Mamazen s.r.l. owner of studiohubeurope.eu (hereinafter referred to as the “application”), acting as Data Controller on the processing of the Personal Data of the User ( hereinafter referred to as the “Data Subject”), according to the art. 13 of the EU General Data Protection Regulation (hereinafter referred to as “GDPR” or “Regulation”) n. 679/2016 concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, in compliance with the principles of lawfulness, transparency, correctness, adequacy, accountability, informs you as follows:
Among the types of Personal Data that this Application collects, by itself or through third parties, there are:
email address; first name; last name; country; company name; website; Cookies; Usage Data; phone number; address; date of birth; gender; profession; various types of Data.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the Data Subject, or, in case of Usage Data, collected automatically when using this Application. Unless it is specified otherwise, all Data requested by this Application are mandatory and failure to provide them may make impossible for this Application to provide its services.
In cases where this Application specifically states that some Data is not mandatory, Data Subjects are free not to communicate them without consequences to the availability or the functioning of the Service.
Data Subjects, who are uncertain about which Personal Data are mandatory, are welcome to contact the Data Controller.
According to the art. 6 of the current European Regulation, which establishes the principle of lawfulness of the personal data processing, the Data Controller may process Personal Data if one of the following conditions applies:
1) Data Subjects have given their consent for one or more specific purposes;
2) provision of Data is necessary for the performance of an agreement with the Data Subject and/or for any precontractual obligations thereof;
3) processing is necessary in order to comply with a legal obligation to which the Data Controller is subject;
4) processing is related to a task that is carried out in the public interest or in the exercise of official authority assign to the Data Controller;
5) processing is necessary for the purposes of the legitimate interest pursued by the Data Controller or by a third party.
That explained, the Data are collected to allow the Data Controller to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Data Subjects or third parties), detect any malicious or fraudulent activity, as well as the following:
Contacting the Data Subject, Analytics, Backup saving and management, Content commenting, Managing contacts and sending messages, User (Data Subject) database management, RSS feed management, Managing landing and invitation pages, Heat mapping and session recording, Hosting and backend infrastructure, Interaction with online survey platforms, Interaction with data collection platforms and other third parties, Interaction with external social networks and platform and Registration and authentication.
For specific information about the Personal Data used for each purpose, Data Subjects may refer to the following section:
Detailed information on the processing of Personal Data
The services contained in this section enable the Data Controller to monitor and analyze web traffic and can be used to keep track of User behavior.
Google Analytics (Google LLC)
Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activi ties and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
This type of service allows the Data Controller to save and manage backups of this Application on external servers managed by the service provider itself. The backups may include the source code and content as well as the data that the User provides to this Application.
Backup on Google Drive
Google Drive is a service to save and manage backups provided by Google LLC or by Google Ire land Limited, depending on the location this Application is accessed from.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Backup on Dropbox (Dropbox, Inc.)
Dropbox is a service to save and manage backups provided by Dropbox Inc. Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
Mailing list or newsletter (this Application)
By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or pro motional nature concerning this Application. Your email address might also be added to this list as a result of signing up to this Application or after making a purchase.
Personal Data processed: company name; country; email address; first name; last name; website. Contact form (this Application)
By filling in the contact form with their Data, the User authorizes this Application to use these de tails to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.
Personal Data processed: email address; first name; last name.
Phone contact (this Application)
Users that provided their phone number might be contacted for commercial or promotional pur poses related to this Application, as well as for fulfilling support requests.
Personal Data processed: phone number.
Content commenting services allow Users to make and publish their comments on the contents of this Application.
Depending on the settings chosen by the Data Controller, Users may also leave anonymous com ments. If there is an email address among the Personal Data provided by the User, it may be used to send notifications of comments on the same content. Users are responsible for the content of their own comments.
If a content commenting service provided by third parties is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the content commenting service.
Facebook Comments (Facebook, Inc.)
Facebook Comments is a content commenting service provided by Facebook, Inc. enabling the User to leave comments and share them on the Facebook platform.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy.
