1. WHAT DATA DO WE COLLECT AND HOW WILL WE USE YOUR DATA

1.1 Data collected through user’s navigation on the Website and cookies

When the user is navigating the Website, cookies will be sent to the user’s terminal. Such cookies include various data based on the user. Such data includes the user’s IP address, date of visit of the Website, number of visits, and cookie settings.

Such data will be collected and processed to allow navigation on the website until the end of the user’s connection session, and for the time necessary to comply with any legal obligation and/or to defend or exercise a right in court.

1.2 Data provided by the user

This category of data is collected following the optional and voluntary sending of messages by the user to the Company’s contact addresses and the filling and submission of forms in the “get scouted” section of the Website, which entails the processing of contact data of the sender and all data contained in the message, such processing being essential in order for the Data Controller to reply to the user.

The data collected following the filling and submission of a form by the user are the following: first name, last name, phone number, email address, address and country of residence, Instagram handle, gender, birth date, measurements, and any pictures of the user sent by that user.

Such data shall be retained by the Data Controller for the time strictly necessary to reply to the user’s request or to process the user’s application using the form, and for the additional time to comply with any legal obligation and/or to defend a right in court.

2. LEGAL BASIS OF THE PROCESSING

Navigation data collected through the Website is processed by the Data Controller on the legal basis of a legitimate interest for the Data Controller, as the collection and processing of such data is necessary to enable navigation on the Website, to obtain statistical information regarding the use of the Website (most visited pages, number of visitors per geographical areas for each time slot or day slot), and to enhance the user experience.

Data provided on a voluntary basis by the user will be processed by the Company on the legal basis of such processing being necessary to allow the Company to take steps at the request of the user prior to entering a contract, and to allow the Company to reply to the user.

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Finally, if necessary for the mentioned purposes, personal data could be communicated to and/or shared with third parties such as providers of goods and services, including ICT services, hosting providers, IT companies and commercial partners (on the legal basis of our legitimate interest in carrying out our business activities), as well as public authorities (compliance with the law being the legal basis for such communication).

4. TRANSFER OF PERSONAL DATA TOWARDS THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

The Data Controller shall not transfer personal data towards international organizations, and/or countries not members of the European Union (hereinafter referred to as “Third Countries”) where an adequate level is not ensured, according to European laws without the user’s consent; any transfer shall be made only if the user has explicitly provided their consent to such transfer, or if such transfer is necessary to ascertain, exercise or defend a right before the competent authorities.

5. USER RIGHTS

The Company makes sure that the user can exercise at any time their rights provided by the GDPR by contacting the Data Controller at the following address: contact@avilion.space

In greater detail, the user has at any time, the following rights:

• right of access;
• right of rectification;
• right to erasure;
• right to restrict processing;
• right to data portability;
• right to object;