PRIVACY NOTICE AND COOKIE POLICY

1. GENERAL INFORMATION

This document describes the methods by which By Friday S.r.l. (“By Friday”) uses the personal data provided by users of the website www.byfriday.xyz (“Site”).

The personal data provided by users will be processed in accordance with the provisions of EU Regulation No. 2016/679, known as the “General Data Protection Regulation” (“Privacy Regulation”), and, in particular, in compliance with the principles of necessity, transparency, lawfulness, fairness, and proportionality in the processing of personal data.

The following information is provided pursuant to and for the purposes of Article 13 of the Privacy Regulation.

2. DATA CONTROLLER

The data controller of personal data is By Friday S.r.l., with its registered office at Via degli Scipioni n. 252 Rome, Lazio 00192 (IT), Tax Code and VAT Number 17332981004, email: roma@byfriday.xyz, PEC (certified email): byfridaysrl@pec.it .

3. TYPES OF DATA PROCESSED

a. NAVIGATION DATA

The computer systems and software procedures used to operate the Site acquire, during their normal operation, certain personal data whose transmission is inherent in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters related to the operating system used. This data is used solely to obtain anonymous statistical information on the use of the Site and to ensure its proper functioning, and it is deleted immediately after processing. The data could be used to ascertain responsibility in the event of potential cybercrimes against the Site.

b. USE OF COOKIES

The Site uses technical cookies, which are necessary to enable navigation or to provide a service requested by the user. These cookies are not used for additional purposes and are typically installed directly by the website owner.

These cookies serve a functional purpose and allow recognition of the user’s preferred language, thereby improving the quality and navigation experience.

Additionally, the Site uses cookies from third-party platforms (specifically YouTube), managed by the involved third parties. These cookies are necessary to offer audiovisual content to Site users.

Further information is provided below:

a) On YouTube cookies: http://www.google.com/policies/technologies/types/

b) On how to disable them: http://www.google.com/policies/technologies/managing/

Almost all browsers allow users to check which cookies are present on their device, block all cookies, or receive a notification each time a cookie is installed. However, in some cases, failure to install a cookie may make it impossible to use certain parts of the Site.

Below are the methods offered by the main browsers to allow users to express their preferences regarding the use of cookies:

* Internet Explorer: http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookie#ie=ie-11

* Chrome: https://support.google.com/chrome/answer/95647?hl=it

* Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie

* Opera: http://help.opera.com/Windows/10.00/it/cookie.html

* Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT

Upon connecting to the Site for the first time, users will see a brief notice regarding the use of cookies. By clicking the “OK” button and continuing to browse the Site, the user consents to the use of third-party cookies as described in this Privacy Notice.

4. METHODS AND PURPOSES OF PROCESSING

Personal data provided by users will be processed using IT tools to provide them with information about the activities carried out and the services offered by By Friday.

5. DISCLOSURE AND DISSEMINATION OF PERSONAL DATA

The data will be accessible to internal and external personnel tasked with processing it in relation to the purposes specified above. Users’ personal data may also be accessed by external companies responsible for certain processing operations (appointed as data processors) and by the following categories of data processors and personnel: By Friday marketing/communication staff and IT support staff for By Friday.

Some data may be disclosed in anonymous and aggregated form to third parties for statistical purposes. In any case, such data does not allow the identification of the individuals concerned. Except as permitted by law or provided for in this Privacy Notice, personal data will not be disclosed or disseminated without the data subject’s consent.

6. DATA SUBJECTS’ RIGHTS

In accordance with the Privacy Regulation, users have the right to be informed about the purposes and methods of processing their personal data, to access their personal data at any time, and, in particular, to obtain confirmation of the existence or absence of personal data concerning them and to have it communicated in a structured, commonly used, and machine-readable format, with the possibility of transmitting it to another data controller freely and without hindrance. Users also have the right to verify the accuracy of their data or request its integration, updating, or rectification. Furthermore, users have the right to request the deletion, anonymization, or blocking of the processing of their data, as well as the restriction of processing, and to object, in whole or in part, to its processing for legitimate reasons, and to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). However, the exercise of these rights may be subject to limitations or exclusions under the Privacy Regulation and applicable legislation.

7. CHANGES TO THIS PRIVACY NOTICE

By Friday may amend this Privacy Notice to reflect changes in national and/or EU legislation, to adapt to technological innovations, or for other reasons.

Any new versions of this Privacy Notice will be published on the Site. Users are kindly requested to review this Privacy Notice and check it periodically with care to stay informed of any updates or revisions that may become necessary.

8. EXERCISE OF RIGHTS AND REQUESTS FOR INFORMATION

To exercise their rights or for any questions or requests regarding the processing of their personal data by By Friday, users can contact us at the contact details provided in this Privacy Notice, and in particular at the following email address: byfridaysrl@pec.it .