Information on the Processing of Personal Data. Effective from 19/07/2026

INTRODUCTION

This Privacy Policy takes into account the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Italian Privacy Code (Legislative Decree no. 196 of 30 June 2003). This document has also been prepared on the basis of the Guidelines issued by the Italian Data Protection Authority, in particular the Guidelines on combating spam issued on 4 July 2013.

Data Controller: SUPERMARIO.WORKS LTD
Company number: 17122022
Registered office / correspondence address: 1 Midget Close, Abingdon, England, OX14 5NR
Email: ceo@supermario.works

Website to which this Privacy Policy applies:

SUPERMARIO.WORKS
(Website).

The Data Controller has not appointed a DPO (Data Protection Officer). Therefore, you may send any request for information directly to the Data Controller.

GENERAL INFORMATION

This document describes how the Data Controller processes the personal data you provide through the Website.

The main types of processing of your personal data are described below. In particular, the legal basis for the processing is explained, together with whether providing the data is mandatory and the consequences of failing to provide personal data. In order to describe your rights as clearly as possible, where necessary we have specified whether and when a particular type of personal data processing is not carried out.

Registration on the Website

The Website does not offer the possibility of registration. Therefore, the Data Controller does not process your personal data for this purpose.

Purchases on the Website

It is not possible to make purchases on the Website. Therefore, your personal data will not be processed for this purpose.

The Data Controller does not process user data in order to send purchase reminder emails relating to the Data Controller’s products and/or services.

The Data Controller does not offer products or services prohibited to persons under the age of 18. Consequently, no specific age-verification system is provided, as there is no content subject to legal age restrictions.

Responding to Your Requests

Your data will be processed in order to respond to your requests for information. Providing the data is optional, but failure to provide it will make it impossible for the Data Controller to respond to your questions.

The legal basis for the processing is the legitimate interest of the Data Controller in responding to requests submitted by users. This legitimate interest corresponds to the user’s interest in receiving a response to communications sent to the Data Controller.

If you complete the relevant form available on the Website, the Data Controller may use your personal data to manage a request for a quotation and/or intervention. Providing the data is optional, but without it the Data Controller will not be able to process the request.

The legal basis for this processing is the legitimate interest of the Data Controller in responding to requests submitted by users, an interest which corresponds to the user’s interest in receiving a response.

The Data Controller may also process personal data for the purpose of managing support requests (tickets). In this case as well, the legal basis is the legitimate interest of the Data Controller in providing a response, in line with the user’s interest in receiving support.

General Marketing

The Data Controller will not send you advertising material and/or newsletters relating to its own products or those of third parties.

We use Google services, such as Google Ads and Google Analytics, to personalise advertisements and improve the user experience. This includes the collection of personal data and cookies used to display advertisements in line with your preferences. When consent is requested, you will be asked to authorise the use of this data.

Further details regarding the use of cookies and the management of consent are available in the Cookie Policy of this Website.

Profiling

The Data Controller does not carry out “profiling” using your personal data. Therefore, it will not send you advertising material and/or newsletters concerning its own products or those of third parties specifically tailored to your interests.

Transfer of Data to Third Parties

The Data Controller does not transfer your personal data to third parties for their own independent purposes.

Geolocation

The Website does not implement tools for the geolocation of the user’s IP address.

Curriculum Vitae

You may submit your curriculum vitae through the Website. Your curriculum vitae will be reviewed by the Data Controller or its collaborators.

The purpose of the processing is the legitimate interest of the Data Controller in reviewing the document in order to assess the possibility of establishing an employment or collaboration relationship with you.

This interest corresponds to your interest in being contacted by the Data Controller for this purpose.

The data will be retained until the end of the selection process and, in any event, for no longer than 6 months from the date the curriculum vitae is submitted.

Providing the data is optional, but failure to provide it will prevent the Data Controller from contacting you.

Appointment Booking

No third-party systems for booking appointments with the Data Controller are currently active on the Website. Therefore, your data will not be processed for this purpose.

In any event, you may always contact the Data Controller using the contact details provided above.

Photographs and Videos

The Data Controller does not request the publication of photographs and/or videos depicting you. Therefore, your data will not be processed for these purposes.

Web Scraping

The use of any automated process or system to access, acquire, copy or monitor any part of our Website, including but not limited to web scraping, crawling or spidering techniques, is expressly prohibited.

