Privacy Policy

This Application collects some Personal Data from its Users.

Administration of Blowfish.com

Owner contact email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Among the Personal Data collected by this Application, either independently or through third parties, are: first name; surname; telephone number; username; email address; password; business name; Fiscal Code; VAT number; country; province; postal code; city; website; billing address; shipping address; house number; prefix; language; cookies; and Usage Data.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or in specific information notices displayed before the data are collected.

Personal Data may be provided voluntarily by the User or, in the case of Usage Data, collected automatically while using this Application.

Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to provide them, this Application may be unable to provide the Service. Where this Application specifically indicates that certain Data are optional, Users may choose not to provide them without affecting the availability or operation of the Service.

Users who are unsure which Data are mandatory are encouraged to contact the Owner.

Unless otherwise specified, the use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to any other purposes described in this document and, where available, in the Cookie Policy.

The User is responsible for any Personal Data relating to third parties that are obtained, published, or shared through this Application and warrants that they have the right to communicate or disseminate such Data, releasing the Owner from any liability to third parties.

Methods of Processing

The Data Controller adopts appropriate security measures to prevent unauthorized access to, disclosure, modification, or destruction of Personal Data.

Data processing is carried out using IT and/or telematic tools, following organizational methods and procedures strictly related to the purposes indicated.

In addition to the Owner, in some cases, other parties involved in the organization of this Application may have access to the Data. These may include administrative, commercial, marketing, and legal personnel, as well as system administrators.

External parties may also have access to the Data, including third-party technical service providers, postal and delivery services, hosting providers, IT companies, and communication agencies. Where necessary, these parties may be appointed as Data Processors by the Owner.

An updated list of Data Processors may be requested from the Data Controller at any time.

Legal Basis for Processing

The Data Controller processes Personal Data relating to the User when one or more of the following conditions apply:

• The User has given consent for one or more specific purposes. Note: in some systems, the Data Controller may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, provided that the User does not object to such processing (“opt-out”). However, this does not apply where the processing of Personal Data is governed by European data protection legislation.
• Processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures.
• Processing is necessary to comply with a legal obligation to which the Data Controller is subject.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

The User may always ask the Data Controller to clarify the specific legal basis for each processing activity and, in particular, whether the processing is based on law, provided for by a contract, or necessary to enter into a contract.

Location

Data are processed at the Data Controller's operating offices and in any other location where the parties involved in the processing are situated. For further information, Users may contact the Owner.

The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the location of processing, Users may consult the section of this document concerning the details of Personal Data processing.

Users have the right to obtain information about the legal basis for transferring Data outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the United Nations, as well as about the security measures adopted by the Data Controller to protect their Data.

Users may determine whether any of the transfers described above take place by consulting the relevant section of this document or by contacting the Data Controller using the contact details provided at the beginning of this document.

Data Retention Period

Data are processed and stored for as long as necessary to fulfil the purposes for which they were collected.

Accordingly:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until that contract has been fully performed.
• Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained for as long as necessary to fulfil those interests. Users may obtain further information about the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.

Where processing is based on the User's consent, the Data Controller may retain Personal Data for a longer period, until such consent is withdrawn. The Data Controller may also be required to retain Personal Data for a longer period to comply with a legal obligation or an order issued by an authority.

At the end of the retention period, Personal Data will be deleted. Consequently, after this period, the rights of access, erasure, rectification, and data portability can no longer be exercised.

User Data are collected to enable the Owner to provide its Services and for the following purposes: registration and authentication, platform and hosting services, and statistics.

For more detailed information about the purposes of processing and the Personal Data specifically relevant to each purpose, Users may consult the corresponding sections of this document.

Personal Data are collected for the following purposes and through the following services.

Registration and Authentication

By registering or authenticating, the User allows this Application to identify them and grant access to dedicated services.

Depending on what is described below, registration and authentication services may be provided with the assistance of third parties. In such cases, this Application may access certain Data stored by the third-party service used for registration or identification.

Direct Registration (This Application)

The User registers by completing the registration form and providing their Personal Data directly to this Application.

Personal Data collected: postal code; city; Fiscal Code; surname; email address; billing address; shipping address; language; country; first name; house number; telephone number; VAT number; password; prefix; province; business name; website; username.

Hosting Services

These services host the Data and files required for this Application to operate, enable its distribution, and provide a ready-to-use infrastructure for specific functions of the Application.

Some of the services listed below, where applicable, may operate on geographically distributed servers, making it difficult to determine the actual location where Personal Data are stored.

Server Plan S.r.l.

Server Plan S.r.l. is an Italian company that provides data centre services, web hosting, email services, and domain name registration. Its registered address is Via G. Leopardi, 22, 03043 Cassino (FR), Italy. The company enables the Owner to develop, operate, and host this Application.