Heat mapping services are used to display the areas of a page where Users most frequently move the mouse or click. This shows where the points of interest are. These services make it possible to
monitor and analyze web traffic and keep track of User behavior.
Some of these services may record sessions and make them available for later visual playback. Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a session recording and heat mapping service provided by Hotjar Ltd. Hotjar honors generic „Do Not Track” headers. This means the browser can tell its script not to col lect any of the User’s data. This is a setting that is available in all major browsers. Find Hotjar’s opt out information here.
Personal Data processed: Cookies; Usage Data; various types of Data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.
This type of service has the purpose of hosting Data and files that enable this Application to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Application. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.
Amazon Web Services (AWS) (Amazon Web Services, Inc.)
Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Ser vices, Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: Ireland – Privacy Policy.
DigitalOcean (DigitalOcean Inc.)
DigitalOcean is a hosting service provided by DigitalOcean Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service.
Place of processing: United Kingdom – Privacy Policy; Netherlands – Privacy Policy; Germany – Privacy Policy.
Heroku (Salesforce.com, inc.)
Heroku is a hosting service provided by Salesforce.com, inc.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
Linode (Linode, LLC.)
Linode is a hosting service provided by Linode, LLC.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
Microsoft Azure (Microsoft Corporation)
Microsoft Azure is a hosting service provided by Microsoft Corporation.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: Germany – Privacy Policy; France – Privacy Policy; Ireland – Privacy Policy.
This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Application for the purpose of saving and reusing data. If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even if the Users do not actively use the service.
Hotjar Recruit User Testers (Hotjar Ltd.)
The Hotjar Recruit User Testers widget is a service for interacting with the Hotjar data collection platform provided by Hotjar Ltd.
Hotjar honors generic „Do Not Track” headers. This means the browser can tell its script not to col lect any of the User’s data. This is a setting that is available in all major browsers. Find Hotjar’s opt out information here.
Personal Data processed: Cookies; Usage Data; various types of Data.
Place of processing: Malta – Privacy Policy – Opt Out.
4Dem Widget (Advision S.r.l.U.)
The 4Dem widget is a service for interacting with the 4Dem email address management and mes sage sending service provided by Advision S.r.l.U.
Personal Data processed: company name; email address; first name; last name; various types of Data.
Place of processing: Italy – Privacy Policy.
Wufoo Widget (SurveyMonkey Inc.)
The Wufoo widget is a service for interacting with the Wufoo data collection platform provided by SurveyMonkey Inc.
Personal Data processed: Cookies; Usage Data.
Place of processing: Ireland – Privacy Policy.
This type of service allows interaction with social networks or other external platforms directly from the pages of this Application.
The interaction and information obtained through this Application are always subject to the User’s privacy settings for each social network.
This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services in order to make sure that the processed data on this Application isn’t being connected back to the User’s profile.
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services allowing interaction with the LinkedIn social network provided by LinkedIn Corporation.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy.
YouTube button and social widgets
The YouTube button and social widgets are services allowing interaction with the YouTube social network provided by Google LLC or by Google Ireland Limited, depending on the location this Ap plication is accessed from.
Personal Data processed: Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy. AngelList follow button and social widgets ( Venture Hacks, Inc.)
The AngelList follow button and social widgets are services allowing interaction with the AngelList network provided by Venture Hacks, Inc.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy.
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy.
This type of service allows Users to interact with third-party online survey platforms directly from the pages of this Application.
If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even if the Users do not actively use the service.
Hotjar Poll & Survey widgets (Hotjar Ltd.)
The Hotjar Poll & Survey widgets are services that enable interaction with the Hotjar platform pro vided by Hotjar Ltd.
Hotjar honors generic „Do Not Track” headers. This means the browser can tell its script not to col lect any of the User’s data. This is a setting that is available in all major browsers. Find Hotjar’s opt out information here.
Personal Data processed: Cookies; Usage Data; various types of Data.
Place of processing: Malta – Privacy Policy – Opt Out.
SurveyMonkey Widget (SurveyMonkey Inc.)
The SurveyMonkey Widget is a service for interacting with the SurveyMonkey online survey plat form provided by SurveyMonkey Inc.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy.
