INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA OF CUSTOMERS IN ACCORDANCE WITH ART. 13 and 14 OF THE REGULATION (EU) 2016/679 ("GDPR")

Last modified: version 28 April 2021

SCOPE OF

Yield.social is a platform that aims to involve Brands and Influencers in the creation of social campaigns. The Platform acts as an intermediary between Companies and Influencers interacting with them actively. Yield selects, based on the needs of the Companies (Brand), the Influencers most suited to the needs and objectives of the marketing campaign to be carried out.

This privacy policy (the "Privacy Policy") describes how and why YIELD.SOCIAL ("We" "we" "our") collects, uses and shares your information when you use the Yield Network Management website accessible at the URL www.yield.social (hereinafter the "Site" or the "Platform") and our related applications, services and software (collectively, with the Site, the "Services") from any PC, application, mobile device, platform or other method of access or use. This document also explains the information collection, use and sharing practices for the Services, including what information is collected, how such information is acquired, maintained, stored, shared and / or used, and our privacy choices. This Privacy Policy is independent of our offline personal data collection practices. By using our Services, you consent to the treatments that we will explain below.

By using the Platform and its services, you are aware that we will use your personal data as described in the information. In case you are under the age of 18 (eighteen), or you are not in possession of the ability to act, this Notice is addressed to the person in charge of this by the Italian law in force, who remains the only person authorized to afgive us consent to the processing of your personal data. If you believe that, for reasons not known to us, information on minors under 18 has been collected improperly and without any parental consent. years, please contact us atzo privacy@yield.social, in order to allow us to intervene in this regard.

REFERENCE STANDARD BASIS

The legal basis on which this information is based is the European Data Protection Regulation n. 679/2016 of 27 April 2016 concerning the protection of individuals with regard to the processing and free circulation of personal data and the Legislative Decree. 196/03 (and subsequent integration with Legislative Decree 101/2018).

WHAT IS NOT REFERRED TO L'INFORMATION

This information does not refer to and does not regulate the services offered by third parties (possibly accessible by means of links placed on the Platform) and related methods of processing your personal data. We advise you to carefully read on the websites of third parties their privacy policies on how they will process your personal data and how they will eventually be shared. The owner has no control over these third parties and therefore declines any responsibility regarding the processing of your personal data carried out by these sites.

UPDATE OF THE INFORMATION

We will modify the information with additions or variations to make it updated with respect to the legislation and adequate with respect to any technical changes made to the Platform or to any changes in the purposes or methods of processing your data. We will notify you of any changes with specific notices. However, we recommend that you check periodically

this page to stay updated. Each updated version, which will be accompanied by its date, will be published on this web page and will become effective for you immediately after its publication.

1. Data controllers and managers

The Data Controller of your personal data through the Platform is the company DIEMME Group srl, Via Trinchese 311a - 73100 Lecce, VAT number 05095100755, which can be contacted at e-mail privacy@yield.social, PEC address diemmegroupsrl@mypec.eu. (which in this document we will indicate, precisely, also as "the Owner").

1.1 External data processors

For certain processing operations, the Data Controller makes use of employees, agents, and collaborators, who are responsible for carrying out processing operations under their authority, as well as partner companies or professional firms that provide assistance and consultancy in accounting matters. administrative, legal, tax and financial company located throughout the European Union, which are duly appointed as data processors pursuant to art. 28 of the GDPR.

The updated list of data processors, as well as subjects who carry out processing operations under the authority ofThe Data Controller is kept at the headquarters of the same.

2. Categories of personal data

The Holder will treat your personal data collected during the use of the Platform, the conclusion of the contract, the utilityuse of the live chat and during the collaboration and intermediation relationship (hereinafter also referred to as "Data"). By way of example, the Data Controller will acquire the following types of personal data:

1) personal data, such as name and surname, place and date of birth, residential address;
2) contact details, such as shipping address, telephone number and e-mail address;
3) data relating tothe activities carried out through the Platform, the acquisition of points and referral;
4) bank details (eg IBAN), if provided for a possible refund;
5) navigation data, such as IP address, time of access to the site and / or registration to the platform, methods of accessing the server, numerical code indicating the status of the response given by the server (successful, error, etc.); 6) personal data such as photos and id of your social accounts;

Through the Platform, the Data Controller will not acquire data of a sensitive nature or in any case belonging to the special categories referred to in art. 9 of the GDPR or data relating to criminal convictions or offenses.

The Data will be processed by the Data Controller exclusively for the purposes and within the limits indicated in the following paragraphs.

3. Purpose and legal basis of the processing

The Data Controller will use your Data for the following purposes:

a) for the execution of the contract and / or pre-contractual activities

The Data indicated in paragraph 2, nos. 1-5, will be processed by the Data Controller to allow registration on the Site and the use of the services specifically connected to it. By way of example, your Data will be processed to allow you to achieve your business objectives, regardless of whether you use the Platform as

Company or as an Influencer. The Data will then be processed for the execution of the existing contract with the Owner.

