Information pursuant to art. 13 of eu regulation 2016/679 on the protection of personal data
The following is a description of the way in which the website www.fantaeurovision.com is managed with regard to the processing of the personal data of the users who use it.
We are aware of the importance of protecting the confidentiality of personal data and we are committed to complying with the directives and regulations in force regarding privacy and data protection that guarantee safe and confidential internet browsing.
This information is also provided for all sites and services under the domain www.fantaeurovision.com and not for other websites that may be consulted via links.
The information is also based on national and European regulations, including Recommendation no. 2/2001 of the Article 29 Working Party on minimum requirements for the collection of personal data on-line in the European Union, to identify the minimum requirements for the collection of personal data on-line and, in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.
The data controller
General principles for the processing of personal data
The processing of personal data is based on the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality. In particular:
we process the data exclusively for the purposes and in the manner described in the information notice
we process data for purposes for which the prior consent of the data subject is required only if expressly authorised
we respect anonymity, allowing anonymous browsing of the site in areas that do not require authentication, except for the automatic acquisition of browsing data
we make data available to third parties solely for purposes instrumental to the provision of the requested service or in other cases, except where permitted by law, only when the data subject has given his or her consent
we respect the rights of the interested parties, responding to requests for cancellation, modification, integration of the data provided, opposition to the processing of data for the purpose of sending commercial and advertising information
we ensure proper and lawful management of personal data, safeguarding the data subject's right to confidentiality, as well as applying appropriate security measures to protect the confidentiality, integrity and availability of the data we process
we ensure maximum transparency, accompanying each data collection action with appropriate information
Types of data processed
"Personal data" means "any information relating to an identified or identifiable natural person (i.e. the data subject); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity;" (Art 4 of EU Regulation 2016/679).
Therefore, personal data are the name, contact information and contact details, as well as any other information that is, directly or indirectly, derived from these data.
When registering on the site and creating an account, as well as afterwards, by filling in special forms and registration forms, you will be asked to provide some personal data, such as your nickname and e-mail address.
Subsequently, in the management section of your profile, you can optionally upload a photo of yourself. Uploading is subject to the consent provided during registration.
Registration can take place via Google, using the OAuth protocol for access delegation, which allows the www.fantaeurovision.com website to obtain certain personal information from Google (name, email address, language preference and profile picture) without having to provide a password.
More information on Google's data processing: https://policies.google.com/privacy?gl=IT&hl=it
The information requested during registration will be used to enable access to online services and to ensure the proper performance of all activities connected with or instrumental to the provision of such services.
Data provided voluntarily by the user
The voluntary and explicit sending of e-mail messages to the addresses indicated in the various access channels of the site and the filling in of the forms specifically provided (e.g. contact form) entails the acquisition of the e-mail address and the sender's data, which are necessary to reply to the requests produced.
The sending of these data is optional, explicit and voluntary, and involves the subsequent acquisition of the data transmitted: we will process these data assuming that they refer to the sender. In this case, the sender is the autonomous owner of the processing, and assumes all the obligations and responsibilities of the law, giving the widest possible indemnity against any dispute, claim, request for compensation for damage caused by processing, etc.. that we may receive, even from third parties whose personal data have been processed through the use of the site in violation of current regulations.
We invite you not to send personal data unless strictly necessary: some categories of personal data may be processed only with the explicit consent of the user and in compliance with current legislation.
Specific summary information will be reported or displayed on the pages of the site set up for particular services on request.
The computer systems and software procedures used to operate the website www.fantaeurovision.com acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested users, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or the domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the browser and operating system used and other parameters relating to the user's operating system and computer environment.
These data are used solely for the purpose of obtaining statistical information not associated with any user identification data on the use of the site and to check its correct operation and are deleted immediately after processing or within a few days at most. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.
This data is stored in our systems or in those of service providers, who act as data processors for the management of the website.
Access to the site, consultation of its contents and use of the services allows the web server to automatically record so-called "system logs", i.e. information that the user's browser sends while browsing the site. This information consists of the web pages requested by the user, the documents consulted, modified or created, the IP address, the type of browser, the browser language and the date and time of the request.
Commercial communications and newsletters
The processing of personal data collected through subscription to the newsletter is carried out in order to promote and advertise our services and activities, by sending communications and informative and advertising material by e-mail.
This type of service allows us to manage a database of contacts used to communicate with the user.
These services may also allow us to collect data relating to the date and time of viewing of messages by the user, as well as the user's interaction with them, such as information on clicks on links in the messages.
At any time, you may unsubscribe from receiving commercial communications by using the unsubscribe tools available in the communications or update your communication preferences, limit or deny them altogether.
For the newsletter services we use MailUP, an address management service and sending email messages provided by Growens S.p.A (https://www.mailup.it/), which acquires personal data provided by subscribing to the newsletter.
Statistical analysis services allow us to monitor and analyse traffic data in order to measure the functioning of the site for research purposes, usability evaluations and interest.