This type of service helps with building and managing landing and invitation pages, i.e., pages for presenting a product or service, where you may add your contact information such as an email ad dress.
Managing these pages means that these services will handle the Personal Data collected through the pages, including Usage Data.
Unbounce (Unbounce Marketing Solutions Inc.)
Unbounce is a landing page management service provided by Unbounce Marketing Solutions Inc., that allows this Application to collect the email addresses of Users interested in its service. Unbounce allows the Data Controller to track and analyze the User response concerning web traffic or behavior regarding changes to the structure, text or any other component of the created landing pages.
Personal Data processed: Cookies; email address; Usage Data.
Place of processing: Canada – Privacy Policy.
Mailchimp Landing Page (The Rocket Science Group LLC)
Mailchimp Landing Page is a landing page management service provided by The Rocket Science Group LLC, that allows this Application to collect the email addresses of Users interested in its ser vice.
Mailchimp Landing Page allows the Data Controller to track and analyze the User response con cerning web traffic or behavior regarding changes to the structure, text or any other component of the created landing pages.
Personal Data processed: address; company name; email address; first name; last name; profession. Place of processing: United States – Privacy Policy.
4Dem Landing Page Builder (Advision S.r.l.U.)
4Dem Landing Page Builder is a landing page management service provided by Advision S.r.l.U., that allows this Application to collect the email addresses of Users interested in its service. 4Dem Landing Page Builder allows the Data Controller to track and analyze the User response con cerning web traffic or behavior regarding changes to the structure, text or any other component of the created landing pages.
Personal Data processed: address; company name; country; email address; first name; last name. Place of processing: Italy – Privacy Policy.
Launchrock (Launchrock Inc.)
Launchrock is an invitation page management service provided by Launchrock Inc., that allows this Application to collect the email addresses of Users interested in its service, to share this Application with other platforms, e.g., social networks, to keep track of Users who view the invitation page and those who subscribe upon invitation by other Users.
Personal Data processed: Cookies; email address; Usage Data.
Place of processing: United States – Privacy Policy.
This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
4Dem (Advision S.r.l.U.)
4Dem is an email address management and message sending service provided by Advision S.r.l.U.
Personal Data processed: address; company name; country; email address; first name; last name; phone number.
Place of processing: Italy – Privacy Policy.
Mailchimp (The Rocket Science Group LLC)
Mailchimp is an email address management and message sending service provided by The Rocket Science Group LLC.
Personal Data processed: address; company name; country; email address; first name; last name; phone number.
Place of processing: United States – Privacy Policy.
By registering or authenticating, Users allow this Application to identify them and give them access to dedicated services.
Depending on what is described below, third parties may provide registration and authentication services. In this case, this Application will be able to access some Data, stored by these third-party services, for registration or identification purposes.
Facebook Authentication (Facebook, Inc.)
Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the Facebook social network.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
Linkedin OAuth (LinkedIn Corporation)
Linkedin Oauth is a registration and authentication service provided by Linkedin Corporation and is connected to the Linkedin social network.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
Google OAuth
Google OAuth is a registration and authentication service provided by Google LLC or by Google Ireland Limited, depending on the location this Application is accessed from, and is connected to the Google network.
Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
This type of service allows this Application to manage RSS feeds and the distribution of their con tent. Depending on the characteristics of the service used, these services may be used to insert ads within the content and to gather statistics data from them.
FeedPress (Beta Et Compagnie Sarl)
FeedPress is a service to manage RSS feeds provided by Beta Et Compagnie Sarl. It allows the col lection of statistics on what content is consumed.
Personal Data processed: Usage Data.
Place of processing: France – Privacy Policy.
Feedburner
Feedburner is a service to manage RSS feeds provided by Google LLC or by Google Ireland Lim ited, depending on the location this Application is accessed from. It allows the collection of statis tics on what content is consumed and to insert ads in it.
