This Privacy Policy describes how Mister13 collects, uses and protects users' personal data, in accordance with the General Data Protection Regulation (GDPR – EU Reg. 2016/679) and applicable Italian law.
1. Data Controller
The Data Controller for personal data is Mister13. For any privacy-related matter you can contact us through the Contact us section of the site.
2. Data Collected
Mister13 collects the following personal data: name and email address, provided by the user at registration. Payments are handled through the website via Stripe, a PCI-DSS certified payment service provider. Mister13 does not store and has no access to the user's card details: that data is processed exclusively by Stripe under its own privacy policy.
3. Purposes of Processing
Personal data is processed for the following purposes: creating and managing the user account; providing the Service; handling payments through Stripe; communications relating to the Service (for example updates and security notices); compliance with legal obligations.
4. Legal Basis for Processing
Processing is based on the following legal grounds: performance of a contract (Art. 6(1)(b) GDPR) for account and Service management; the user's consent (Art. 6(1)(a) GDPR) for sending promotional communications; legal obligation (Art. 6(1)(c) GDPR) for regulatory compliance.
5. Data Retention
Personal data is retained only for as long as is necessary for the purposes for which it was collected. Account data (name and email) is retained for the entire duration of the contractual relationship and for a further 12 months after the account is deleted, unless longer retention periods are required by law.
6. Data Sharing
Mister13 does not sell or transfer users' personal data to third parties for marketing purposes. Data may be shared exclusively with: technical service providers (hosting, payment processing through Stripe) acting as Data Processors and bound by confidentiality agreements compliant with the GDPR; the competent authorities, where required by law or by order of a judicial authority.
7. Rights of the Data Subject
In accordance with the GDPR, users have the right to: access their personal data (Art. 15); rectify inaccurate data (Art. 16); request erasure of their data (the “right to be forgotten”, Art. 17); restrict processing (Art. 18); receive their data in a portable format (Art. 20); object to processing (Art. 21); withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand. To exercise these rights you can contact us through the Contact us section.
8. Data Security
Mister13 adopts appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or accidental disclosure. Despite these measures, no transmission or storage system is completely secure; users use the Service aware of this residual risk.
9. Changes to this Policy
Mister13 reserves the right to update this Policy. Material changes will be communicated through an in-app notification or by email. The date of the latest update is shown at the top of this page.
10. Complaints
Users have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their personal data infringes the GDPR or applicable law.
11. Cookies and Advertising
Mister13 uses technical cookies that are necessary for the website and the Service to work, and Google reCAPTCHA to protect its contact forms from abuse. The website, the web app and the mobile applications also host advertising served by Google (AdSense on the web, AdMob in the iOS and Android apps). As a third-party vendor, Google uses cookies and advertising identifiers to serve ads based on a user's prior visits to this and other websites or applications. For users in the European Economic Area, the United Kingdom and Switzerland, processing for personalised advertising takes place only with prior consent, collected through a dedicated message on the first visit and changeable at any time thereafter. Users can opt out of personalised advertising at any time through Google Ads Settings (adssettings.google.com), manage third-party vendor preferences at www.aboutads.info/choices, and reset or limit their device advertising identifier from the system settings. Detailed information on how Google handles data from partner sites and apps is available at policies.google.com/technologies/partner-sites.
