Privacy Policy

Dear Visitor,

EMPATHY PILLS S.R.L., operating under the brand Capsule Universe, with its registered office at
Via Ricasoli 9, Florence (FI), ZIP 50122
VAT No. 07400900481
email: info@capsuleuniverse.it

METHODS OF DATA PROCESSING

Processing may include, for example, operations such as collection, registration, organization, storage, retrieval, consultation, use, communication, deletion of personal data.

Such processing is carried out, for the above-mentioned purposes, in accordance with the principles (pursuant to Art. 5 of GDPR no. 2016/679) of lawfulness, fairness, transparency, data minimization, and accuracy.

Data is processed through telephone, paper, digital, and telematic means. Processing is carried out by means of appropriate tools and adequate technical and organizational measures to ensure security, integrity, and confidentiality, while avoiding in particular the risk of loss, unauthorized access, unlawful use, dissemination, in compliance with Art. 32 of GDPR no. 2016/679, by authorized parties and in accordance with Art. 29 of GDPR no. 2016/679 and Art. 2-quaterdecies of the Italian Privacy Code.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL

The provision of data for mandatory purposes does not require explicit consent. Without such data, we will not be able to provide our services.

The provision of data for other purposes is optional and requires your explicit consent. In the absence of such consent, you will not receive newsletters, informational material, or commercial communications regarding services offered by the Controller or by third-party companies. However, you will still have access to our services.

We only process your personal information when there is a legal basis for doing so. Legal bases include:

• Your consent to the processing activities in question

• Compliance with legal obligations we are bound to

• Execution of legal or regulatory obligations, or contracts, agreements, or other legal instruments

• Studies conducted by research entities, preferably on anonymized personal information

• The execution of a contract and its pre-contractual obligations, if you are a party to such a contract

• The exercise of our rights in court, in administrative proceedings, or in arbitration

• The defense or protection of your or third-party physical safety

• The protection of health, within procedures implemented by healthcare entities or professionals

• Our legitimate interest, provided that your rights and fundamental freedoms do not prevail over such interests

• Credit protection.

DATA ACCESS

Your data may be made accessible for the following purposes:

To employees and collaborators of the Controller in their capacity as data processors and/or system administrators;

To third-party companies or other entities (e.g.: professional firms, consultants, software providers, credit institutions, insurance companies, etc.) that perform outsourcing activities on behalf of the Controller, in their capacity as external data processors.

Among the Personal Data collected by this Website, either independently or through third parties, are: Tracking Tools; Usage Data; name; email; website; unique advertising device identifiers (e.g., Google Advertiser ID or IDFA identifier); number of users; city; device information; session statistics; browser information; responses to questions; clicks; keypress events; motion sensor events; mouse movements; scrolling activity; touch events.

DATA COMMUNICATION

The Controller may communicate your data to Public Authorities, Supervisory Bodies and/or Judicial Authorities, as well as to all other parties to whom communication is mandatory or necessary under the law. Your data will not be disclosed.

DATA RETENTION

All personal data provided will be processed in compliance with the principles of lawfulness, fairness, relevance, and proportionality, exclusively by the means necessary, including IT and telematic tools, to achieve the purposes described above.

Personal data will be stored for a period of 6 years after the last contact with the data subject, or until a deletion request is submitted. In such a case, data relating to the Controller’s legitimate interest or necessary to comply with legal obligations may still be retained.

Information systems used to manage the collected data are configured from the outset to minimize the use of personal data.

RIGHTS OF THE DATA SUBJECT

As a data subject, you are entitled to the rights provided by Articles 15 and following, and Article 77 of GDPR, namely the right to:

• Obtain confirmation of whether or not personal data concerning you is being processed and, if so, access to the personal data;

• Request the rectification or integration of inaccurate or incomplete personal data;

• Request the deletion of data in the cases provided for by Art. 17 GDPR;

• Obtain restriction of processing in the cases provided for by Art. 18 GDPR;

• Receive in a structured, commonly used, and machine-readable format the personal data concerning you and transmit those data to another controller (“data portability”);

• Object at any time, for reasons related to your particular situation, to the processing of personal data concerning you;

• Object at any time to the processing of your data for direct marketing purposes, including profiling related to such marketing;

• Not be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you.

EXERCISING YOUR RIGHTS

You may exercise your rights at any time by contacting the Controller at the following email: info@capsuleuniverse.it

EXTERNAL PROCESSORS AND APPOINTEES

The updated list of external processors and appointees is kept at the registered office of the Data Controller and may be requested by writing to: info@capsuleuniverse.it

CHANGES TO THIS NOTICE

This Privacy Policy was drafted on [insert date] and may be updated over time, including due to legislative or regulatory changes. The Data Subject is encouraged to frequently consult this page.