The provision of the Data indicated in paragraph 2, nos. 1-5 it is necessary to allow the establishment and the management of the pre-contractual and contractual relationship; failing that, we will not be able to provide the requested service.
As regards the data indicated in paragraph 2, n.6, although they are optional, if you want to use the platform as an Influencer, we would like to point out that in default, we may have difficulty in making you achieve the goals you have set for yourself.

b) for marketing purposes.
With specific consent, the Data Controller will be able to process yours
Data for sending material pmarketing or commercial communications relating to the services offered by the Platform or for market research. The sending of such communications may take place through the use of automated systems (eg-mail, SMS, push notifications) and traditional systems (eg, paper mail).

For this processing purpose, the Data referred to in paragraph 2, nos. 1 and 2 will be used.

The consent given is revocable at any time, even with reference only to automated contact systems, by writing to privacy@yield.social or by using the functionand “unsubscriwell" present in the footer of our communications.

Newsletter. The Data indicated in paragraph 2, n. 2, provided when subscribing to the newsletter will be used for the sole purpose of providing the requested newsletter service. You can, at any time, ask to cancel your subscription to the newsletter by following the instructions indicated from time to time in any communication made for the purposes referred to in this point.

Soft Opt-in. The Data referred to in paragraph 2, n. 2, acquired in the context of the contractual relationship between you the Owner, may be used to send commercial communications relating tothe services concerning this relationship. In any case, you can object to such processing at any time by following the instructions indicated from time to time in any communication made for the purposes referred to in this point.

c) for profiling purposes

The Data Controller will be able to process the Data for the use ofproprietary algorithm called Scorpion® which allows you to measure the results of influencer marketing campaigns e define a "rating influence". Thanks to the Yield influence rating, it allows companies to create high-performance and targeted campaigns without wasting time and budget and influencers and content creators to obtain revenues in various forms. For the pursuit of this purpose, the Data referred to in paragraph 2, nn. 1-2 and 6.

These Data will be processed by the Data Controller on the basis of its legitimate interest in optimizing its procedures internal necessary for the provision of the services proposed to make them the more functional and useful for the specific needs of the interested parties. The legitimate interest of has been appropriately balanced with your interests and expectations by reducing the impact to a minimum of the rating of influence on your legal sphere.

You we remind you that, pursuant to art. 21 of the GDPR, potrto object at any time to such processing, for reasons connected with your personal situation, by writing to privacy@yield.social.

4. Data retention period and duration of processing

Your personal datai will be stored on servers located in the European Union.

Your data will be kept for the entire duration of the contractual relationship with one or both of the Data Controller. Following the termination of the relationship, the Data will be kept for a period of 10 years exclusively for the protection of the rights of the owner and for the fulfillment of legal obligations.

With reference to the processing for marketing purposes indicated in paragraph 2, lett. b), the Data will be processed until the consent that you can give yourself by contacting us or by exercising your right to object to the processing is revoked.

With reference to the data processed for profiling purposes, the Data, being an integral part of the contract between you and the Data Controller, will be processed for the entire duration of your collaboration with Yield, unless you exercise your right to object to the processing. After this period or in case of opposition, the data will be stored if necessary to pursue research and statistical purposes or will be permanently deleted.

5. Defense in court and regulatory obligations

Your data may be used for defense by the owner in court or in the stages leading to its eventual establishment. In this case the legal basis is the legitimate interest.

Furthermore, your data could be used to fulfill obligations established by regulations and by applicable national and supranational legislation. In this case, the legal basis is the need to fulfill legal obligations.

6. Transfer of personal data to non-EU countries

The Owner does not provide to transfer your data outside the EU. In any case, should it become necessary to transfer your data abroad to extra countries- European, and in particular in the United States, this will take place only after verification of the standard contractual clauses (Standard Contractual Clauses) adopted / approved by European Commission pursuant to art. 46, par. 2, lett. c) and d) of the GDPR or the binding rules for the company referred to in art. 47 of the GDPR or, failing that, by virtue of one of the derogatory measures referred to in art. 49 of the GDPR.

7. User rights

In accordance with current legislation on the protection of personal data, you have the following rights:
ask and obtain information about the existence of one's own data in the availability dthe Data Controller and access to such data;
- for the data being processed with automated systems, request the transfer to another holder;
- request and obtain the modification and / or correction of your personal data if you believe they are inaccurate or incomplete;
- request and obtain the cancellation - and / or limitation of processing - of your personal data in the case of data or information that is not necessary - or no longer necessary - for the aforementioned purposes, therefore after the retention period indicated in the paragraph that precedes.