This site uses Google Analytics, a service for the statistical analysis of browsing activities provided by Google Inc. (or Google Ireland Limited, depending on where the site is accessed).
Google Analytics uses your personal data, including the data you provide to Google when registering for other services, to track and examine your use of this website, compile reports and share them with other services developed by Google.
Google may use the user's personal data to contextualise and personalise ads in its advertising network.
Google makes an add-on available to deactivate Google Analytics data collection(https://goo.gl/BdFny5).
Google Fonts is a service for displaying font styles operated by Google LLC (or by Google Ireland Limited, depending on where the site is accessed) which allows styles to be integrated into the pages of the site.
Data relating to minors
The activities on this site are intended for adults. We do not accept registrations from anyone under the age of 18, nor will we knowingly collect or use personal information from them. Minors are therefore advised not to register on the site.
Profiling by automated processing of personal data
There are automated systems for profiling users for advertising purposes, aimed at analysing or predicting aspects of the user's browsing habits on the basis of the browsing activities performed.
Purpose and legal basis of processing
We process personal data for different purposes, which we specify below:
1. Management of play activities, handling of request and provision of services
We use your personal data exclusively for the management of the game activity as set out in the regulations:
a) for the creation of the user account and purposes related to its management, in case of possible registration to the site
b) to verify your identity, also in case of access restoration support
c) to handle any kind of support request, and provide additional services requested by the user
Regulation (Article 6(1)(b) GDPR).
Consent is not necessary.
In the event of a total or partial refusal to provide the aforementioned data, it will not be possible to complete registration and access the services of the site.
Uploading a photo is optional.
d) to manage the profile photo for promotional and publicity purposes
Processing is carried out on the basis of the consent of the person concerned (Article 6(1)(a) of the GDPR and Article 96 of the Copyright Act).
Uploading the photo is optional.
e) to follow up any requests made to us, e.g. by spontaneously sending messages, electronic or traditional mail to the addresses indicated on the site, which entail the subsequent acquisition of the sender's data, the sender's e-mail address necessary to reply to the requests, as well as any other personal data included in the relative communications.
The processing is carried out in the context of the performance of a contract to which the user is a party or the execution of pre-contractual measures taken at the user's request (Art. 6, para. 1, letter b) of the Regulation).
Consent is not necessary.
In the event of total or partial refusal to provide the aforementioned data, it will not be possible to respond to requests.
f) for the fulfilment of obligations laid down in laws, regulations and national and/or Community legislation, as well as provisions issued by authorities empowered to do so by law or by supervisory and control bodies;
g) prevent or detect any abuse in the use of the site, or any fraudulent activity, and thus enable us to protect ourselves in the courts
The processing is necessary in order to comply with a legal obligation (Art. 6(1)(a) of the Regulation).
Consent is not necessary.
In the event of total or partial refusal to provide the aforementioned data, it will not be possible to complete registration and access the services of the site.
2. Marketing and sales promotion activities
a) for marketing purposes, by sending e-mail newsletters with communications, advertising, promotional and informative material, market research and surveys concerning the activities and services offered by the Controller
Consent is necessary to carry out the processing.
Consent is in any case optional. The lack of consent, or its subsequent revocation, will not have any consequence in the provision of services, except the inability to receive communications and updates on activities, services and promotions.
The user, when sending any communication, will have the right to express his or her opposition to the processing of data, in accordance with the rights recognised to him or her.
3. Profiling by means of automated processing of personal data (Google Adsense)
a) through third-party services: to analyse or forecast aspects concerning choices, browsing habits, also relating to the geographical area of reference, as well as to create aggregate profiles for the purpose of conducting market research, carrying out promotional activities and proposing personalised offers.
Consent is necessary to carry out the processing.
Consent is given by selecting your preference in the cookie banner and can be revoked at any time.
Consent is in any case optional. The lack of consent, or its subsequent revocation, will not have any consequence in the provision of services, except for the impossibility of receiving communications in line with user preferences and optimising the services offered
Purpose of processing navigation data and system logs
The personal data whose transmission is implicit in the use of Internet communication protocols and system LOGs are processed solely to obtain anonymous statistical information on the use of the site, to check its correct operation and to protect the computer systems that enable its operation.
The data do not allow the identification of the persons concerned and are not associated with other data sources that may allow assimilation in such a way as to identify the users.
Such data, such as the user's IP address, could also be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
Purpose processing the profile picture and disclaimer of use
By registering and giving your consent to the creation of your user profile, uploading your profile photo, you authorise us to acquire, reproduce, use and publish on the website, web and social channels or in any other medium intended for dissemination, without territorial or temporal limits, your images, for promotional and dissemination purposes of the activities and services provided and promoted by us.
The posing and use of the aforementioned images are to be considered carried out free of charge, without any claims from fantaeurovision.com, under any title or cause, in relation to the rights to your image granted therein.
You declare that you have read and understood the information on the processing of personal data and that you consider these images suitable for publication.
