Please wait...
INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to art. 13 of EU Regulation 2016/679, General Data Protection Regulation ('GDPR') and Legislative Decree no. 196/2003, Personal Data Protection Code ('Privacy Code').
Version – 20 January 2023
Dear customer, this information is provided for the website "www.misteralert.com" owned and managed by the company MisterAlert S.r.l., with headquarters in Bologna, Via Clavature 18, as Data Controller, and not for other third-party websites that may be consulted by the user via links. This information is provided pursuant to art. 13 GDPR and the Privacy Code, limited to the provisions applicable compatibly with the GDPR, as well as in compliance with Recommendation no. 2/2001 that the European Authorities for the Protection of Personal Data, gathered in the Group established by art. 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and subsequent amendments and additions. Any future additions or changes to this list will be duly brought to your attention. The information is intended for all subjects who interact with the web pages of the Site, both those who use the Site without registering, and those who, at the end of a specific procedure, register on the Site and use the online services provided through it.
Unless otherwise indicated in this information notice, the data controller of your personal data is Mister Alert S.r.l., with registered office in via Clavature, n. 18 – 40124 – Bologna, Italy, e-mail: info@misteralert.com.
This information notice is based on the definitions in art. 4 of the European Regulation on data protection (GDPR), the essential elements of which are reported below, in order to facilitate the understanding of the text of the information notice itself:
Please note that the processing of your personal data may be carried out by Mister Alert for the reasons listed below.
We inform you that in cases where you access the Site (by registering, or without registering with a specific customer account), to obtain information on our products and use the services offered by the Site, we will process your data in the manner detailed below.
When you visit the Site, you can also register, thus creating a customer account, through which you can purchase services, find out about events and leisure activities. Registration and use of the customer account require that you provide Mister Alert with your personal data, some of which are mandatory (i.e. those marked in the input mask). Therefore, in this case, we process your personal data to: (i) allow you to create, use your customer account and purchase the services offered (ii) verify the user in case of changes to the personal data in the customer account For this purpose, the processing is carried out on the basis of art. 6 par. 1 letter b) and f) of the GDPR, i.e. in compliance with our legitimate interest and for the purpose of executing the contract for the purchase of services.
When you purchase a ticket on the Site, we process the personal data that you provide to us at the time of purchase. In this case, the data is processed for the purpose of executing the contract for the purchase of services pursuant to art. 6 par. 1 letter b) GDPR. If at the time of purchasing a service you provide us with the data of a third party, we invite you to ensure that the third party is sufficiently informed by you on the data processing carried out by Mister Alert and that you are authorised to provide us with such data. It is specified that for the purposes of executing and managing the contract pursuant to art. 6 par. 1 letter b) of the GDPR, the processing of your data necessary for the 3D-Secure 2.0 procedure is also carried out, which applies in the event that you make payments on the Site by credit card, in order to guarantee the security of the same and to protect against any fraudulent use of the credit card data. This is a global standard of card networks (eg. VISA, VISA ELECTRON, MASTERCARD, AMERICAN EXPRESS, JCB, DINERS, DISCOVER and POSTEPAY) that confirms that the person initiating a digital transaction is also authorized to use the respective payment card, or is intended to prevent the improper use of your credit card. For more information on the procedure, see the Terms and Conditions of Purchase. Possibly, depending on what has emerged, the credit institution may request the credit card holder to authenticate the payment transaction, for example via a transaction authentication number or via App. This procedure was introduced by European Directive 2366/2015 (SPD2).
If you have questions about the services, your customer account, if you wish to exercise your rights under this data protection notice or if you wish to submit a complaint, you can contact us directly at the contact details that you will find in section 9 of this notice. Depending on the subject of your request, we may use the personal data stored in our systems and that you have provided us with in the course of other data processing (for example, the data you provided when purchasing tickets) to answer your questions. In this case, your data will be processed for the purpose of executing the contract pursuant to Art. 6 par. 1 letter b) of the GDPR. In the event that the processing takes place in order to allow you to exercise your rights or to respond to requests from the competent authorities, your data will be processed in order to comply with legal obligations pursuant to Art. 6 par. 1 letter c) of the GDPR. If you wish to inquire about our products and services or submit a complaint, we will process your personal data for our legitimate interests in responding to your request on the basis of Art. 6 par. 1 letter f) of the GDPR.
If necessary, we will reverse the transaction you made on the Site and in this case your data will be processed on the basis of art. 6 par. 1 letter b) of the GDPR.
