INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

 

Auditel S.r.l. hereby provides the information notice ("Information Notice") regarding the processing of personal data of users ("Users" or "User") who use the CUSV portal, i.e. Unique Code for Video Spots ("CUSV Portal"), in their capacity as data subjects ("Data Subjects").

 

Users acknowledge that their personal data will be processed in accordance with this Information Notice and in compliance with Regulation (EU) No. 679 of April 27, 2016, the so-called General Data Protection Regulation ("Regulation" or "GDPR"), other applicable European Union provisions, as well as applicable personal data protection laws of individual Member States, as amended or replaced from time to time, such as in particular Legislative Decree 196/2003 as amended ("Privacy Code" and, jointly, the "Applicable Privacy Law").

 

This information notice is provided solely for the CUSV Portal and does not extend to processing carried out by third parties possibly accessible by Users through links. Auditel assumes no responsibility for such further processing, and Users should refer to the respective privacy policies of third-party websites.

 

1. Who is the Data Controller of your personal data?

The Data Controller of your personal data is Auditel S.r.l., with registered office in via Larga 11, 20122 Milan.

 

2. Who is the Data Protection Officer (DPO)?

The Data Protection Officer of Auditel, pursuant to Article 37 of the Regulation, can be contacted at the following addresses:

Email: DPO@auditel.it; PEC: DPOauditel@legalmail.it

 

3. What are the purposes and legal bases for the processing?

Through the CUSV Portal, Auditel may collect and process the personal data of Users for the following purposes:

1. a) Activation and operational management of the services offered by the CUSV Portal in the context of the Beta Phase, including related activities such as service communication, software maintenance, login system and access/privilege control management, technical support and Help Desk, handling of reports, as well as administrative-accounting purposes and related activities connected to the User relationship. For these purposes, the legal basis for data processing is the performance of the service expressly requested by the Users. Therefore, no express consent is required;
2. b) Pursuit of the legitimate interests of Auditel and/or third parties (e.g., the right to legal defense, complaints and dispute management, fraud and/or illegal activity prevention), which, according to the Controller’s assessment, do not override the fundamental rights and freedoms of Users and constitute the legal basis for the processing;
3. c) Compliance with legal obligations, regulations, national and EU legislation, and requirements from authorities legally empowered to make such requests, which also represent the legal basis for the processing.

 

4. Methods of processing your personal data

Your personal data is processed using electronic and manual means, strictly related to the purposes outlined, and in a way that ensures appropriate security, in accordance with Article 5 of the Regulation.

 

5. Personal data processed, nature of the provision, and consequences of refusal

Auditel receives and collects, via the CUSV Portal, information relating to Users who visit and/or use the services available on the CUSV Portal. In particular, Auditel collects and processes the following information.

• Data voluntarily provided by Users

 

Auditel limits the collection of User data solely to that necessary for the purposes described in section 3 and for the services expressly requested. In particular, Auditel collects the following information:

• data of the company requesting registration to the CUSV Portal: type, company name, VAT number, registered office address;
• data of the company representative: first name, last name, email, phone number.

 

Specifically, in order to register a company on the CUSV Portal, an employee or collaborator appointed by the company must submit a registration request providing the above data. The company representative will receive an email with the completed registration request and must approve it. Once accepted by the company representative, the request is sent to Auditel for final approval after verification of the company data. The registration confirmation will be sent by email to the company representative.

After Auditel accepts the company registration request, its authorized employees/collaborators may create their own User accounts by providing the following personal data: first name, last name, email, phone number, password.

 

Throughout the data entry process, mandatory fields are marked with an asterisk (*). Therefore, failure to provide the required data for registering the company or User will result in the inability to complete the registration and access the services offered by the CUSV Portal.

 

With regard to the data provided, each User guarantees the accuracy and truthfulness of the personal data submitted, and in the case of data relating to third parties (e.g., company representative), confirms that they have provided this Information Notice to such individuals and/or have clearly explained the processing activities performed by Auditel on the CUSV Portal.

 

6. Will the data be shared with third parties?

Your personal data may be shared with the following categories of recipients:

• Auditel’s internal personnel authorized to process the data (e.g., technical or legal department), who access the data on a need-to-know basis;
• external entities including public bodies, authorities, and institutions;
• providers of technical and organizational services (e.g., IT system management services).

The updated list of parties to whom Auditel discloses personal data is available upon request by sending an email to: privacy@auditel.it.

Your personal data is not disseminated, except as required by law.

 

7. Will the data be transferred abroad?

Personal data is stored on servers located in Italy, within the European Union. However, if necessary, the Controller may store data on servers located outside the EU. In such cases, the Controller ensures that any transfer of personal data outside the EU will comply with applicable legal requirements.

 

8. How long does Auditel retain the collected data?

Data is processed for the time necessary to provide the services requested by Users and to perform the related and instrumental activities as described in section 3, and is deleted when the purposes for which it was collected and processed no longer exist. Specifically, personal data will be retained for the entire duration of the service used by the User, and thereafter for the time necessary to fulfill any related obligations, including legal obligations and limitation periods provided by applicable law.

 

9. What rights can the data subject exercise against Auditel?

Pursuant to the Regulation, you may, according to the methods and within the limits provided by current legislation, exercise the following rights:

• Right of Access (Art. 15): You may request confirmation of whether your data is being processed;
• Right to Rectification (Art. 16): You may request modification, update, or correction of your data if inaccurate;
• Right to Erasure (Art. 17): You may request deletion of all or some of your data if processing is no longer necessary or if the law allows it;
• Right to Restrict Processing (Art. 18): You may request to limit how your data is used (e.g., if the data is inaccurate or its possession is unlawful);
• Right to Data Portability (Art. 20): You may request a copy of your personal data;
• Right to Object (Art. 21): You may request that we stop using your data entirely (e.g., if we are no longer legally authorized to do so);
• You also have the right to withdraw your consent at any time, with withdrawal effective from the moment we become aware of it, without affecting the lawfulness of the processing based on prior consent;
• Finally, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

 

10. Changes to this Information Notice

Auditel reserves the right to modify this information notice at any time, giving notice to the User where necessary.

 

11. Contact Information

You may contact the Data Controller and the Data Protection Officer at any time at the following addresses:

 

Auditel S.r.l.

via Larga n. 11, 20122 Milan

email: privacy@auditel.it

 

Auditel’s Data Protection Officer:

Email: DPO@auditel.it;

PEC: DPOauditel@legalmail.it.