INFORMATION TO DATA SUBJECT FOR THE USE OF THE WEBSITE

This document regulates the processing of personal data through the use of the website available at the following address: fantasy.slgr.gr, as carried out by Fantaking Interactive S.r.l., with headquarters in Via San Zeno, 145, 25124, Brescia (BS) VAT number 03549330987, email address info@fantaking.it, (hereinafter the “Data Controller”), in compliance with current data protection regulations, including, in particular, EU Regulation 2016/679 (hereafter “GDPR”).

1. Identity and contact details of the data controller

The Data Controller is Fantaking Interactive S.r.l

Since the data controller is located in Italy, no representative has been appointed.

2. Contact details of the Data Protection Officer

The Data Controller has not appointed a Data Protection Officer.

3. Methods of processing

3.1 Cookies and environmental data

3.1.1. Technical cookies

  • Navigation, functional and session cookies: these allow the web app site and the related services to work properly. The use of so called session cookies (which are not permanently stored on the device of the data subject and are automatically deleted when the browser is closed) is strictly limited to the transmission of individual session identifiers. Session cookies are used in order to allow safe and efficient navigation on the web app site and to use the web app and related services.

  • Statistical cookies: The web app site uses statistical cookies made directly by the data controller or provided by third parties. In the latter case, suitable tools have been adopted to reduce their identifying capabilities, by also hiding significant portions of the controlled IP addresses. Furthermore, the use of these third-party statistical cookies has been subjected to contractual obligations that require third parties to use them exclusively to provide services, to store them separately and to not “enrich” them or “cross-reference” them with other information they have available. In any case, the Data Controller does not allow third-party suppliers to use cookies for purposes other than those listed above.

  • As regards Google Analytics cookies specifically, the information that concerns the use of the web app site by users and is obtainable from cookies will be transmitted by the user’s browser to Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, United States, and stored in the servers of the same company. The privacy policies of Google, which we invite you to read, are available at the following address: http://www.google.com/intl/it/privacy/privacy-policy.html . . The privacy policy regarding the services of Google Analytics is available at the following address: http://www.google.com/intl/en/analytics/privacyoverview.html

  • Browsing data and environmental variables: the IT systems and the procedures used to operate the web app site automatically acquire, during their normal functioning, some personal data relating to the navigation of the data subject, including environmental variables. This category of data includes, by way of example:

    • the IP addresses of the computers or mobile devices utilized by users of the service;

    • the number of accesses

    • the pages displayed

    • the date and time the access occurred

    • the URL the browser was on before displaying our page

    • the type of browser

    • the operating system used

3.1.2. Non-technical cookies

Profiling cookies: The web app site uses first and third party profiling cookies as expressed herinbelow.

3.1.3. List of cookies

Technical and analytical cookies

Google Analytics for access and traffic statistics for internal use; for more information https://policies.google.com/privacy?hl=it

Third-party cookies for advertising profiling

Third-party cookies for other purposes (including widgets and pixel tracking)

Deleting and disabling cookies

Since cookies are normal text files, they can be accessed using word processing programs. In any case it is possible to configure your browser in order to prevent it from treating cookies.

3.2 Data provided voluntarily by the data subject

The data optionally and freely provided by the data subject, by sending e-mails to the addresses found on the site, may be acquired for purposes that will be specified each time. In particular, in addition to the email address required to reply to the sender, any other personal data contained in the related communication will be processed. The data subject is invited not to enter special category data (for example data concerning their health) in the communications that will be sent to the Data Controller. The data collected this way will be stored and processed exclusively for the purpose of storing the correspondence and replying to the data subject. They will not be used for other purposes.

4. Purpose of processing and legal basis of processing

  • In relation to cookies of a technical nature referred to in point 3.1.1. and to navigation data, the processing of the data subject’s personal data is carried out in order to enable proper use of the website; use of the data is necessary for navigation and using on and of the web app site. In this case the legitimate interest of the data controller to consent the navigation inside the website shall provide the legal basis of the processing.

  • In relation to data provided voluntarily by e-mail, the processing of personal data carried out makes it possible to respond to requests from the data subjects. The legitimate interest of the Data Controller in responding to the data subjects shall provide the legal basis of the processing.

  • In relation to those data collected for profiling purposes, the consent of the data subject shall be considered the legal basis of the processing.

  • As for those data collected with the function “Write us”, the data will be collected to reply to the data subjects. In this case the legit interest of the data processor to reply to the data subject shall be considered as the legal basis of the processing.

  • The data could be collected for communication purposes to third parties different from the Data controller and the data processors. In relation to those data collected for profiling purposes, the consent of the data subject shall be considered the legal basis of the processing.

5. Source from which personal data originates

Only the data provided by the data subject, collected through the website or through an email sent by the data subject, will be processed, in compliance with this document. Data from sources accessible to the public will not be processed.

6. Modalities for the provision of the consent

The consent could be provided, whenever required:

By the subscription of a digital document, also by specific flagbox.

7. Recipients and possible categories of personal data recipients

The personal data of the data subject may sent to:

  • Companies that offer services related to the information society, including, in particular, those that offer hosting services

  • Communications companies, which are qualified as data processors and carry out commercial communication activities and profiling activities on behalf of the Data Controller

8. Data categories

The personal data of the data subject will be processed. Particular category of data will not be processed, pursuant to article 9 of the GDPR.