The provision of data for the fulfillment of contractual obligations, for the fulfillment of legal obligations and with reference to the legitimate interest of Mister Alert is purely optional. However, since such processing is necessary to allow registration on the Site and the provision by Mister Alert of the services offered by it through the Site, failure to provide, partial or incorrect provision of the data in question will make it impossible, depending on the case, to register on the Site and to use the services provided online by Mister Alert through the Site and, in general, to proceed with the contractual relationship by establishing or established and/or to fulfill the obligations as provided for by the contract or by the applicable law or, again, to process your specific requests, as well as the impossibility for the Company to send you generic information on products or services similar to those subject to a previous purchase, to carry out market research, also aimed at assessing the degree of user satisfaction and thus improve its services, or in any case to pursue its own legitimate interests (such as the defense in court of one's own right).
Your data may be communicated to the following categories of subjects ("recipients"), which will be better described in the remainder of this information notice: a) to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions; b) to banks and companies that manage national or international payment circuits through which online payments are made for products purchased through the Site, including, where applicable, for the reversal of transactions carried out by you on the Site; c) to all those subjects, public and/or private, natural and/or legal persons (Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if communication is necessary or functional to the correct fulfillment of the contractual obligations undertaken, as well as the obligations deriving from the law. The data concerning you will not be disclosed, except in aggregate form; In addition to the above, your personal data is transferred to IT service providers who provide the platforms, databases and tools to operate our products and services (for example, our website). In this case, the transfer of your personal data takes place for the purpose of performing the contract on the basis of Art. 6 para. 1 lit. b) GDPR, for our legitimate interest in improving and promoting our products, on the basis of Art. 6 para. 6 lit. f) GDPR and provided that you have given us your consent to the processing in accordance with Art. 6 para. 6 lit. a) GDPR. In addition to the above, we transfer your personal data only and to the extent that there is a legal obligation on our part to pass it on. The transfer takes place on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR (e.g. to police authorities in the context of criminal investigations or to data protection supervisory authorities). In any case, the personal data subject to processing will not be transferred to non-EU countries or outside the European Economic Area except for processing carried out in the context of the transfers declared in this information notice.
Except as indicated above, the user's data will be processed and stored for the entire duration of the contractual relationship and, subsequently, for the maximum time provided for by the applicable legal provisions regarding the limitation of rights and/or forfeiture of the action and, in general, for the exercise/defense of Mister Alert's rights in disputes brought by public authorities, public entities/entities and private entities.
Please note that the Site does not contain information, features or services directly intended for users under the age of 16. Minors must not provide information or personal data without the consent of those exercising parental responsibility over them. Mister Alert therefore invites all users who are under 16 years of age not to communicate their personal data under any circumstances without the prior authorization of a parent or the person exercising parental responsibility. If the Company becomes aware of the fact that personal data has been provided by a minor (under 16 years of age), the Company itself will proceed to the immediate destruction of the same or to request the transmission of specific consent by the parents (or the person exercising parental responsibility), also reserving the right to inhibit access to the services available on the Site to any user who has concealed their minority or who has in any case communicated their personal data without the consent of their parents (or the person exercising parental responsibility).
As the interested party, you have the right to ask the Data Controller to exercise the following rights:
You may request to obtain confirmation as to whether or not your personal data is being processed and, if so, to access such data and specific information on the processing, such as, for example, the purposes, the categories of data being processed, the existence of the other rights indicated below. You may also request a copy of your data.
You have the right to request and obtain rectification of your personal data and/or the integration of incomplete personal data.
You may obtain the erasure of your data, without undue delay, if (i) such data is no longer necessary for the purposes for which it was collected (ii) you have withdrawn your consent on which the processing was based (unless there is another legal basis for such processing) (iii) you object to the processing of your data (as indicated below) and there is no other prevailing legitimate reason for the processing (iv) your data is processed unlawfully (v) your data must be erased by virtue of a legal obligation, (vi) personal data of a minor under 16 years of age have been collected in relation to the offer of information society services. Please note that this right does not apply if the processing of data is necessary, among other things:
You have the right to obtain the restriction of processing in the event of:
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit them to another data controller in relation to the cases in which the processing of your data is based on consent or concerns special categories of personal data processed on the basis of your consent or the processing is based on the performance of a contract and such processing is carried out by automated means. You also have the right to obtain direct transmission of data from one controller to another, where technically feasible. The possibility of obtaining the deletion of data remains, as indicated above.
You have the right to object at any time to processing based on a legitimate interest of the controller, unless the latter demonstrates compelling legitimate reasons for proceeding with processing that prevail over the interests, rights and fundamental freedoms of the interested party or for the establishment, exercise or defense of a right in court. Furthermore, you have the right to lodge a complaint with the Supervisory Authority. The above rights may be exercised by making a request without formalities to the Controller. The request may be sent to the Controller by letter or email to the following addresses: Via Clavature n. 18 - Bologna (Italy) email: info@misteralert.com.
All requests and inquiries regarding the processing of your personal data may be addressed to the Data Controller at the following addresses:
This information will be effective from January 20, 2023.