Privacy Policy

Who we are

Our website address is: https://www.theworldiswatchingyou.com.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form as well as the visitor’s IP address and the browser user agent string to facilitate spam detection.

An anonymized string created from your email address (otherwise called a hash) can be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images that include embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site, you can choose to save your name, email address and website in cookies. They are used for your convenience so that you do not have to re-enter your details when you leave another comment. These cookies will last for one year.

If you visit the login page, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, several cookies will be set to save your login information and your screen display options. Login cookies last for two days and screen options cookies last for one year. If you select “Remember me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not include personal data, but simply indicates the ID of the article just modified. It expires after 1 day.

Further information can be found on the Cookie Policy page.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). The contents incorporated from other websites behave in exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, integrate additional third-party tracking and monitor interaction with them, including tracking your interaction with the embedded content if you have an account and are connected to those websites.

Furthermore, our site may contain links to sites not managed by the Owner. The Owner does not control these sites and therefore is in no way responsible for their content.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we keep your data

If you leave a comment, the comment and its metadata are kept indefinitely. This is how we can automatically recognize and approve any subsequent comments instead of keeping them in a moderation queue.

For users who register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit or delete their personal information at any time (except their username which they cannot change). Website administrators can also see and edit this information.

What rights you have on your data

If you have an account on this site, or have left comments, you can request to receive a file exported from the site with the personal data we hold about you, including any data you have provided to us. You can also request that we delete all personal data concerning you. This does not include any data we are required to keep for administrative, legal or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

In addition

The disclosure is a general obligation that must be fulfilled before or at the latest when starting the direct collection of personal data. In the case of personal data not collected directly from the interested party, the information must be provided within a reasonable time, or at the time of communication (not of registration) of the data (to third parties or to the interested party). Pursuant to the General Regulation for the Protection of Personal Data of Individuals (GDPR – Reg. (EU) 2016/679), the undersigned organization, data controller, informs of the following:

Sources and categories of Personal Data

The personal data held by the undersigned organization are collected directly from the interested parties. This site also does not collect sensitive data, by which we mean those suitable for revealing racial or ethnic origin, philosophical or other religious beliefs, political opinions, membership of trade unions, associations or organizations of a religious or philosophical nature, political or trade union, health status and sex life.

Navigation data

The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

Profiling data

Profiling data regarding the consumer habits or choices of the interested party are not directly acquired. However, it is possible that through links or by incorporating elements of third parties, such information may be acquired by independent or separate subjects. In this regard, see the section on third-party cookies.

Cookies

Further information can be found on the Cookie Policy page.

Technical cookies

Further information can be found on the Cookie Policy page.

Third party cookies

Further information can be found on the Cookie Policy page.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on the site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the e-mail. Even the explicit and voluntary sending of forms that can be filled in on the site containing data of the interested party involves processing to follow up on pre-contractual obligations or the execution of the services provided for by sending the forms. Such information in the forms may relate to personal data, contact details, address details, telephone numbers, email addresses of the interested parties and of identified and identifiable third parties having cause with the user of the site. However, specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

Purpose and legal basis of the processing

Personal data are used (ref. Articles 6 (b) of the GDPR):

  1. to allow navigation on the site and
  2. possibly to perform the service or provision requested as part of the normal activity carried out by the undersigned organization (Italian ateco code 73.2 market research and opinion polls).

Furthermore, all personal data can be processed:

  1. for purposes related to obligations established by law, as well as by provisions issued by authorities legitimated by the law (ref. Articles 6 (c) and 9 (b, g, h) of the GDPR);
  2. for the assessment, exercise or defense of a right in judicial and extrajudicial (legitimate interest) of the undersigned organization (ref. Articles 6 (f) and 9 (f) of the GDPR);
  3. for direct marketing purposes according to the legitimate interest of the Data Controller in particular; for cookies, the advertising ids used to show advertisements and announcements; for e-mail addresses for sending the newsletter; for browsing and usage logs to protect the site and service from cyber-attacks; in these cases, the interested party can always deny consent so that the Data Controller will refrain from processing (ref. Articles 6 (f) of the GDPR);
  4. for purposes functional to the activity for which the interested party has the right to give consent or not, such as for example subscription to the newsletter to receive information messages and messages for the promotion and sale of products and services, detection of the degree of satisfaction, communication of data to third parties for receiving information and promotional communications and marketing (GDPR Article 6 (a).