9. Data transfer

The Data Controller intends to transfer personal data to another country or to an international organization. These subjects could include, by way of example:

  • Communications companies, which carry out communication activities on behalf of the Data Controller

  • Companies that offer services related to the information society, including, in particular, those that offer hosting services

  • Communication service providers

The transfer of personal data to such subjects, if they are established in another country or are an international organization, will be carried out only if it is considered adequate by the European Commission, which will verify that the other country, the area or one or more specific sectors within the other country or the international organization in question can guarantee an adequate level of protection of the Data Controller’s rights. In any case, the Data Controller – if they deem it necessary – reserves the right to reach specific separate agreements that will oblige these subjects to adopt adequate security and organizational measures, aimed at appropriately guaranteeing the Data Controller’s rights. Google Inc., in particular, is contractually bound to ensure appropriate protection of the Data Controller’s rights. The data can be transferred to the following countries: U.K, United States of America. To obtain a copy of this data or information about the place where it was made available, simply send a request to this address: info@fantaking.it.

10. Retention period of personal data

Personal data processed and stored for all the navigation purposes referred to in this document will be processed and stored for a period that shall not exceed 24 months, starting from the date of the individual collection. Data collected for profiling purposes will be processed for 12 months. Personal data processed for the purpose of communication to third parties by the Data Controller and the Data Processors will be processed until the person concerned revokes their consent. Personal data voluntarily provided by the data subject or provided by the functionality “write us”, will be processed until a request of cancellation sent by the data subject. In any case, the Data Controller reserves itself the right to request the data subject to renew their consent to the processing and/or to verify the consent previously expressed.

11. Optional nature of consent and consequences of non-consent

In relation to personal data processed through technical cookies, in order to allow proper use of the web app, the communication of personal data is not a contractual obligation in relation to technical cookies, but is based on the legitimate interest of the data controller, since a fully functional web app could not be made available without this treatment. The consent is to be considered optional in relation to non-technical cookies. In the latter case, the failure to communicate such data will only determine the impossibility of providing a personalized service. In relation to those data collected for profiling purposes, the consent is optional. The consequences of denying the consent for a processing for profiling purposes will determine the impossibility to furnish a customized service. Personal data processed for the purpose of communication to third parties, the consent is optional. The consequences of denying the consent for a processing for profiling purposes will determine the impossibility to communicate those data. In relation to data provided voluntarily by e-mail or by the function “Write us”, the processing of personal data is not a contractual obligation, but a treatment based on the legitimate interest of the Data Controller to reply to data subjects; without this treatment it would not be possible to reply to requests made by the data subject.

12. Rights of the data subject

12.1 Right of opposition

The data subject has the right to oppose, at any time and for reasons connected with their particular situation, to the processing of personal data concerning him/her, pursuant to Article 6, paragraph ,1 letters e) or f) of the GDPR, including profiling on the basis of these provisions. The Data Controller will refrain from further processing personal data, unless they are able to demonstrate the existence of compelling legitimate reasons for proceeding with the processing, which prevail over the interests, rights and freedoms of the data subject, or if they need to assess, exercise or defend one of their rights in court.

12.2 Other rights

The Data Controller also wishes to inform the data subject of the following rights:

  • Right of the data subject to access data: the data subject has the right to obtain confirmation from the Data Controller of whether or not their personal data is being processed at that time and, in that case, to obtain access to their personal data and to specific information, in accordance with Article 15 of the GDPR.

  • Right of rectification: l’interessato ha il diritto di ottenere dal Titolare la rettifica dei dati personali inesatti che lo riguardano senza ingiustificato ritardo. Tenuto conto delle finalità del trattamento, l’interessato ha il diritto di ottenere l’integrazione dei dati personali incompleti, anche fornendo una dichiarazione integrativa, in conformità all’art. 16 del GDPR.

  • Right to delete data, including the right to withdraw consent: the data subject has the right to obtain the deletion of personal data concerning them by the Data Controller, without undue delay, and the Data Controller is obliged to cancel the data without undue delay; the data subject also has the right to withdraw his consent, if the reasons set out in article 17 of the GDPR apply; in this case, the right of revocation can be exercised at any time without undermining the lawfulness of the treatment based on the consent given prior to the revocation.

  • Right to limit processing: the data subject has the right to obtain a limitation of the processing from the Data Controller, when the hypotheses defined by article 18 of the GDPR apply.

  • Right to data portability: the data subject has the right to receive, in a format which is structured, in common use and can be read on an automatic device, the personal data concerning him/her that were provided to the Data Controller, and has the right to transmit this data to another data controller without impediment by the Data Controller, in the cases and under the conditions specified by article 20 of the GDPR.

13. Exercising these rights

Requests to exercise the rights indicated in this document must be addressed directly to the Data Controller at the following email address: info@fantaking.it. Alternatively, you can exercise your rights by sending a communication via registered mail to the following address: in Corsica Street, 14/A, 25125, Brescia (BS), Italy.

14. This information can be accessed at the address

fantasy.slgr.gr/en/privacy, as well as by the Data Controller. If expressly requested, the information may also be provided orally, provided that the identity of the applicant has been attested, by means of a telephone request addressed to the Data Controller.

Last updated