Mediaddress Privacy Policy

This Privacy Policy describes our procedures for the collection, use and disclosure of your information and sets out the rights you have with respect to the processing of your data (the “Privacy Policy”).

The Privacy Policy establishes certain general principles of which all our personnel (including employees, contractors, interns and temporary staff) have been informed and which they are required to follow whenever they handle your personal data.

The Privacy Policy does not apply to processing carried out by third parties that are not affiliated or controlled companies, including, by way of example, third-party websites, services and applications that the user agrees to access (“Third-Party Services”). We seek to ensure access only to those Third-Party Services that share our values and security standards; however, we cannot assume responsibility for the content or the privacy policies of third parties. We invite you to review carefully the privacy policies of all Third-Party Services you access.

  1. INTRODUCTION
  2. We are committed to ensuring compliance with European Regulation (EU) 2016/679 on the protection of personal data (“GDPR”) and to maintaining high standards for the fair and transparent management of personal data. We have enhanced the technical and organisational measures implemented to protect your data in accordance with the principles set out in Article 5 of the GDPR.

    This Privacy Policy:

    • refers to the processing of the data of users of the Windpress platform and of the Mediaddress platforms (each defined as a “Platform” and, collectively, the “Platforms”) who have registered on Windpress;
    • forms an integral part of the services and products we offer;
    • is provided pursuant to Article 13 of the GDPR.

    This Privacy Policy applies to users of the Platforms and to persons who provide data to the Data Controller (as defined in Section 2 below) in order to receive goods or services offered on the Platforms.

    The Privacy Policy applies to all services offered by the Data Controller and its subsidiaries.

    In particular, with regard to the professional personal data contained in our databases, we confirm that such data have been collected directly from the data subjects, from the public communication channels of the organisations for which they work, or from third parties that have provided appropriate guarantees of compliance with the applicable data protection legislation.

  3. DATA CONTROLLER
  4. Mediaddress S.r.l., with registered office in Milan, Via Compagnoni 30, REA MI 1397450, is the controller of the personal data processing covered by this Privacy Policy (the “Data Controller”). If you have any questions or concerns regarding the privacy of your data, please contact the Data Controller at the following email address: privacy@mediaddress.eu.

  5. PERSONAL DATA PROCESSED AND SOURCE OF THE DATA
  6. The personal data we process fall into the following main categories (“Personal Data”):

    • Cookies

    For specific information regarding cookies, please refer to the sections dedicated to them on each of our websites.

    • Web Data

    You may access the Platforms by browsing the Data Controller’s website. We automatically receive and record information from your web browser when you interact with our websites, including your IP address. This information is not collected for the purpose of being associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, make it possible to identify users. This category of data includes the IP addresses or domain names of the computers used by users connecting to our websites, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of our websites, to monitor their proper functioning and to identify anomalies and/or misuse; in any event, they are deleted immediately after processing. The data may be used to establish liability in the event of possible computer crimes to the detriment of our websites or of third parties. We will use these data in aggregated form and therefore this will in no way permit the personal identification of the user to whom they relate. In addition to the cookies referred to above, we may use our own or third-party services that employ so-called beacons or algorithms to monitor user activity on websites (pages visited, content viewed and searches performed) or to track email communications.

    • Information you provide to us

    We collect and process the personal data you provide to us by using the Platforms, requesting information, purchasing our goods and services or creating a personal account.

    • Third-party data

    If, while using our services, you provide, store, use or otherwise process personal data relating to third parties, you are fully responsible for such processing and should be aware that, with regard to such data, such processing qualifies you as a data controller (within the meaning of Article 4(7) of the GDPR). With regard to such third-party personal data and the processing thereof, you act as an independent data controller, assuming all related responsibilities. With reference to such data, you grant the Data Controller the broadest possible indemnity against any dispute or claim that may be brought against it by such third parties whose personal data have been processed through your use of our services. In any event, should you provide or process personal data relating to third parties, you hereby warrant that such processing is based, where necessary, on your prior acquisition of the third party’s consent to the processing of the information concerning them.

