This privacy policy is intended to provide
all information on the processing of personal data carried out by Iumob Srl
when the User browses and registers on www.yooppe.com or the Yooppe App.
1.
INTRODUCTION – WHO WE ARE?
Iumob Srl, with registered offices in Milan
– Via Comelico, No. 3, 201135 Tax Code/VAT No. 07048770965 registered with the Company Register of Milan under
No. MI- 1931950 (hereinafter the “Data
Controller”), owner of the website https://www.yooppe.com (hereinafter the “Website”) and the application Yooppee
(hereinafter the “App”), as the Controller
of personal data of the users who browse and are registered on the Website
and the App (hereinafter the “Users”)
provide the following privacy policy according to Article 13 of EU Regulation
2016/679 dated 27 April 2016 (hereinafter, “Regulation” or “Applicable
Regulations”).
2.
HOW TO CONTACT US?
The
Data Controller takes the utmost account of its Users’ right to privacy and
protection of personal data. For any information related to this privacy
policy, Users may contact the Data
Controller at any time, using the following methods.
Directly online:
Through the postal letter:
Sending a registered letter with return receipt to the registered offices of the Data Controller (Via Comelico, 3, 20135 Milano);
For specific requests to be sent to our Data Protection Officer:
Users
may also contact the Data Protection
Officer (RPD or DPO) of the Data Controller for any information or request
to the following contact details: company Shibumi Srl - dpo@iumob.it.
3.
WHAT DO WE DO? PROCESSING
PURPOSES
By
browsing the Website and App, the User can register for the service, deciding
whether to carry out the Standard Registration and thus activate a Free
Profile, or create the Complete Subscription, which allows you to have a paid
Premium Profile (of hereinafter, "Service").
In
relation to the activities that can be carried out through the Website and App,
the Data Controller collects personal data relating to Users.
This Website
and App, as well as any services offered through them, are reserved for
individuals who are 18 years and over. Therefore, the Data Controller does not
collect personal data relating to individuals under 18 years of age. Upon
request of the Users, the Data Controller will promptly delete all personal
data that has been involuntarily collected and related to subjects under the
age of 18.
Particularly,
the
personal data of the Users will be processed lawfully by the Data Controller
pursuant of the Regulation for the following processing purposes:
a) Contractual
obligations and provision of the service, to
enable the browsing of the Website/App or to implement the General Terms and
Conditions, which are accepted by the User during registration to the Website/App
to take advantage of the services offered through the Website/App including
access to dating on-line and chat platforms and to fulfil the
User’s specific requests. User data collected by the Data Controller for the
purpose of any registration on the Website include: the nickname voluntarily
chosen, date of birth, gender, city, email address,
picture and any personal information of the User that may be voluntarily
published. Furthermore,
in order to allow the use of the services through the Site/App, the Data
Controller also processes particular categories of data pursuant to art. 9 of
the Regulation (specifically information that may reveal the orientation and
sexual life of the User). With regard to the data that the User will make available to the
public on the Website/App, as specified in the General Conditions, Yooppe is
granted, among other things, any and all right of publication, communication
and making available to the public and others users of the Website/App.
Unless the User gives the Data Controller a
specific and optional consent to the processing of their data for the further
purposes set out in the following paragraphs, the User's personal data will be
used by the Data Controller for the sole purpose of ascertaining the identity
of the User (also by validating the e-mail address), thus avoiding possible
scams or abuses, and contacting the User only for service reasons (e.g. sending
of notifications regarding the services offered on the Website/App).
b) Administrative
and accounting purposes, or to perform organizational,
administrative, financial and accounting activities, such as internal
organizational activities and activities functional to the fulfilment of
contractual and pre-contractual obligations;
c) Legal
obligations, or to fulfil obligations provided by the
law, an authority, a regulation or European legislation.
The
provision of personal data for the purposes of processing indicated above is
optional but necessary; failure to provide the data will make it impossible for
the User of using the Service.
4. OTHER PROCESSING
PURPOSES
Some
of the User’s personal data, such as name, surname, e-mail address, may also be
processed by the Data Controller for marketing purposes (e.g. sending of
advertising material, direct sales, commercial communication, sending newsletters
containing information in relation to news relevant to the sector relating
to the activities of the Data Controller and/or services and promotions
relating to the contents of the Website/App and the services offered through
the Website/App by the Data Controller), or in order for the Data Controller to
contact the User through mail to propose to the User the purchase of products
and/or services offered by the Data Controller and/or by third parties, to
present offers, promotions and business opportunities by the Data Controller
and/or by third parties.
In case
of lack of consent, the possibility to using Service will not be in any way
affected.
In case
of consent, the User may at any time revoke the same, making a request to the
Data Controller in the manner indicated in paragraph 8 below.
The
User can also easily oppose further sending of promotional communications via
e-mail by clicking on the appropriate link for the revocation of
consent, which is present in each promotional email. Once the consent has been
revoked, the Data Controller will send the User an e-mail message confirming
the revocation of the consent. If the User intends to revoke his or her consent
to the sending of promotional communications via telephone, while continuing to
receive promotional communications via email, or vice versa, please send a
request to the Data Controller using the methods indicated in paragraph 8
below.
The
Data Controller informs that, following the exercise of the right of opposition
to the sending of promotional communications via email, it is possible that the
User continues to receive further promotional messages due to technical and
operational reasons (e.g. formation of contact lists already completed shortly
before the Data Controller’s receiving of the opposition request).
Should
the User continue to receive promotional messages after 24 hours from the
exercise of the right of opposition, please report the problem to the Data
Controller, using the contacts indicated in paragraph 8 below.