Personal Data collected: Cookies and various types of Data, as specified in the service's Privacy Policy.

Place of processing: Italy — Privacy Policy.

Statistics

The services described in this section enable the Data Controller to monitor and analyse traffic data and track User behaviour.

Google Analytics (Google LLC)

Google Analytics is a web analytics service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google.

Google may use Personal Data to contextualize and personalize advertisements within its advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy and Opt Out. Subject to the Privacy Shield framework, as stated in the original policy.

Contact Form (This Application)

By completing the contact form and providing their Data, Users consent to the use of that Data to respond to requests for information, quotations, or any other purpose indicated in the form heading.

Personal Data collected: postal code; city; Fiscal Code; surname; date of birth; email address; address; country; first name; telephone number; VAT number; province; business name; website.

Online Payments

The services described in this section enable the Data Controller to sell its products and/or services by collecting payments online.

PayPal (PayPal Europe)

PayPal is an online payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., a credit institution licensed in Luxembourg pursuant to Article 2 of the Financial Sector Law of 5 April 1993, as subsequently amended. It is subject to the prudential supervision of the Luxembourg supervisory authority, the Commission de Surveillance du Secteur Financier, whose registered office is located at L-1150 Luxembourg.

As the service is limited to electronic money and is not configured as a deposit or investment service under the applicable law, PayPal customers do not benefit from the Luxembourg deposit guarantee schemes provided by the Association pour la Garantie des Dépôts Luxembourg (AGDL).

PayPal Inc., the parent company of PayPal (Europe) S.à r.l. et Cie, S.C.A., is based in California, United States.

PayPal uses the Personal Data collected to process online payments made through an online bank account or credit card.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy. Subject to the Privacy Shield framework, as stated in the original policy.

Push Notifications

This Application may send push notifications to Users for the purposes described in this Privacy Policy.

In most cases, Users can choose not to receive push notifications by accessing their device settings, such as the notification settings on a mobile phone, and changing the settings for this Application or for some or all applications installed on the device.

Users should be aware that disabling push notifications may adversely affect their use of this Application.

Users may exercise certain rights regarding the Data processed by the Owner.

In particular, Users have the right to:

• Withdraw consent at any time. Users may withdraw their consent to the processing of their Personal Data where consent was previously given.
• Object to the processing of their Data. Users may object to the processing of their Data when it is carried out on a legal basis other than consent. Further details about the right to object are provided in the section below.
• Access their Data. Users have the right to obtain information about the Data processed by the Owner, certain aspects of the processing, and a copy of the Data being processed.
• Verify and request rectification. Users may verify the accuracy of their Data and request that it be updated or corrected.
• Obtain restriction of processing. Where certain conditions are met, Users may request that the processing of their Data be restricted. In such cases, the Data Controller will not process the Data for any purpose other than storage.
• Obtain erasure or removal of their Personal Data. Where certain conditions are met, Users may request that the Owner erase their Data.
• Receive their Data or have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transferred to another controller without obstruction. This right applies when the Data are processed by automated means and the processing is based on the User's consent, a contract to which the User is a party, or pre-contractual measures related to that contract.
• Lodge a complaint. Users may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the Right to Object

Where Personal Data are processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users have the right to object to the processing on grounds relating to their particular situation.

Users are reminded that, if their Data are processed for direct marketing purposes, they may object to that processing without providing any reason. To determine whether the Data Controller processes Data for direct marketing purposes, Users may consult the relevant sections of this document.

How to Exercise Your Rights

Users may exercise their rights by sending a request to the Owner using the contact details provided in this document. Requests are free of charge and will be processed by the Data Controller as soon as possible and, in any event, within one month.

Legal Defence

The Owner may use the User's Personal Data in legal proceedings or in the preparatory stages leading to possible legal action to defend against abuses relating to the use of this Application or its associated Services by the User.

The User acknowledges that the Data Controller may be required to disclose Personal Data by order of public authorities.

Specific Information

At the User's request, this Application may provide additional and contextual information concerning specific Services or the collection and processing of Personal Data, in addition to the information contained in this Privacy Policy.

System Logs and Maintenance

For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs. These are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information Not Contained in This Policy

Further information about the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided in this document.

Responses to “Do Not Track” Requests

This Application does not support “Do Not Track” requests.

To determine whether any third-party services used by this Application support such requests, Users are invited to consult the relevant privacy policies.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, where possible, through this Application. Where technically and legally feasible, Users may also be notified through one of the contact details held by the Data Controller.

Users are therefore encouraged to consult this page regularly, referring to the date of the last modification indicated at the bottom.

If the changes concern processing activities based on consent, the Data Controller will obtain the User's consent again where necessary.