  7. DATA PROCESSING
  8. Your Personal Data will be processed by the Data Controller in accordance with your instructions, your consent where necessary, and applicable laws, for the following purposes:

    1. to enable us to provide you with our services and products offered through the Platforms, upon registration, trial registration, purchase or for the performance of any other contractual relationship; in particular, in order to ensure visibility for the content you create and for your professional contacts, the data will be published on the Platforms;
    2. to respond to your requests;
    3. to comply with all obligations established by applicable laws, regulations or European legislation, or to comply with requests from the authorities;
    4. to carry out email marketing activities for services and products similar to those you have already purchased, pursuant to Article 130(4) of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 (the “Privacy Code”), unless you expressly inform us that you do not wish to receive such communications at the time of registration, subscription or at any subsequent time;
    5. to contact you in order to offer you our services and products or to send you marketing material, newsletters and market research communications, through automated means (SMS, MMS and email) and non-automated means (postal mail, telephone calls with an operator); please note that the Data Controller collects a single consent for the marketing purposes described herein, in accordance with the measure issued by the Italian Data Protection Authority (Garante per la protezione dei dati personali), “Guidelines on promotional activities and combating spam”, of 4 July 2013. Should you nevertheless wish to object to the processing of your Personal Data for marketing purposes carried out through the means indicated herein, you may do so at any time by contacting the Data Controller, without prejudice to the lawfulness of processing based on consent given prior to its withdrawal;
    6. to communicate your Personal Data to other companies within the Mediaddress Group so that they may send you marketing communications, newsletters and market research communications, through automated means (SMS, MMS and email) and non-automated means (postal mail, telephone calls with an operator). In this case as well, we collect a single consent for the purposes described herein, without prejudice in any event to your right to withdraw your consent or to request that communications be sent only through certain communication channels;
    7. to develop, test and improve the Platforms and our services;
    8. to provide you with a browsing experience more closely aligned with your preferences;
    9. for statistical purposes, in fully anonymous and aggregated form, without it being possible to trace your identity;
    10. to measure the performance of the communications sent through the Platforms (Section 6).
  9. LEGAL BASIS FOR DATA PROCESSING
  10. Your Personal Data will be processed:

    1. for the purposes referred to in Sections 4.1 and 4.2, (i) pursuant to Article 6(1)(b) of the GDPR (“[…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”), as it is necessary for the provision of the services, products or information requested. Providing Personal Data for the purposes referred to in Sections 4.1 and 4.2 is optional, but failure to provide such data would make it impossible to activate the requested services, to supply the products purchased or to respond to a request;
    2. for the purposes indicated in Section 4.3, pursuant to Article 6(1)(c) of the GDPR (“[…] processing is necessary for compliance with a legal obligation to which the controller is subject”). Once your Personal Data have been provided, the processing of such data is in fact mandatory in order to comply with the legal obligations to which the Data Controller is subject;
    3. for the purposes referred to in Section 4.4, pursuant to Article 130(4) of the Privacy Code, which allows the Data Controller to use the email address you provided when purchasing a product or service for communications concerning products or services similar to those requested by you, provided that you have not informed us that you do not wish to receive such communications;
    4. for the marketing purposes referred to in Sections 4.5 and 4.6, following your consent pursuant to Article 6(1)(a) of the GDPR (“[…] the data subject has given consent to the processing of his or her personal data for one or more specific purposes”). Providing your Personal Data for these purposes is optional and does not affect your use of the services. In any event, you have the right to object to the processing of your data for marketing or profiling purposes by contacting the Data Controller at any time by email at: privacy@mediaddress.eu;
    5. for the purposes referred to in Section 4.7, pursuant to Article 6(1)(f) of the GDPR (“[…] processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”). The Data Controller’s legitimate interest consists in providing a service that is more closely aligned with users’ preferences and in improving their experience;
    6. for the purposes referred to in Section 4.8, pursuant to Article 6(1)(b) of the GDPR (“[…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”) and in accordance with Article 22(2)(a) of the GDPR.

    The processing referred to in Section 4.9 is not carried out on personal data and may therefore be lawfully performed by the Data Controller.

