INFORMATION PURSUANT TO ART. 13 EU REGULATION N. 2016/679

THE SPACE MALL S.R.L.S, with registered office in Via Giarratana, 119 – 00133 Rome, (hereinafter, “Owner”), as data controller, informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter “GDPR”) that your personal data will be processed by employees and collaborators of THE SPACE MALL S.R.L.S.

All employees of THE SPACE MALL S.R.L.S. and the other natural persons who have access to your data operate under the direct authority of the Data Controller and the Data Processors, have been appointed as personal data processors, have been trained and have received adequate operating instructions.

The data we process

The Data Controller processes personal, identifying and non-sensitive data, in particular, name, surname, tax code, p. VAT, email, telephone number, bank details, credit cards, Wallet number – hereinafter, “personal data” or even “data”. Data deriving from Cookies.

When data is collected.
The Data Controller processes personal, identifying and non-sensitive data (in particular, name, surname, tax code, VAT number, email, telephone number, bank details, credit cards, Wallet number – hereinafter, “personal data” or even “Data”) communicated by you during:

– for the purchase of THE SPACE MALL Coin (TSM) Tokens.

– Any requests

– support through our assistance channels

– while browsing our site

– if you have given consent to other companies to share your data or if your information is publicly available.

THE SPACE MALL S.R.L.S uses cookies when you browse our site, for more information and details consult the “Cookies Policy” within our site itself.

The purposes of the treatment
The data processing will be carried out to allow the performance of the activities related to the establishment and

to the management of the service requested from the owner.

Activate the contract signed, to manage your requests, provide additional services compared to the contract signed, to send commercial communications, to fulfill a legal obligation, to meet customer needs for requests by candidates to work with us.

The same data will be processed lawfully, correctly and with the utmost confidentiality, mainly with electronic and IT tools and stored both on IT and paper supports and on any other type of suitable medium, in compliance with the minimum security measures thus as required by the Code and the Regulations.

How the treatment takes place
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2 of the GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.

In particular, I am treated for:

The management of the requested Service
The provision of the Service.
Payment management
For the request of information and for the resolution of any problems
Service messages
Commercial communications by phone, SMS, fax, mail, regular mail and via site.
Receive information and commercial offers.
Answers to reports or questions.
To detect fraud, damage and debt collection.


The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the Service Purposes relationship and for no more than 2 years from the collection of data for Marketing Purposes.

To whom your data is communicated
Once your consent has been given, your data may be made accessible for the purposes described above .:
– to employees and collaborators of the Data Controller or of the companies THE SPACE MALL S.R.L.S of which the Data Controller belongs, in their capacity as persons in charge and / or internal data processors and / or system administrators;
– to third-party companies or other subjects, (for example, provider for the management and maintenance of the website, suppliers, professional offices, etc.) who carry out outsourcing activities on behalf of the Owner, in their capacity as external data processors.

– entities, professionals, companies or other structures entrusted by us with the processing related to the fulfillment of the administrative, accounting and management obligations related to the ordinary conduct of our economic activity.

– to public authorities and administrations for the purposes related to the fulfillment of legal obligations;

– banks, financial institutions or other subjects to whom the transfer of the aforementioned data is necessary for the performance of our company’s activities in relation to the fulfillment, on our part, of the contractual obligations assumed towards you


Without your express consent, the Data Controller may communicate your data to Supervisory Bodies, judicial Authorities as well as to all other subjects to whom communication is mandatory by law for the accomplishment of said purposes. Your information will not be disseminated.

Transfer of data abroad.
The management and storage of personal data will take place on servers located within the European Union of the Data Controller and / or third party companies appointed and duly appointed as Data Processors. The servers are located in ITALY. The data will not be transferred outside the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the location of the servers in Italy and / or the European Union and / or non-EU countries. In this case, the Data Controller ensures as of now that the transfer of non-EU data will take place in accordance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and / or by adopting the standard contractual clauses provided by the European Commission.

Nature of providing data for the provision of the required services
The provision of data for the purposes of processing is required. In their absence, we cannot guarantee the relationship the requested Service.

Nature and provision of data for marketing activities

The consent to the processing of data for marketing activities is optional, it can be expressed separately and will remain valid until revoked by you.

Your rights
At any time, you can exercise, pursuant to articles 15 to 22 of EU Regulation no. 2016/679, the right to:

Revoking consent at any time. The User can withdraw consent to the processing of their Personal Data previously expressed.
Oppose the processing of your data. The user can object to the processing of their data when it takes place on a legal basis other than consent to access their data.
Access your data: The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
Make sure and ask for rectification. The User can verify the correctness of his Data and request its updating or correction.
Obtain the limitation of the treatment. When certain conditions are met, the user can ask the treatment of its personal data limitation. In this case the owner will not process data for any purpose other than their preservation.
Obtain the cancellation or removal of your Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
Receive your data or have it transferred to another holder. You have the right to receive their data in a structured, common and readable use by automatically and, where technically feasible device size, to obtain the obstacles without transfer to another owner. This provision is applicable when the Data are processed with automated tools and the treatment is based on the User’s consent, on a contract of which the User is a party or on contractual measures connected to it.
Propose claim. The User can lodge a complaint with the competent personal data protection control authority or take legal action.

How we protect your data.

This paragraph describes the measures to guarantee:

the protection of the areas and premises where the processing of personal data takes place;
proper storage and custody of records, documents and media containing personal data;
logical security, in the context of the use of electronic tools.

We proceed to the description of the measures that have already been adopted by the Data Controller, when accessing the Data, of any further measures, aimed at increasing security in data processing.

Measures taken for the integrity and availability of data:

Organizational measures:

appointment in writing staff
instructions for treatment
controlled access
closed wardrobes
credential modification procedure
company policies
training
appoint external managers in writing

Technical measures:

authentication
authorization
separation
firewall
antivirus
business continuity
disaster recovery

Revocation of consent, modification of data, right of opposition

At any time you can revoke your consent and change your privacy settings, you can also object to the processing of data by us.

How to contact us
You can exercise your rights at any time by sending:
– a registered letter with return receipt a – THE SPACE MALL S.R.L.S – Via Giarratana, 119 – 00133 Rome

– an e-mail to the address: info@thespacemallsrls.com

Owner, manager and agents
Holder of the treatment: Jeannette Del Rocio Flores Cisneros – Via Giarratana, 119 – 00133 Rome

Data Processor and Data Processors: the updated list is kept within the headquarters of the Data Controller

Changes to this Policy
This information may change. We therefore recommend that you regularly check this Notice and refer to the most updated version.