- DATA CONTROLLER
The Data Controller is Media Prospect S.H.PK, registered at ul. Rruga “Dibres” Njesia bashkiake Nr.4, Zona Kadastrale me nr.8140, 1007, Tirana, Albania (L92120015N).
The Controller provides the data subject—i.e. the person to whom the data relates—with the following information pursuant to Articles 13 and 14 of European Regulation no. 2016/679, in order to describe the characteristics of the processing performed on the personal data provided by the data subject, the purposes for which they are collected, the measures adopted to secure such data, and the rights of the data subject.Contact Details:
For any privacy-related inquiries, please use the dedicated email address provided by the Data Controller: privacy@media-prospect.com - DATA PROTECTION OFFICER
Pursuant to Article 37, letter b) of the GDPR, the Controller has appointed Mrs. N. Doku as the Data Protection Officer (“DPO”), who can be contacted at the following details:E-mail: dpo@media-prospect.com
Phone/Mobile: +355685754741 - NATURE OF DATA PROVISION (MANDATORY OR OPTIONAL)
The provision of the data (described below in paragraph 5) required for profiling purposes (see paragraph 4) is optional and will occur only upon the explicit and informed consent given by the data subject. The refusal to provide consent will result in the Controller’s inability to send personalized communications to the data subject regarding the services offered by the platform and/or by authorized third parties. - PURPOSES OF PROCESSING
In the event of specific consent, the purpose of the processing is profiling through automated processing tools for direct and indirect marketing activities. By cross-referencing the information provided, the Controller may create a commercial and behavioral profile of the data subject. More specifically, this profiling activity consists of recording and verifying the data of the data subjects in order to analyze and segment them into homogeneous categories (e.g. based on interests, browsing habits, purchasing preferences), to send targeted or personalized communications, and to improve the effectiveness of marketing campaigns. Such processing may include monitoring online behavior, confirming interest in specific categories of services and/or offers through direct contact, and processing information derived from interactions with emails, websites, blogs, and social media channels managed or used by Media Prospect S.H.PK.
The use of email tracking pixels is subject to the data subject being appropriately informed and, where necessary, providing valid consent. Data subjects may withdraw their consent or object to email tracking in accordance with applicable data protection legislation, and records of such choices may be retained to demonstrate compliance. - CATEGORIES OF DATA COLLECTED
Below is an outline by which the data collected by the Controller have been subdivided into homogeneous, i.e. similar, categories:Data Category Type Name, surname, company name, title, tax identification number, address, email, city, telephone number, postal code, IP address, opt-in date, opt-in country, category of interest Common data Attribution Data (IP, Browser, User Agent, Device, OS, Country, Time Zone) Common data GDPR Data (privacy policy [T/F], privacy policy date, profiling [T/F], profiling date, transfer [T/F], transfer date, collection URL, IP) Common data Email Tracking Data (information collected through email tracking pixels, including email open events, deliverability information, technical delivery diagnostics and aggregated campaign performance metrics). Data Category - PURPOSES OF PROFILING
The purposes for which the data is collected are as follows:- To segment the data subjects into homogeneous categories in order to optimize the outcomes of promotional initiatives;
- To verify the data provided by the data subjects;
- To send targeted or personalized communications;
- To analyze user engagement based on the behavior of the data subject.
- CATEGORIES OF DATA SUBJECTS
The category of data subjects for profiling purposes is identified among the users of the websites, blogs, and online portals owned by the Controller, which are identified by the following domains:
https://glamourinsights.net/, https://motorpassion.org/, https://ecotips.pro/, https://clepsydris.com/ - CATEGORIES OF RECIPIENTS
The indicated data will be disclosed to the following categories of recipients: internal personnel who are properly trained and authorized to access the data (Art. 29 Reg. EU 2016/679), IT service providers, mailing platforms, marketing and lead generation service providers, clients and contractors, professionals or consulting firms, and public authorities or supervisory bodies. - DATA RETENTION TERMS
The maximum duration for retaining the data subject to processing is as follows: The Data Controller will use the collected data for the purposes set out in point 5 for a period not exceeding 3 (three) years from the date the specific consent for the processing is provided. - OVERALL TECHNICAL AND ORGANIZATIONAL MEASURES
To ensure proper management of the collected data and to safeguard and protect it from external attacks, dispersions, or misuse, pursuant to Article 32 of EU Regulation 2016/679, the following security measures have been designed and implemented:- Technical Assistance: This measure is aimed at mitigating the risk of vulnerabilities in the telematic infrastructures used by the Data Controller due to potential software malfunctions.
- Training: This measure is intended to prevent and mitigate the risk of improper management and/or misuse of the personal data processed by the Controller and/or by specifically authorized personnel. To this end, internal procedures for the processing of personal data have been designed and implemented, along with appropriate training of personnel on the principles and regulations relating to personal data processing.
- Access Logging: This measure aims to prevent unauthorized access to personal data by ensuring that an access log is maintained, which can only be consulted using personal identification devices.
- Periodic Equipment Maintenance: This measure seeks to prevent the risk of potential hardware malfunctions through the regular maintenance of system equipment, carried out by highly skilled professionals in the technology sector.
- PLACE OF DATA PROCESSING
All personal data are processed by The Data Controller, Media Prospect S.H.PK, registered at ul. Rruga “Dibres” Njesia bashkiake Nr.4, Zona Kadastrale me nr.8140, 1007, Tirana, Albania (M23622202P) and hosted by SiteGround Spain S.L. in Eemshaven, The Netherlands with ASN AS19527 – Google LLC. The data will not be disseminated under any circumstances. If a data processing manager is appointed for the storage of personal data, the data may be stored outside the European Union by leading companies operating in the field of data processing and technological innovation. - RIGHTS OF THE DATA SUBJECTS
The data subject may exercise the following rights with respect to the Controller:- Right of Access: The right to obtain a copy of the personal data in our possession that are subject to processing;
- Right to Rectification: The right to correct the personal data held by the Controller if they are not up-to-date or accurate;
- Right to Object to the Processing of Personal Data for Commercial Purposes: The right to request that the Controller cease sending commercial communications at any time;
- Right to Object to Decisions Based Solely on Automated Processes: The right to request not to be subject to decisions based solely on automated processes, including profiling;
- Right to Withdraw Consent: The right to withdraw the consent provided for a specific processing activity at any time.
In such cases, in full compliance with EU Regulation 2016/679, the company will promptly execute the requests through which the rights provided by the said Regulation have been exercised.
