset uses the email address and the indication of your sector of belonging provided for registration to its mailing list in order to send promotional communications relating to its business and its products (for example, press releases relating to release of new products, or invitations to visit the spaces of Upset at the fairs in which the latter participates).

LEGAL BASIS OF THE PROCESSING

Upset processes personal data in carrying out its business activities with the aim of establishing a possible commercial relationship (and therefore for the execution of pre-contractual measures), as well as to execute contracts to which Upset is a party, including supply contracts. of Upset products (pursuant to Article 6, letter b), of the GDPR).
Upset processes personal data in carrying out its business also on the basis of its legitimate interest in the execution of commercial activities, in the efficient management and organization of its business activities, as well as in the possible protection of its own prerogatives, even at headquarters. judicial and / or before the competent authorities (pursuant to Article 6, letter f), of the GDPR).

The email address and the indication of your sector of belonging provided at the time of registration to your mailing list are used by Upset on the basis of your consent to the processing of such personal data for the promotional purposes described above (pursuant to art . 6, letter a), of the GDPR).
All personal data may also be processed to ensure compliance with legal obligations to which Upset is subject (pursuant to Article 6, letter c) of the GDPR).

METHOD OF TREATMENT AND SCOPE OF CIRCULATION OF DATA

Upset processes personal data in paper form and by electronic means, within the limits of the purposes indicated above and in compliance with the applicable legislation, adopting measures aimed at maintaining the confidentiality and confidentiality of personal data.
In some cases, your personal data may be transferred outside the EU territory.
Upset makes use of IT services that are provided by subjects who have declared that they have taken all the necessary measures to ensure that the processing of personal data complies with the applicable provisions on the protection of personal data, pursuant to art. 45 and 46 of Regulation (EU) 2016/679.
In particular, the hosting service provider of the website www.cinefoodstudios.com provides, in the event of any transfer of personal data outside the EU, to apply the standard data protection clauses adopted by the European Commission, as illustrated herein privacy policy.
The email address provided for subscribing to the Upset mailing list may be transferred outside the European Union. The subject providing this service has declared that it takes all necessary measures to ensure that the personal data processing activities carried out comply with the applicable provisions on the protection of personal data.
In particular, the subject used by Upset for communication and marketing services (including the sending of communications within the mailing list) uses the Mailchimp platform, managed by the US company The Rocket Science Group LLC.
The Rocket Science Group LLC has joined the “Privacy Shield”, an agreement that regulates the transfer of data between the European Union and the USA. More information on this can be found at the following links:

* Mailchimp;
* Privacy Shield;
* Information page of the Guarantor for the protection of personal data on the Privacy Shield.

COMMUNICATION OF PERSONAL DATA

Personal data is made available to duly authorized Upset personnel, who have reason to access it for the performance of their work and / or professional assignments.
Upset may also provide access to your personal data to the subjects it uses for the provision of its IT services, for the maintenance of its IT infrastructure, for the provision of communication and marketing services (including the management of its website www. cinefoodstudios.com, as well as the mailing list). The subjects with whom Upset collaborates in carrying out its business activity may also have access to your personal data (including the companies that deal with shipments).
Upset provides these subjects only with the personal data necessary to carry out the agreed activities and they act as persons in charge and / or data processors.
Upset also reserves the right to communicate personal data to third parties, including its lawyers and / or consultants in order to: a) follow up on pre-contractual activities; b) ensure compliance with the law and / or comply with requests from authorities; c) protect Upset rights in judicial, arbitration and / or similar legal proceedings.

PERIOD OF STORAGE OF PERSONAL DATA

The personal data processed in the performance of Upset’s business are kept for the period of time necessary to pursue the specific purposes of each processing and to ensure compliance with the applicable laws.
Personal data processed for the fulfillment of commitments under contracts, including the pre-contractual activity, are kept for 10 years from the termination of the same, or, in the event that the pre-contractual activity does not lead to the conclusion of a contract, for 2 years from the end of the aforementioned pre-contractual activity, with the possibility of extending these terms in the event that it is necessary to keep such personal data longer to ensure the protection of Upset’s prerogatives (for example to manage any disputes and prevent abuses, including purpose of ensuring efficient management of Upset resources).

Personal data processed for “soft spam” activities are kept, in relation to this specific purpose, for 24 months from the purchase on the basis of which the information is sent.
The processing of personal data necessary for the mailing list involves the use by Upset of the email address provided for this purpose and the indication of its sector of belonging for a period of 24 months starting from the registration to the relative service. After this deadline, unless a new consent has been issued, the email address will be deleted from the mailing list and no further promotional communications will be sent by Upset.

OPPOSITION TO THE PROCESSING OF PERSONAL DATA / WITHDRAWAL OF CONSENT

At any time it is possible to oppose the processing of your personal data (including your email address and the indication of your sector of belonging) and / or revoke your consent and / or for the performance of promotional activities by Upset. , including sending “soft spam” communications and / or subscribing to the mailing list, by sending an email to [email protected]
The withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal.

RIGHTS OF THE INTERESTED PARTIES

At any time you can contact an Upset at the addresses indicated above to receive the list of those responsible for the processing of personal data (that is to say, of the Upset service providers who carry out processing operations of personal data).
You can also contact the aforementioned Upset addresses also for the exercise of the rights enshrined in articles 15 to 22 of the GDPR, in particular for the purpose of:
1. obtain confirmation of the existence or otherwise of their personal data, verify their content, origin and accuracy;
2. request the integration, updating, rectification, cancellation or anonymization of personal data, as well as the regulation of the processing of personal data;
3. to object, for reasons connected to a particular situation, to the processing of personal data carried out on the basis of a legitimate interest of Upset, a condition that Upset’s reasons do not prevail to proceed with the processing anyway (for example, for the need to protect their rights in court);
4. propose a complaint pursuant to the Supervisory Authority (competent for Italy is the Guarantor for the protection of personal data).
Requests relating to the exercise of rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this deadline be extended by a further two months.

(last update April 2021)