With
the User’s free and optional consent, some of the User’s personal data (such us
name, surname, gender, date of birth, city and e-mail
address) may be conveyed by the Data Processor to the following categories of
third-party companies: (i) clothing, (ii) automotive, (iii) retail, (iv) credit
and insurance, (v) electronics, (vi) information technology, (vii) information,
(iix) health and wellness, (ix) sport, (x) entertainment, (xi) tourism, (xii)
online digital services and (xiii) recruitment (collectively referred to as the
“Data Controller’s Partners”). The
Data Controller's Partners, as independent data controllers, will process the
personal data of the User for marketing purposes (direct sales, sending
of advertising material and commercial communication), and may contact the User
by post or e-mail to propose to the User the purchase of products and/or o
services offered by the same categories of third-party companies and/or by
other companies and to present offers, promotions and business opportunities to
the User.
Pursuant
to Article 14, paragraph 3 of the Regulation, after successful transfer, the
Data Controller’s Partner will be responsible for providing the Users all the
information provided for by Article 14 of the Regulations.
In case
of lack of consent, the possibility to register on the Website will not be in
any way affected.
In case
of consent, the User may at any time revoke the same, making a request to the
Data Controller in the manner indicated in paragraph 8 below.
The
Data Controller informs that the User's personal data will be processed by the
Data Controller’s Partners as autonomous data controllers, on the basis of the
specific information that will be issued by the Data Controller's Partners to
Users. Any requests not to receive further commercial communications from the
Data Controller’s Partners to whom the data has already been communicated by
the Data Controller, must therefore be addressed directly to them.
5. LEGAL BASIS FOR PROCESSING
Provide
the Service
(as described in the previous paragraph 3, letter a)): the legal basis consists
of art. 6, paragraph 1, lett. b) of the Regulations, or the processing is
necessary for the performance of a contract to which the User is party or in
order to take steps at the request of the data subject prior to entering into a
contract.
With
regard to data belonging to particular categories pursuant to art.9 of the
Regulation (specifically information that may reveal the orientation and the
sexual life of the User), the legal basis consists of art.9, paragraph 2, lett.
a) of the Regulation, or the provision by the data subject of an explicit
consent of their data for a specific purpose.
Administrative
and accounting purposes (as described in the previous paragraph 3, letter b)): the
legal basis consists of art. 6, paragraph 1, lett. b) of the Regulations, as
the processing is necessary for performance of a contract to which the User is
party or in order to take steps at the request of the data subject prior to
entering into a contract.
Legal
obligations
(as described in the previous paragraph 3, letter c)): the legal basis consists
of art. 6, paragraph 1, lett. c) of the Regulation, as the processing is
necessary for compliance with a legal obligation to which the Data Controller
is subject.
Other
processing purposes
for the processing relating to marketing purposes, (as described in the
previous paragraph 4.1) and for that relating to the communication of data to
the Data Controller's Partners (as described in the previous paragraph 4.2),
the legal basis consists of art. 6, paragraph 1, lett. a) of the Regulations,
or the provision by the data subjects of consent to the processing of their
personal data for one or more specific purposes. For this reason, the Data
Controller asks the User to provide specific free and optional consent, to
pursue each of the purposes mentioned in this paragraph.
6. PROCESSING MEANS
AND DATA RETENTION PERIOD
The
Data Controller will process the personal data of Users using manual and IT
tools, with logic strictly related to the purposes themselves and, in any case,
in order to guarantee the security and confidentiality of the data.
The
personal data of Website/App Users will be retained for the time strictly
necessary to carry out the main purposes explained in paragraph 3 above up to
a maximum of 6 months period from the end of the contractual relationship with
the Data Controller, or, in
any case, as necessary for the protection in civil law of the interests of both
the Users and the Data Controller.
In the
cases referred to in paragraphs 4.1 and 4.2 above, the personal data of Users
will be retained for the time strictly necessary to carry out the purposes described
therein and, in any case, up to
a maximum of 12 months from the date of consent or, if earlier, until the User withdraws his consent.
In any
case, any retention terms provided for by law or regulations are reserved.
If the
User decides to block and/or delete their profile, all stored data relating to
the User is deleted. If the complete deletion of User data is not permitted or
required by law, the data is limited for further processing.
7. TRANSMISSION AND DISSEMINATION OF DATA
The
User's personal data may be transferred outside the European Union and, in this
case, the Data Controller will ensure that the transfer takes place in
accordance with the Applicable Regulations and, in particular, in accordance
with Articles 45 (Transfer on the basis of an adequacy decision) and 46
(Transfer subject to adequate guarantees) of the Regulation.
The
employees and/or collaborators of the Data Controller who are in charge of
carrying out Website and App maintenance may become aware of the personal data
of the Users. These subjects, who are formally appointed by the Data Controller
as "in charge of processing", will process the User's data
exclusively for the purposes indicated in this policy and in compliance with
the provisions of the Applicable Regulations.
The
personal data of the Users may also be disclosed to third parties who may
process personal data on behalf of the Data Controller as "Data Processors", such as, for
example, IT and logistic service providers functional to the operation of the
Website, outsourcing or cloud computing
service providers, professionals and consultants.
Users
have the right to obtain a list of any data controllers appointed by the Data
Controller, making a request to the Data Controller in the manner indicated in
paragraph 8 below.
In
addition, other Users may also become aware of the User's personal data, considering
the nature of the Service described above and what is specified in the General Terms
and Conditions in this regard.