PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS WHO BROWSE THE CREATIVERSE WEBSITE
Article 13 of Regulation (EU) 2016/679
Last updated: 15 February 2023

1. Foreword
The company The Creativerse, takes the protection of your personal data very seriously. The Company's objective is to ensure the protection of the personal data of its website users at all times, since data relating to identified or identifiable persons may be processed as a result of its consultation. Pursuant to Regulation (EU) 2016/679 (hereinafter the "Regulation" or "GDPR"), this page describes the methods for processing the personal data of users who browse The Creativerse Website, which is accessible via electronic means at the following address: www.thecreativerse.com ("Site"). This information does not apply to other sites, pages or online services that can be reached via hyperlinks that may be published on the site, but which refer to resources outside The Creativerse's domain.

2. Identity and contact details of the data controller
The data controller is The Creativerse, with registered office in Alberta, Canada (email: privacy@thecreativerse.com) (hereinafter also “The Creativerse”, or “the Company”, or “the Data Controller”).

3. Data Protection Officer
The Data Protection Officer (DPO) can be reached at the following address: The Creativerse - C.A. Data Protection Officer, [Address], Alberta, Canada, email: dpo@thecreativerse.com

4. Purposes, legal basis for data processing; retention period, mandatory or optional nature of processing

The Creativerse will process user data for the following purposes:

a) To provide users with the products and services purchased and to send communications relating to orders or payments.
For this purpose, the Data Controller will process the following user data: [list of data]. The legal basis for this processing is the fulfilment of the GDPR contract (Art. 6.1.b). The retention period of the user's data for the above purposes is equal to the period necessary to process the order.

b) To enable users to register on the Site.
For this purpose, the Data Controller will process the following user data: [list of data]. The legal basis for this processing is the execution of pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR).

c) To provide users with the necessary after-sales service in compliance with the applicable product warranty legislation.
For this purpose, the Data Controller shall process the following personal data concerning users who have purchased on the site: [list of data]. The legal basis for this processing is compliance with legal obligations (Consumer Code).

d) For administrative/accounting purposes in relation to purchases on the Site
The Data Controller shall process users’ personal data for the purpose of fulfilling administrative/accounting and/or fiscal obligations connected with the contract of purchase on the Site. For this purpose, the Data Controller shall process the following personal data concerning users who have purchased on the site: [list of data]. The legal basis for this processing is the fulfilment of legal obligations to which The Creativerse is subject (Art. 6.1.c GDPR).

e) For general assistance and customer care activities in relation to purchases on the Site and therefore to respond to requests for information from users or to respond to complaints, reports and disputes.
For this purpose, the Data Controller shall process the following data concerning users: [list of data]. The legal basis for this processing is the execution of pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR) or, as the case may be, the legitimate interest of the Controller (Art. 6.1.f GDPR).

f) For the purpose of ascertaining, exercising or defending a right in relation to purchases on the Site
For this purpose, the Data Controller shall process the following data concerning users who have purchased on the site: [list of data]. The legal basis for this processing is legitimate interest (Art. 6.1.f GDPR).

g) To enable users to exercise rights
The Data Controller shall process user data in order to: [list of activities]. The legal basis for this processing is the fulfilment of legal obligations (Art. 6.1c GDPR - Consumer Code).

h) For marketing purposes
Subject to consent, the personal data provided by users by filling in the Company's forms will be entered into the centralised CRM system and will be processed by the Data Controller to send, via traditional means of contact (ordinary mail and telephone) or via e-mail, news about events and promotions, commercial communications, advertising material, catalogues, including newsletters. For this purpose, the Data Controller will process the following data concerning users: [list of data].

i) For profiling for marketing purposes
Subject to consent, the personal data provided by the users who have created an account on the Website will be entered in the centralized CRM system and will be processed by the Data Controller to analyse the geographical area, preferences and purchasing habits in order to send through traditional means of contact (ordinary mail and telephone) or via e-mail communications and personalised commercial proposals, invitations to events organised by The Creativerse. For this purpose, the Data Controller will process the following user data: [list of data].

j) To satisfy and manage requests for spontaneous applications from users sent via the "submit your application” form on the Site
The data provided by users when submitting spontaneous application requests by filling in the "Submit your application” the form on the Site will be processed by the Data Controller solely for the management of selection procedures for new employees or collaborators. For this purpose, the Data Controller will process the following data relating to candidates: [list of data].

l) For sending non-commercial communications
The Controller may use some user personal contact information for the following non-marketing communications: [list of communications].

5. Type of data processed
In addition to what stated in the above sections of this policy, the personal data that may be processed through the Site are the following: [list of data].

6. Cookie policy
This Site uses technical and profiling cookies. Please consult the Site's cookie policy, which can be accessed via the "Cookie Policy" link in the Site footer.

7. Recipients of personal data
The subjects to whom the Data Controller communicates the data, act as data processors designated by The Creativerse or persons authorized to process personal data under the direct authority of The Creativerse.

8. Security of personal data
In order to protect user personal data from unauthorized access, disclosure and alteration, both technical and other security measures have been implemented.

9. Data transfer abroad
The Data Controller does not transfer user personal data abroad.

10. Rights of the persons concerned
Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to their personal data, their rectification, erasure, restriction of processing, portability, as well as the right to object to processing.

11. Right to complain
Data subjects who believe that the processing of their personal data carried out through this website is in breach of the provisions of the EU Regulation are entitled to lodge a complaint with the Authority for the protection of personal data.

12. Amendments to this policy
Please note that this Privacy Policy is subject to change from time to time in order to improve the protection of user personal data. In the event of changes

, we will update the "last modification date" to indicate when the changes came into effect.

Users are advised to check this Privacy Policy periodically.