Information to the data subject on the processing of personal data

Dear User, this Privacy Policy is provided to the Data Subject for the protection of confidentiality in compliance with the legislation on personal data protection (EU Regulation n. 2016/679 GDPR, D. Lgs. n. 196/2003 Privacy Code and Measures of the Guarantor for the Protection of Personal Data GDPD).

1. Identity and contact details of the data controller
The Data Controller is Nebra Skay S.r.l. (VAT number 08675350725) with registered office at via Pietro Nenni 45, 70014 Conversano, Italy (hereinafter also “NSS”); The Data Controller has as his sole point of contact the following e-mail: info@nebraskaystudio.com.

2. Purpose, legal basis of processing and disclosure of personal data
The personal data of users uploaded on the contact form and subscription to the newsletter service (personal identification and common data: first name, surname, e-mail, city, telephone) are managed for specific purposes of processing (the purpose is the purpose for which personal data are processed) as described below:

  • Registration in the general database
    Purpose of processing personal data: the purpose of the correct and complete execution of the registration to the general database of NSS.
    Legal basis: the processing is necessary for the execution of a contract to which the data subject is party or for the execution of pre-contractual measures. The communication of data is mandatory, otherwise the service may not be provided.
  • Newsletter subscription and marketing (DEM)
    Purpose of processing personal data: to receive information on the activities of scientific dissemination on computer science and related subjects.
    Legal basis: the processing is necessary for the pursuit of the legitimate interest of the Data Controller regarding information to the disclosure of information related to the services offered, without overriding the interests or fundamental rights and freedoms of data subjects who are entitled to protection of personal data, subject to consideration of the balance between the interests of the Controller and the rights and freedoms of the Data Subjects.
    The data subject may legitimately exercise his right to oppose, at any time, such processing. The communication of data is not mandatory but without the provision of data will not be able to provide the service of newsletter/ marketing.
  • Marketing activities (promotion)
    Purpose of personal data processing: to receive information from the Controller on promotions and for direct sales of products and services by email, paper mail, telephone calls.
    Legal basis: the processing is based on the consent given for this specific purpose and until revocation. The communication of data is not mandatory but without the provision of data will not be able to provide the service of newsletter/ marketing. The processing will be subject to personal data (name, surname, e-mail address, mobile phone number and address) and at any time the user may check and modify or terminate the active services or request additional ones.

3. Dissemination and recipients of personal data
The data will be disseminated, but only in the channels highlighted (site of the Owner, social pages dedicated e.g. Facebook, Instagram, Linkedin, TikTok, YouTube, on print and digital newspapers, brochures, brochures and information booklets) and communicated to Partners necessary for the provision of the service: Internal subjects of the Company specially authorized that carry out activities related and instrumental to the management of the services requested; Entities that provide services for the management of the information system and telecommunications networks, including electronic mail, newsletters and website management, third parties that collaborate with the Data Controller for direct marketing activities.

4. Data retention period and criteria used to determine it
The personal data of users will be kept as long as the user is active, in compliance with the principles of proportionality and necessity, personal data will be stored in a form that allows the identification of the data subjects for a period not exceeding the achievement of the purposes for which they are processed, namely taking into account: the need to continue to store your personal data in order to fulfil requests and provide services agreed (contractual obligations) and for which consent has been expressed (marketing of Partners) and to comply with applicable regulations (Regulatory requirements).

5. Rights of the data subject and right to complain to the supervisory authority
The Data Subject may send a communication to the Controller at the e-mail address info@nebraskaystudio.com in order to exercise his or her rights:

  • the withdrawal of consent, if given;
  • access to personal data to obtain all information and copies of any processing of personal data;
  • the rectification of personal data;
  • the deletion (c.d. right to obliteration) of personal data;
  • the restriction of processing of personal data;
  • to object to the processing of personal data and the portability of personal data;
  • to submit a complaint to the Guarantor for the Protection of Personal Data and/or to another Guaranteeing Authority, if it considers that the rights have been violated by the Controller and/or a third party.

6. How personal data is processed
Users’ personal data are processed through electronic databases and paper archives involving authorized external entities as Data Processors (Partners and categories of recipients of personal data). The processing for marketing purposes will be carried out by e-mail, paper mail or telephone calls via operator. No decision-making processes based on automatic processing, including profiling, are used.

7. Place of processing and transfer of data outside the EU
The personal data of users are processed at the headquarters of the Controller and at the authorised entities responsible for processing the data, stored on servers in the territory of the European Union. The Data Controller does not intend to transfer personal data outside the EU.

8. Information to be provided if the data is obtained from other controllers (art. 14 GDPR)
With reference to your data, you have the right to ask the joint controllers of the treatment, in the manner indicated by the Regulation:

  • access in the cases provided for;
  • the correction of inaccurate data and the integration of incomplete data;
  • the deletion of Data for the intended reasons, such as when they are no longer necessary in relation to the purposes indicated above or are not processed in compliance with the Regulation;
  • the limitation of processing for the assumptions made, as in the case of disputing the accuracy of the Data and checking its correctness;
  • portability, that is to say the right to receive, in the cases provided for, in a structured format of common use and readable by an automatic device the Data and to transmit said Data to another controller;
  • the opposition to processing, in the cases provided.

We remind you that the sending of newsletters can be stopped at any time, selecting the “unsubscribe” option present at the bottom of each newsletter received. From that moment on, you will no longer receive the newsletters of the Joint Data Controllers. The platforms for sending newsletter communications will still keep a list of users unsubscribed to avoid being able to force their reinsertion in the newsletter service; if you wish to be permanently deleted from this list, Please contact the Company, as indicated in point 9 below, which will make the manual cancellation.

9. How to exercise rights
We inform you that you can exercise the rights referred to in point 8 above. through the following ways:

  • writing to the Data Controller, at the kind attention of the Privacy Office;
  • by sending an e-mail to the individual addresses of the data controller: info@nebraskaystudio.com

The deadline for the reply is one (1) month, extendable by two (2) months in case of particular complexity; in these cases the Data Controller should provide at least an interlocutory communication within one (1) month.
The exercise of rights is, in principle, free. The Data Controller reserves the right to ask for a contribution in case of requests manifestly unfounded or excessive (even repetitive). The Data Controller also reserves the right to request information necessary for the identification of the applicant.

10. Complaint
If you believe that the processing of your data violates the provisions contained in the Regulation, you have the right to complain to the Guarantor for the protection of personal data or, alternatively, to file a complaint with the competent judicial authority.

11. Transfer of data abroad
Your data will be stored at the Controller’s headquarters and on servers located in the European Union.
For strictly operational needs related to the management of marketing services, your identification data will also be communicated to suppliers in third countries. The transfer to non-EU countries, in addition to cases where this is guaranteed by adequacy decisions of the European Commission, will be carried out in such a way as to provide appropriate and appropriate guarantees pursuant to Articles 46, 47 or 49 of the Regulation.

12. Protection of minors
For internal business policy, the Data Controller does not manage data of children under 14 years. The Data Controller will not be responsible for any false statements that may be provided by the child during the provision of personal data. If it should be established that the statements made by the child are false, the Data Controller will immediately delete all personal data relating to it.