Personal Data processed: Cookies; Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy. • User database management
This type of service allows the Data Controller to build user profiles by starting from an email ad dress, a personal name, or other information that the User provides to this Application, as well as to track User activities through analytics features. This Personal Data may also be matched with pub licly available information about the User (such as social networks’ profiles) and used to build pri vate profiles that the Data Controller can display and use for improving this Application. Some of these services may also enable the sending of timed messages to the User, such as emails based on specific actions performed on this Application.
4Dem Marketing Automation (Advision S.r.l.U.)
4Dem Marketing Automation is a User database management service provided by Advision S.r.l.U. Personal Data processed: Cookies; Usage Data.
Place of processing: Italy – Privacy Policy.
HubSpot CRM (HubSpot, Inc.)
HubSpot CRM is a User database management service provided by HubSpot, Inc.
Personal Data processed: email address; phone number; various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
HubSpot Lead Management (HubSpot, Inc.)
HubSpot Lead Management is a User database management service provided by HubSpot, Inc. Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy.
SendinBlue Marketing Automation (SendinBlue SAS)
SendinBlue is a User database management service provided by SendinBlue SAS.
Personal Data processed: Cookies; email address; Usage Data.
Place of processing: France – Privacy Policy.
FullContact (FullContact Inc.)
FullContact is a User database management service provided by FullContact Inc.
Personal Data processed: company name; date of birth; Email; first name; gender; last name; vari ous types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Either way, the Data Controller will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out by using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Data Controller.
The updated list of these parties may be requested at any time by using the Data Controller contact information.
The Personal Data are processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located.
Depending on the Data Subject’s location, data transfers may involve transferring the Subject’s data to a country other than their own. To find out more about the place of processing of such transferred Data, Data Subjects can check the section containing details about the processing.
Data Subjects are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Data Controller to safeguard their Data. If any such transfer takes place, Data Subjects can find out more by checking the relevant sections of this privacy policy or inquire with the Data Controller using the information provided in the contact section.
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the Data Subject shall be retained until such contract has been fully performed. Personal Data collected for the purposes of the Data Controller’s legitimate interests shall be retained as long as needed to fulfill such purposes. Data Subjects may find specific information regarding the legitimate interests pursued by the Data Controller within the relevant sections of this document or by contacting the Data Controller.
The Data Controller may be allowed to retain Personal Data for a longer period whenever the Data Subject has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
According to art. 15 – 22 and 77 of the GDPR, data subjects shall exercise the following rights:
Mamazen S.r.l. – Via Bossolasco 11 – 10141 Turin (Italy), email: privacy@mamazen.it 9. Method of exercise of the rights by the Data Subject
Any requests to exercise Data Subject’s rights can be directed to the Data Controller through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Data Controller as early as possible and always within one month.
This Application uses Trackers. To learn more, the Data Subject may consult the Cookie Policy. 11. Legal action
The Data Subject’s Personal Data may be used for legal purposes by the Data Controller in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services.
The Data Subject declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.
In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) use other Personal Data (such as the IP Address) for this purpose.
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.
This Application does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying the Data Subjects on this page and possibly within this Application and/or – as far as technically and legally feasible – sending a notice to Data Subjects via any contact information available to the Data Controller. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.
Should the changes affect processing activities performed on the basis of the Data Subject’s consent, the Data Controller shall collect new consent from the Data Subject, where required.
Definitions and legal references
Personal Data
Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
Usage Data
Information collected automatically through this Application (or third-party services employed in this Application), which can include: the IP addresses or domain names of the computers utilized by the
Users who use this Application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment.
User
The individual using this Application who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor
The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.
Data Controller
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.
The Application
The means by which the Personal Data of the User is collected and processed. Service
The service provided by this Application as described in the relative terms (if available) and on this site/application.
Cookie
Cookies are Trackers consisting of small sets of data stored in the User’s browser. Tracker
Tracker indicates any technology – e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that enables the tracking of Users, for example by accessing or storing information on the User’s device.
Provides access to the User’s primary email address.
Legal information
This privacy statement has been drafted according to the rules coming from the EU Regulation (EU) 2016/679 (General Data Protection Regulation).
Startup Studios
Follow us: Linkedin
Privacy Policy