You can exercise the rights mentioned above at any time by sending a request to the email address privacy@yield.social and explaining your needs. We will contact you or inform you as soon as possible and, in any case, within 30 (thirty) days from the date of your request..

We also inform you that pursuant to the regulations in force you can propose any complaints regarding the processing of your personal data to the Guarantor for the protection of personal data. reachable at URL www.garanteprivacy.it.

8. Security of personal information

The Owner uses a variety of technologies and security procedures to protect our customers' personal information from unauthorized access, use or disclosure. Personal information stored on servers and computers is kept in a controlled and secure environment, protected from unauthorized access, use or disclosure. When personal information is collected on our websites and / or transmitted to other websites, they are protected through the use of encryption, such as the Secure So protocolcket Layer (SSL). If you have any questions about the security of your personal information, you can email us at privacy@yield.social.

9. Information on Social Networks and Google

Below we provide you with some information regarding usage that YIELD.SOCIAL makes of Google and other Social Media.

9.1. Joint ownership of statistical data processing with Facebook

For "Pages", Facebook offers the "Insights" tool, a feature which provides aggregate data that helps to understand how people interact with Facebook Pages.

Regarding the Facebook page https://www.facebook.com/yieldinfluencer it is Co-Owner of the processing of statistical data together with Facebook Ireland Limited ("Facebook Ireland").

At this link (https://www.facebook.com/legal/terms/page_controller_addendum) it is possible see the Facebook Page Insights Entitlement Addendum, which indicates the division of the responsibilities of Facebook Ireland and of the Owner as administrator of the page www.facebook.com/yieldinfluencer.

Facebook provides the following information in detail:

• What types of information Facebook collects • Like Facebook use that information
• How this information is shared • The legal basis for data processing

• How to exercise the rights provided by the GDPR
• The contact details of Facebook Ireland for matters relating to the protection of personal data •
The contact details of the Data Protection Officer for Facebook Ireland
• The rights of the Facebook visitor under the GDPR
• The data retention period
• Management of Facebook cookies
.

9.2 Google Analytics with anonymized IP (Google Inc.)

Google Analytics is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on the location in which this website is used ("Google"). Google uses the personal data collected for the purpose of track and examine the use of this Site, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Qhis integration of Google Analytics makes your IP address anonymous. Anonymization works by shortening the IP address of thethe Users.

Personal Data collected: Cookies; Usage data.
Place of processing: United States
-Privacy Policy - Opt Out; Ireland - Privacy Policy - Opt Out.

9.3 Instagram

The owner manages the Instagram account reachable at the address https://www.instagram.com/yield.influencer

On this page (https://help.instagram.com/519522125107875) you can consult the information Instagram privacy.

On this page (https://help.instagram.com/1896641480634370?ref=ig) you can consult the Instagram cookie policy.

10. Changes

The Data Controller reserves the right to modify or simply update the content of this Privacy Notice, in whole or in part, also due to changes in the applicable legislation, taking care to inform such changes as soon as they are introduced and they will be binding as soon as published on the Site. To this end, all interested parties are invited to regularly visit this section of the site to become aware of the most recent and updated version of the Privacy Policy and to be always updated. on the data collected and on the use made of itnno the owner.

11. Cookies

12. DEFINITIONS

Data Controller: the natural person, the legal person, the public administration and any other body, association or organization which is responsible, even jointly with another owner, for decisions regarding the purposes, methods of processing personal data and the tools used. , including the security profile.

Responsible for the treatment: The person, company, body, association or body to which the owner entrusts, even externally, for the particular experience or capablety, tasks of management and control of data processing.

Company or Brand: These are companies interested in finding Influencers to promote their products / services on the internet.

Influencer: This term refers to a popular character on the internet, who has the ability to influence the behavior and choices of a certain group of users and, in particular, of potential consumers, and is used in the context of marketing strategies. communication and marketing of companies / brands.

ChatBot and Livechat: This is a software designed to allow users of the YIELD.SOCIAL site to interact with customer care directly via the web, even in an automated form.

Personal Data: We consider personal any information that is voluntarily submitted and that personally identifies someone, including contact information, such as your name, email address, company name, address, telephone number and other information about you or your business. . Personal Information may also include information about any transaction,

both free and paid, information that is available on the Internet, such as from Facebook, LinkedIn, Twitter and Google, or publicly available information.

Special data: We consider data particularracial or ethnic origin, physical or mental health conditions or information, financial, judicial and / or health information.

Navigation Information: Refers to information on your computer and
visits to one of the websites managed by the Data Controller
such as IP address, geographic location, type browser, the reference source, the duration of the visit and the pages viewed.

Consent: It refers to the free manifestation of the will of the interested party with which he accepts expressly a specific processing of your personal data, of which you have been previously informed by the Data Controller.