You release fantaeurovision.com from any responsibility in relation to the image and inherent to the incorrect use of the images by third parties as well as from any direct or indirect responsibility inherent to damage to the image or confidentiality that goes beyond the legal obligations to which fantaeurovision.com is bound.
Obligation or opinion to provide data
Apart from what has been specified above for navigation data, the user is free to provide the personal data indicated in the forms or in the registration procedures. Failure to provide such data may make it impossible to obtain what has been requested or to perform certain services, as specified below with reference to the above-mentioned purposes:
1. Provision of service
the provision of data (possibly marked as necessary in the forms) is necessary for the pursuit of the purposes referred to in paragraph 1 and any refusal to provide it will make it impossible to meet the requests of users and for them to use the services available through the website.
2. Marketing and commercial promotion activities
the provision of data, based on the user's consent, is optional for the pursuit of the purposes set out in point 2 and failure to provide such data, or the withdrawal of consent, will not allow promotional communications to be sent. Failure to provide the data will not have any consequence in the provision of services.
3. Profiling throught automated processing of personal data
The provision of data, based on the user's consent, is optional for the pursuit of the purposes set out in point 3 and failure to provide it, or withdrawal of consent, will not allow profiling activities, i.e. the sending of commercial and promotional communications in line with the interests expressed or showing the user personalised advertising messages. Failure to provide consent will not have any consequence in the provision of services.
Mathods of treatment
We process personal data using automated tools and with, methods and procedures for the time strictly necessary to achieve the purposes for which they have been collected and for the pursuit of the aims set out in this statement.
The processing is carried out by specially appointed personnel, mainly with the aid of electronic, computerised or otherwise automated means, through the use of electronic mail or other remote communication techniques.
The data is stored for the time necessary to provide the requested service.
If you decide to delete your account, your data will be immediately deleted from our systems or anonymised for statistical purposes, except for LOG data and data necessary to ensure the security of the system and storage obligations prescribed by law or indicated otherwise by the person concerned.
In any case, we may process personal data for as long as permitted by law, in particular as may be necessary to protect our interests from possible claims or in the event of litigation.
For the purposes of marketing, sales promotion and profiling, we will retain your data until you withdraw your consent, after which we will no longer use your personal data for such purposes, reserving the right to retain it as long as may be necessary to protect our interests from possible claims based on such processing.
Furthermore, at least once a year, we will check the continuity of your subscription to the newsletter, proceeding to the cancellation of the addresses that are no longer valid or inactive.
We adopt specific, appropriate and preventive security measures to safeguard the confidentiality, integrity, completeness and availability of personal data, as well as to prevent data loss, unlawful or incorrect use and unauthorised access.
In particular, the site uses an encryption system with SSL (Secure Sockets Layer) technology, which guarantees protection by encrypting information both on the access page and in the other sections where you can release, view or modify your personal data.
In any case, we are not responsible for untruthful or incomplete information sent directly by the user (e.g.: correctness of e-mail address), as well as information concerning the user that has been provided by a third party, even fraudulently.
Recipients of personal data
Personal data may be communicated to third parties who can access the data by virtue of a provision of law, regulation or Community legislation, within the limits provided for by such rules.
For the provision and management of services, personal data may be communicated to other subjects, in their capacity as autonomous data processors and/or controllers (such as, for example, web service providers, e-mail or technical services that provide services instrumental to the provision of site services, subjects that provide assistance and consultancy in technical, administrative, legal, etc. matters relating to the provision of services, internal staff authorised to process data and bound by confidentiality obligations) to the extent necessary to carry out their duties for us, and have committed themselves to confidentiality, including with appropriate legal obligations.
The data may also be disclosed to persons, entities or authorities in order to comply with legal obligations, to protect against abuse or fraud, or by order of the authorities. A full list of these entities is available on request.
Place of data processing
Personal data will be stored on servers and databases located in the United States, at Google INC.
Trattamento verso paesi terzi
Some of your personal data are transferred to recipients outside the European Union. This applies in particular to the hosting and statistical services Google Analytics or the advertising services Google ADSense. The processing of personal data by these recipients takes place in accordance with the requirements of the applicable legislation, i.e. on the basis of standard contractual clauses approved by the European Commission.
More information on the transfer and the agreements that justify it can be found at
Rights of the persons concerned
You are entitled to the rights set out in Articles 15 to 22 of EU Regulation 2016/679, namely, in summary, the right to request at any time:
access to your personal data, as well as further information on their processing
rectification or updating of the data
deletion of your data
You can also:
object to the processing,
request the restriction of processing
obtain the data concerning you in a structured, commonly used and machine-readable format
revoke consent for the purposes of processing that require it
You also have the right to lodge a complaint with the competent supervisory authority (in Italy: Garante per la Protezione dei Dati Personali, [email protected]) which you may contact if you believe that your personal data is being processed in breach of the law or your rights.
The rights listed above may be exercised by the data subject, at any time, by contacting the Data Controller.
Registered users may at any time view, modify and delete their personal data by accessing the data modification mask within their personal account.
Changes and updates
Last update: 25/03/2022