Privacy policy

01Who the data controller is

Animatio is software made by M's Works. This site presents it and collects sign-ups for updates. The controller, meaning whoever decides why and how your data is processed, is:

Controller

M's Works di Antonio Cirino Murabito (sole proprietorship)

Tax code

MRBNNC06A05L407Y

VAT number

07344720821

Privacy email

antonio.murabito@msworks.it

Certified email (PEC)

antonio.murabito@pec.it

Company website

www.msworks.it

Data protection officer (DPO)

Not appointed

02What data we process

We process data in three cases, and only these.

• When you visit the site

  Automatic

  Like any server, the one that sends you the pages records your IP address, browser and the page requested in its technical logs. We do not use them for analytics or to learn about you.

• When you sign up for updates

  From you

  The data listed below. You type it, or it comes from your sign-up.

• When you write to us

  From you

  Your email address, your name if you give it, and what you write.

Sign-up data, item by item:

• your email address;
• the language you chose, so we write to you in Italian or English;
• the date and time you gave consent, the exact wording of the box you ticked and where the sign-up came from (the site's form);
• a one-time code to confirm the sign-up, deleted as soon as you use it, and a code to unsubscribe;
• the date you confirmed and, if it happens, the date you unsubscribed;
• a hash of your IP address (salted SHA-256). We never store the IP in clear. The hash is used only to stop repeated requests.

What we do not collect. No visit analytics, no cookies, no pixels. In our emails we do not measure whether you open them or which links you click. Details are in the cookie policy.

03How signing up for updates works

You sign up from the form on the home page, in three steps:

• you type your email and tick the consent box;
• we send you an email with a confirmation link;
• you are signed up only when you click the link. Until then your address does not enter the list and we send you nothing else.

What we send you. Only news about Animatio: when it comes out, where to get it, what is new. No advertising for anyone else.

Giving your email is optional. It is only needed to sign up: if you do not give it, you can still use the site, but you will not get updates.

Unsubscribing takes one click: there is a link at the bottom of every email. You can also write to antonio.murabito@msworks.it. You can withdraw your consent at any time; what we did before you withdrew it remains lawful.

Minimum age. You must be at least 14 to sign up (Art. 2-quinquies of the Italian Privacy Code). If we find a sign-up from someone younger, we delete it.

04Why we process the data, and on what basis

• Sending you updates about Animatio

  Consent · Art. 6(1)(a) GDPR

  Email, language and consent data: to write to you and to know what you agreed to.

• Stopping abuse of the form

  Legitimate interest in security · Art. 6(1)(f) GDPR

  The IP hash: to limit repeated requests and stop anyone from signing up other people's addresses in bulk.

• Proving consent and withdrawal

  Legitimate interest in defending a right · Art. 6(1)(f) GDPR

  If someone disputes an email, we must be able to show when and how they signed up and when they unsubscribed (Art. 7(1) GDPR).

• Replying when you write to us

  Legitimate interest in replying · Art. 6(1)(f) GDPR

  The data you send us, only to reply and follow up on your request.

• Running and protecting the site

  Legitimate interest in security · Art. 6(1)(f) GDPR

  The server's technical logs: to send you the pages and defend the site against attacks.

Legitimate interest. We rely on it only for security and to defend ourselves in a dispute. You can object: see your rights.

No profiling, no automated decisions. We do not classify you or take decisions about you with automated systems. We do not sell or hand over your data, and we do not use it to train artificial intelligence models.

05Who processes the data with us

To run the site we use these providers. They process data on our behalf, as processors (Art. 28 GDPR), and only for the service they provide to us.

• Vercel Inc.

  USA · Data Privacy Framework

  Hosts the site and sends you the pages. Records the IP address and browser in its technical logs, for security and operation.

• Supabase Inc.

  Data in the EU (Stockholm, Sweden) · Standard Contractual Clauses

  The database where we store sign-ups for updates.

• Resend

  USA · Data Privacy Framework

  Sends the emails: the confirmation request and the updates. Emails are sent from an @msworks.it address.

• Google Ireland Ltd. (Google Workspace)

  Ireland · EU, with transfers to the US covered by the Data Privacy Framework

  Receives the emails you send us.

Beyond them, an authority receives the data only when the law requires it. We do not sell, rent or hand over your data to anyone.

06Data outside the European Union

Vercel and Resend are US companies. The transfer is based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Decision 2023/1795), under which they are certified, or on the Standard Contractual Clauses (Decision 2021/914).

Supabase keeps our data in Sweden. Any access from the United States is covered by the Standard Contractual Clauses.

You can ask us for a copy of the safeguards by writing to antonio.murabito@msworks.it.

07How long we keep the data

• Confirmed sign-up

  Until you unsubscribe

  We keep the data for as long as you stay signed up.

• Sign-up never confirmed

  30 days

  If you do not click the confirmation link, we delete the request.

• Confirmation code

  Until used

  Deleted as soon as you confirm.

• After you unsubscribe

  Within 30 days

  From that moment we no longer write to you. We delete the sign-up data (language, codes, IP hash), except the proof described in the next row.

• Proof of consent and withdrawal

  24 months after unsubscribing

  We keep only the email address, the date and time of consent, the wording of the box, the confirmation date and the unsubscribe date, separate from the list. They serve only to show, if someone disputes it, that we wrote with consent and stopped when asked. Then we delete them.

• IP hash

  30 days

  Used only against repeated requests. We delete it 30 days after the request.

• Emails you send us

  Max 24 months

  As long as needed to reply and follow up on the request. At most 24 months from the last message.

• Site technical logs and sending records

  Provider's technical period

  Vercel and Resend keep them for the period set for their records, then delete them.

If, when a period ends, a dispute concerning that data is open, we keep it until the dispute is settled, and only for that purpose.

08Your rights

You have the rights set out in Articles 15-22 GDPR. You can:

• find out whether we process your data and get a copy (access, Art. 15);
• correct it (rectification, Art. 16);
• have it deleted (erasure, Art. 17);
• have its use suspended while we check a complaint of yours (restriction, Art. 18);
• receive it in a machine-readable format, or have it passed to another controller (portability, Art. 20);
• object to processing based on our legitimate interest (objection, Art. 21);
• withdraw your consent whenever you want, with no consequences. Withdrawal applies to the future (Art. 7(3)).

How. Write to antonio.murabito@msworks.it or to the certified email antonio.murabito@pec.it. We reply within one month, free of charge. To be sure the request is yours, we may ask you to write from the address you signed up with.

Complaints. If you think we process your data improperly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the EU country where you live or work. You can also go to court.

09If this notice changes

If something changes (a provider, a piece of data, a period), we update this page and the date at the top. If a change requires new consent, we ask you first.

Cookies are covered by the cookie policy; use of the site by the terms and conditions.