Participate in our XMAS GAME!

X PRIVACY POLICY

This document describes, pursuant to Articles 13 et seq. of EU REGULATION 2016/679 ("GDPR"), the management mode of the game organized on this site (hereinafter "Initiative"), with reference to the processing of personal data of participants to whom this initiative has been directly addressed (hereinafter "Participant(s)").

Joint Controllers of data processing
BlackBall S.r.l., with registered office in 20123 Milan, Vicolo Santa Maria alla Porta n. 1, C.F. and P.IVA 11063740960 (hereinafter, "Blackball"), and Cabinaa S.r.l., with registered office in 20122 Milan, Viale Luigi Majno n. 9, C.F. and P.IVA 11302390965 (hereinafter, "Cabinaa"), are the joint controllers of the processing of the personal data of the Participants (hereinafter, "Joint Controllers").

Categories of personal data processed
The Joint Controllers will process the Participants' personal data (email address, access credentials, the outcome of participation in the Initiative, winning of NFTs - hereinafter, "Data"), for the sole purpose of carrying out the Initiative. The Joint Controllers will also process the browsing data related to the browsing of the website related to the Initiative (hereinafter, "Surfing Data" and "Site"). Surfing Data will not be stored for more than seven days (except for the possible need to establish crimes by the Judicial Authorities). For the processing of Participants' data through cookies, please refer on the cookie policy.

Purpose and law regulation of the treatment
The Joint Controllers process Participants' Data in order to ensure their proper participation in the Initiative - the processing of Data by the Joint Controllers is, therefore, necessary within the scope of the para-contractual relationships, for which the Privacy Supervisor does not require the consent of the data subject, identifying the legal basis of the processing in the fulfilment of a contractual obligation, pursuant to art. 6.1, lett. b) of the GDPR - as well as to fulfil the relevant legal obligations pursuant to art. 6.1, lett. c) of the GDPR. The Joint Controllers will process Surfing Data to pursue, in accordance with art. 6.1, lett. f) of the GDPR, a legitimate interest of their own, consisting in ensuring the security of the Site and the information exchanged on it, i.e. the ability of such Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that jeopardize the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible.

Consequences of a possible refusal to answer
The provision of data for the purposes referred to in the previous paragraph is optional. Any refusal, however, would lead to the impossibility, for the Joint Controllers, to allow the Participant to take part in the Initiative, as well as the possible assignment of NFTs.

Processing modalities
Personal data are processed with manual and/or computer systems. It should be noted, in particular, that Participant's data are processed by persons duly appointed to carry out such tasks, constantly identified and/or appointed, appropriately trained and made aware of the constraints imposed by law, as well as through the use of security measures to ensure the protection and confidentiality of the Participant, and to avoid the risk of loss or destruction, unauthorized access, processing not allowed or not in accordance with the purposes mentioned above.

Communication of data
Data may be communicated to companies expressly appointed to perform certain services as part of the activities carried out by the Joint Controllers, in particular for the planning and management of the Site and the Initiative and the various phases of which it is composed, as well as the hosting service, which will operate as a manager or independent data controller, as well as the communication and/or dissemination of data required, in accordance with the law, by the police, the judicial authority, information and security bodies or other public entities for purposes of defence or state security or prevention, detection or prosecution of crime.

Duration of processing and storage of personal data
Participants' Data will be processed by the Joint Controller until the end of the Initiative, after which they will be stored only in order to comply with legal obligations, for administrative purposes and/or to assert or defend a right, in case of litigation and pre-litigation.

Rights of the Data Subject
Participants, as concerned parties (i.e., subjects to whom the Data refer), are holders of rights conferred by the GDPR. In particular, according to art. 15 et seq. of the GDPR, at any time and free of charge, the data subject has the right to request information regarding the existence of the Data processing, storage period, to obtain a copy, to rectify, integrate, update, delete the same data. Data subjects shall have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to object the processing and to lodge a complaint with the competent supervisory authority. For the purposes of exercising the rights listed above, as well as for any clarifications, each data subject may contact the Joint Controllers directly by writing to one of the following addresses: for Blackball S.r.l. to info@blackball.tv and, for Cabinaa S.r.l., to contact@cabinaa.com. The data subject also has the right to know the essential content of the agreement of joint control of data processing between the Joint Controllers, pursuant to art. 26 co. 2 of the GDPR. To this end, the data subject may send a written request indiscriminately to one of the Joint Controllers, in the manner described above.