  11. RECIPIENTS
  12. Your Personal Data may be shared, in whole or in part, for the pursuit of the purposes set out in Section 4 of this Privacy Policy, with:

    1. users of the Platforms;
    2. persons or entities typically acting as data processors pursuant to Article 28 of the GDPR, namely (i) persons, companies or professional firms providing accounting, administrative, legal, tax and financial assistance and consultancy services to the Data Controller; (ii) persons appointed to carry out technical maintenance activities; (iii) service providers used by the Data Controller to achieve the purposes set out in Section 4 (e.g. providers of server hosting services, mailing list distribution services, electronic communication systems and data processing services); always in compliance with the principle of data minimisation, limiting processing to the Personal Data strictly necessary to achieve the specific purpose.
      The complete list of data processors is available upon written request sent to the contact details indicated in Section 9;
    3. persons, entities or authorities to whom disclosure of your Personal Data is mandatory pursuant to legal provisions or orders of the authorities;
    4. persons authorised by the Data Controller, pursuant to Article 29 of the GDPR, to process the Personal Data necessary to carry out activities strictly connected with the provision of services and products, who are required to keep the Personal Data confidential.

    Such persons and entities are hereinafter collectively referred to as the “Recipients”.

    Users of the Platforms may contact you by sending, through the Platforms, press releases and other communications. Such communications may contain tracking pixels, which detect whether the communication has been opened and the date and time of openings, in order to measure their performance. You may at any time choose whether to (i) continue receiving communications with tracking, (ii) continue receiving them without tracking, or (iii) stop receiving them, via the link contained in each communication or by writing to privacy@mediaddress.eu. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

  13. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
  14. Personal Data will not be shared with parties outside the European Economic Area. Should it become necessary to transfer personal data to Recipients outside the European Economic Area, the transfer will take place in compliance with Articles 44 to 49 of the GDPR.

    Pursuant to Chapter III of the GDPR, you have the right, at any time, to:

    • request access to your Personal Data;
    • verify the accuracy of, or request the completion, updating or rectification of, your Personal Data;
    • request the erasure, anonymisation or blocking of your Personal Data;
    • object to processing in the cases provided for by Article 21 of the GDPR;
    • request the restriction of processing in the cases provided for by Article 18 of the GDPR, where technically possible;
    • obtain your Personal Data in a structured, commonly used and machine-readable format, in the cases provided for by Article 20 of the GDPR.

    In any event, you always have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), pursuant to Article 77 of the GDPR, if you believe that the processing of your Personal Data is carried out in violation of the data protection legislation in force.

  15. RETENTION PERIOD FOR PERSONAL DATA
  16. Your Personal Data processed for the purposes referred to in Sections 4.1 and 4.2 will be retained for the time strictly necessary to achieve those purposes. With specific reference to registered users, since such processing is carried out for the provision of services, the Data Controller will retain the Personal Data for the period provided for and permitted under Italian law for the protection of its own interests (Article 2946 et seq. of the Italian Civil Code); with regard to published data, until consent is withdrawn.

    Your Personal Data processed for the purposes referred to in Section 4.3 will be retained for the period required by the specific applicable legal obligation or provision.

    Your Personal Data processed for the purposes referred to in Section 4.4 will be retained until you object to the processing or withdraw your consent.

    Your Personal Data processed for the purposes referred to in Sections 4.5, 4.6, 4.7 and 4.8 will be retained for a maximum period of 24 months from the last interaction. In any event, the Data Controller is permitted to retain the Personal Data for the period provided for and permitted under Italian law for the protection of its own interests (Article 2947, paragraphs 1 and 3, of the Italian Civil Code).

    Data collected through tracking pixels for the purposes referred to in Section 4.10 are retained for the time necessary to measure performance and, in any event, no longer than until consent is withdrawn.

  17. CONTACTS
  18. You may contact the Data Controller to exercise your rights or for any other request by writing to the address indicated in Section 2 or by sending an email to the following dedicated email address: privacy@mediaddress.eu.

  19. UPDATES
  20. The Data Controller reserves the right to amend or update the content of this Privacy Policy, in whole or in part, including as a result of changes to the applicable legislation. The Data Controller therefore invites you to visit this section regularly to read the updated version of the Privacy Policy.

Ultimo aggiornamento: July 2026