GDPR Compliance

Your data protection rights under the General Data Protection Regulation (EU) 2016/679

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. As Tabletopsa operates in Milan, Italy, we are fully committed to complying with GDPR requirements and protecting your personal data according to the highest European standards.

Your Rights Under GDPR

Under GDPR, you have the following fundamental rights regarding your personal data:

Right to Access

You can request access to your personal data and information about how we process it.

Right to Rectification

You can request corrections to inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request limitations on how we process your personal data.

Right to Data Portability

You can request your personal data in a machine-readable format.

Right to Object

You can object to certain types of data processing, including direct marketing.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: For marketing communications and optional services
  • Contract Performance: To provide board game rental services and event participation
  • Legal Obligation: To comply with Italian and EU legal requirements
  • Legitimate Interest: For service improvement and fraud prevention

Data Protection Officer (DPO)

For any questions regarding your data protection rights or GDPR compliance, you can contact our Data Protection Officer:

Email: [email protected]

Address: Via Brera 15, 20121 Milan, Italy

Phone: +39 02 7634 8291

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

Garante per la Protezione dei Dati Personali

Piazza Venezia n. 11

00187 Rome, Italy

Website: www.gpdp.it

Email: [email protected]

Children's Data Protection

In accordance with Italian Data Protection Code, children over 14 years of age may consent to the processing of their personal data. For children under 14, consent must be provided by a person exercising parental responsibility.