The Data Controller reserves the right to take all necessary measures, including legal action, to prevent and pursue any unauthorised scraping activity.

By using the Website, the user or any third party agrees not to:

  • use automated systems, such as bots, scrapers or spiders, to access or interact with the Website;
  • collect content, data or other information available on the Website without explicit written authorisation;
  • distribute, display, publish or otherwise use content acquired through scraping techniques without consent.

Any breach of this clause will be considered a material breach of the Website’s Terms of Use and will result in appropriate measures being taken, including the possible suspension of access to the Website and the commencement of legal proceedings to protect the interests of the Data Controller.

Disclosure of Personal Data

As part of its ordinary activities, the Data Controller may disclose your personal data to certain categories of recipients.

Article 2 below contains the list of recipients to whom the Data Controller may disclose your personal data. In order to facilitate the protection of your rights, Article 2 may also specify, in certain cases, when your data is not disclosed to third parties.

The “disclosure” of personal data to third parties is different from the “transfer” described in the previous section.

In the case of disclosure, the third party receiving the data may use it only for the specific purposes described within its relationship with the Data Controller.

In the case of a transfer, however, the third party becomes an independent Data Controller of the personal data.

Furthermore, your consent is always required in order to transfer your personal data to third parties for their own independent purposes.

Without prejudice to the foregoing, the Data Controller may in any event use your personal data in order to comply correctly with obligations imposed by applicable law.

SPECIFIC PRIVACY INFORMATION

Art. 1 – Methods of Processing

1.1 The processing of your personal data will mainly be carried out with the aid of electronic or otherwise automated means, using methods and tools suitable for ensuring the security and confidentiality of personal data.

1.2 The information collected and the methods of processing will be relevant and not excessive in relation to the type of services provided. Your data will also be managed and protected within secure IT environments appropriate to the circumstances.

1.3 No “special categories of personal data” are processed through the Website. Special categories of personal data include data that may reveal racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organisations of a religious, philosophical, political or trade-union nature, health status and sex life.

1.4 No judicial data are processed through the Website.

Art. 2 – Disclosure of Personal Data

The Data Controller may disclose your personal data to specific categories of recipients.

The Data Controller wishes to inform users that, in connection with the use of the YouTube service, operated and owned by Google LLC, certain personal data may be collected and shared.

This collection of data is essential in order to provide and improve the user experience on our Website and to allow users to view video content embedded through the YouTube API.

In particular, when a user views video content through the YouTube API on our Website, the following information may be collected:

  • IP Address: used to connect the user’s device to YouTube for video transmission.
  • Behavioural Data: including information about how the user interacts with videos, which videos are viewed and for how long.
  • Location Information: used to provide relevant content based on the user’s geographical location.

This data is collected automatically by the system and, in certain cases, may be retained in order to improve the user experience and for YouTube’s internal analytical purposes.

Please note that our Website uses YouTube API Services and, by viewing content through these APIs, the user accepts the YouTube Terms of Service available at: https://www.youtube.com/t/terms .

For further details regarding the processing of data by Google LLC, users are invited to consult the Google LLC Privacy Policy at: http://www.google.com/policies/privacy and YouTube privacy information at: YouTube Privacy Information .

Details on the Use of User-Related API Data

User-related API Data: when a user interacts with YouTube videos embedded on our Website, data such as viewing preferences, video viewing history and interactions with video content (likes, comments and shares) may be collected.

This data is made available through the YouTube API and helps to understand how users interact with video content.

Access to Data through the API Client

Our Website may use specific API calls to request and receive data from YouTube. This may occur when a user views a video, with the system automatically recording the relevant information.

Data Collection

The data is automatically collected by the YouTube system when users interact with YouTube videos on our Website. This process is essential in order to provide a smooth and personalised user experience.

Data Retention

The collected data is securely retained within YouTube’s systems for no longer than necessary for its intended use. YouTube adopts the necessary security measures to protect this data against unauthorised access or unlawful use.

Use of Data

YouTube uses this data for various purposes, including:

  • Internal Analysis: to better understand users’ interactions with video content and improve the quality of YouTube services.
  • Content Personalisation: to provide users with a more personalised experience based on their preferences and interaction history.
  • Improvement of the User Experience: to identify and resolve technical issues and optimise the usability of video content.

