Data Controller
Cosmico S.r.l.
Viale Pasubio 5, 20154 Milano, Italy
VAT: IT11186440969
Data Protection Contact: privacy@wearecosmico.com
Scope
This Privacy Policy applies to visitors of playnew.com and users of the Play New Platform. It describes how we collect, use, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Italian data protection laws.
Personal data we collect
Browsing data
When you visit our website, we automatically collect certain information including your IP address, browser type, device identifiers, pages visited, and timestamps. This data is collected through cookies and similar technologies as described in our Cookie Policy.
Account data (Play New Platform)
If you register for the Play New Platform, we collect the information you provide during registration, including your name, email address, organization name, and login credentials. We may also collect information about your role and professional context to personalize your experience.
Usage data (Play New Platform)
When you use the Play New Platform, we collect data about your interactions with the service, including capabilities you create or install, contexts you define, and how you use the platform features. This data helps us improve the service and provide better recommendations.
Contact data
When you contact us through our website or email, we collect the information you provide, such as your name, email address, and the content of your message.
How we use your data
We process your personal data for the following purposes:
- Service provision: To provide and maintain the Play New Platform, manage your account, and deliver the features you use.
- Communication: To respond to your inquiries, send service-related notifications, and provide customer support.
- Improvement: To analyze usage patterns, understand how our services are used, and improve functionality and user experience.
- Security: To protect our services, detect fraud, and ensure the security of your account and data.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
- Marketing: With your consent, to send newsletters, event invitations, and other marketing communications.
Legal basis for processing
We process your personal data based on the following legal grounds:
- Contract performance: Processing necessary to provide our services (Art. 6(1)(b) GDPR).
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and ensuring security (Art. 6(1)(f) GDPR).
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications (Art. 6(1)(a) GDPR).
- Legal obligation: Processing necessary to comply with legal requirements (Art. 6(1)(c) GDPR).
Data sharing
We may share your personal data with:
- Service providers: Third parties who help us operate our business, such as hosting providers, analytics services, and customer support tools. These providers process data only on our behalf and in accordance with our instructions.
- Legal authorities: When required by law, court order, or to protect our rights and the safety of others.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
We do not sell your personal data to third parties.
International transfers
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, in accordance with Articles 44-49 of the GDPR.
Data retention
We retain your personal data for the following periods:
- Browsing data: Up to 12 months.
- Account data: For the duration of your account and for a reasonable period thereafter to comply with legal obligations.
- Marketing data: Until you withdraw consent or up to 24 months after your last interaction with us.
- Legal records: As required by applicable law.
Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: Request confirmation of whether we process your data and obtain a copy.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data under certain circumstances.
- Restriction: Request limitation of processing under certain circumstances.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: Withdraw your consent at any time where processing is based on consent.
To exercise these rights, contact us at privacy@wearecosmico.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
Special categories of data
We do not intentionally collect special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health information, or sexual orientation). Please do not provide such information through our services.
Updates to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. For significant changes, we will provide more prominent notice.
Contact us
If you have questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@wearecosmico.com.