Consequences of refusal to provide data

The provision of data collected from the interested party is optional but essential for the purpose of processing them for the purposes in letters a) and b). In the event that the interested parties do not communicate their indispensable data and do not allow the processing, it will not be possible to proceed with the completion and implementation of the proposed services and to follow up on the contractual obligations undertaken, with consequent prejudice for the correct fulfillment of regulatory obligations, such as e.g. accounting, fiscal and administrative ones, etc..

Apart from what is specified for navigation data, the user is free to provide personal data for cookies and specific requests through forms e.g. on products and/or services. Failure to provide them may make it impossible to obtain what is requested. For all non-essential data, including sensitive data, the provision is optional. In the absence of consent or incomplete or incorrect provision of certain data, including sensitive data, the required formalities could be so incomplete as to cause prejudice either in terms of sanctions or loss of benefits, or due to the impossibility of guaranteeing the adequacy of the treatment the same to the obligations for which it is carried out, and to the possible mismatch of the results of the treatment itself with the obligations imposed by the law to which it is addressed, intending to exempt the undersigned organization from any and all responsibility for any penalties or afflictive measures.

Methods of data processing

The treatments connected to the web services of the site are treated with automated tools for the time strictly necessary to achieve the purposes for which they were collected; take place on the server in Italy or EU and are only handled by technical personnel in charge of processing, or by any persons in charge of maintenance and administration operations. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access and the loss of confidentiality. The structure is equipped with anti-intrusion devices, firewalls, logs and disaster recovery. Specific encryption and data segregation mechanisms and user authentication and authorization mechanisms are used.

Data processing means their collection, registration, organization, storage, processing, modification, cancellation and destruction or the combination of two or more of these operations. In relation to the aforementioned purposes, the processing of personal data takes place using manual, computerized and telematic tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of personal data will therefore be processed in compliance with the methods indicated in art. 5 EU Regulation 2016/679, which provides, among other things, that the data are processed lawfully and fairly, collected and recorded for specific, explicit and legitimate, exact, and if necessary updated, relevant purposes, complete and not excessive in relation to the purposes of the processing, in compliance with fundamental rights and freedoms, as well as the dignity of the interested party with particular reference to confidentiality and personal identity, through protection and security measures. The undersigned organization has prepared and will further improve the data access and storage security system.

An automated decision-making process (e.g. profiling) is not carried out.

Transfers outside the EU

The processing takes place in non-EU and non-EEA countries, when the connections to the site come from these countries (at the request of the interested party who is there).

Retention period

Personal data will be kept, in general, as long as the purposes of the processing persist according to the category of data processed.

The data will not be disseminated unless otherwise provided by law or after anonymisation. Except as specified for cookies and third-party elements, without the prior general consent of the interested party to communicate with third parties, it will be possible to carry out only services that do not provide for such communications. In case of need, specific and timely consents will be requested and the subjects who receive the data will use them as independent owners.

Categories of recipients

In some cases (not subject to the ordinary management of this site) the Authority may request news and information, for the purpose of monitoring the processing of personal data. In these cases, the reply is mandatory under penalty of an administrative sanction.

Rights of the interested party

At any time you can: exercise your rights (access, rectification, cancellation, limitation, portability, opposition, absence of automated decision-making processes) when provided for in relation to the data controller, pursuant to art. from 15 to 22 of the GDPR; propose a complaint to the Guarantor (www.garanteprivacy.it); if the treatment is based on consent, revoke this consent given, taking into account that the revocation of the consent does not affect the lawfulness of the treatment based on the consent before the revocation.

Disabling cookies

Further information can be found on the Cookie Policy page.

Addresses and contacts

The data controller is https://www.theworldiswatchingyou.com.

The contact details are: info@theworldiswatchingyou.com.

Information prepared pursuant to the General Data Protection Regulation of the European Union (GDPR) no. 2016/679 and Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018 and following.