The following are the categories of recipients to whom the Data Controller reserves the right to disclose your data:

  • The Data Controller may disclose your personal data to all persons or entities, including Public Authorities, that are entitled to access personal data pursuant to legislative or administrative provisions.
  • Your personal data may also be disclosed to public and/or private entities, natural and/or legal persons, including legal, administrative and tax advisory firms, Judicial Offices, Chambers of Commerce, employment offices and similar organisations, where such disclosure is necessary or functional to the proper fulfilment of obligations arising under applicable law.
  • The Data Controller does not use employees and/or collaborators in any capacity. Therefore, your personal data will not be disclosed to this category of recipients.
  • The Data Controller does not use companies, consultants or professionals responsible for the installation, maintenance, updating or general management of the Data Controller’s hardware and software. Therefore, your data will not be disclosed to these categories of recipients.
  • The Data Controller does not use CRM platforms, meaning companies that in particular provide automated communications to users. Therefore, your personal data is not disclosed to such companies.
  • The Data Controller does not use external companies to provide customer care services.
  • The Data Controller does not use banks or companies managing national and international payment networks for online payments and therefore does not process data for these purposes.
  • Purchasers’ personal data is not disclosed to couriers or shipping companies.
  • Purchasers’ personal data is not disclosed to providers of technology based on generative artificial intelligence.

The Data Controller reserves the right to modify the above list according to its ordinary business operations. You are therefore invited to consult this Privacy Policy regularly in order to check the recipients to whom the Data Controller discloses your personal data.

Art. 3 – Retention of Personal Data

3.1 This Article describes the period for which the Data Controller reserves the right to retain your personal data.

  • Your personal data will be retained only for the period necessary to ensure the proper provision of the services offered through the Website.
  • Personal data provided through the quotation request form will be retained for the period strictly necessary to respond to the request and, in any event, for no longer than 6 months from receipt of the request. After this period, the data will be deleted or anonymised, unless applicable legal obligations require it to be retained for a longer period.

3.2 Without prejudice to Article 3.1, the Data Controller may retain your personal data for the period required by specific applicable laws and regulations, as amended from time to time.

Art. 4 – Transfer of Personal Data

4.1 The Data Controller is established in a country that provides an adequate level of protection from a regulatory perspective.

Where your personal data is transferred to a country outside the European Union for which the European Commission has adopted an adequacy decision, the transfer is considered secure from a regulatory perspective.

This Article 4.1 identifies, from time to time, the countries to which your personal data may be transferred and for which the European Commission has adopted an adequacy decision.

  • The Data Controller may transfer your personal data to the United Kingdom. The European Commission determined, by its decision of 28 June 2021, that the United Kingdom provides an adequate level of protection for personal data in accordance with the GDPR.
  • Your personal data may be transferred to the United States of America in accordance with the adequacy decision adopted by the European Commission. Through this decision, the European Commission determined that the United States provides protection for personal data comparable to that offered within the European Union.

4.2 Without prejudice to Article 4.1, your data may also be transferred to countries outside the European Union for which the European Commission has not adopted an adequacy decision.

You are therefore invited to consult this Article 4.2 regularly in order to determine whether your data is transferred to any such countries.

4.3 In this Article, the Data Controller identifies the countries towards which it may specifically direct its activities. This circumstance may result in the application of the laws of the relevant country, together with the laws governing the relationship with the user as specified in the Introduction.

  • At the user’s request, the Data Controller will apply to the processing of personal data any more favourable provisions provided under the user’s national law.

Art. 5 – Rights of the Data Subject

The Data Controller informs you that you have the right to:

  • request access to your personal data from the Data Controller and request rectification or erasure of such data, restriction of processing concerning you, or object to its processing, as well as exercise the right to data portability;
  • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal;
  • lodge a complaint with a supervisory authority.

The above rights may be exercised by submitting a request, without formalities, using the contact details provided in the Introduction.

Art. 6 – Amendments and Miscellaneous

The Data Controller reserves the right to amend this Privacy Policy at any time, providing appropriate notice to users of the Website and, in any event, ensuring an adequate and equivalent level of protection of personal data.

In order to review any amendments, you are invited to consult this Privacy Policy regularly.

In the event of material changes to this Privacy Policy, the Data Controller may also provide notice by email.

Scroll to Top