IL MALLO S.A.S. DI FRENO GIOVANNA & C based in Pozza di Maranello (MO) – Italy – C.F. and VAT number: 01545770362, as the data controller, (hereinafter also simply “Owner”) informs you of the purposes and methods by which your data will be processed pursuant to art. 13 Legislative Decree no. 196/2003 (hereinafter “Privacy Code”) and of the articles 12-13 EU Regulation no. 2016/679 (hereinafter “GDPR” or General Data Protection Regulation).
IL MALLO S.A.S. shall seek, as much as possible, to enter accurate information in this website, reserving the right to change them at any time, without notice.
IL MALLO S.A.S. does not guarantee the accuracy and thoroughness of information in this website, IL MALLO S.A.S. declines all responsibility in case of: any interruptions of the website, software problems, wrong information, direct or indirect harm regardless of the cause, nature, origin and consequences, loss of profit, loss of customers, loss of datas, as well as any other loss resulting from the access or not in the website by the user, that is from directly or indirectly entrusting information from the website.
PRIVACY POLICY
Data Controller
The Data controller pursuant is IL MALLO S.A.S., based in Via Pozza di Maranello (MO), e-mail: info@ilmallo.it.
For further information about the rights of data subjects, please go to the paragraph “Rights of Data Subjects”.
Processing of data
The personal data subject to processing are directly collected by IL MALLO S.A.S. or by third party expressly authorized, that is released from the Company to such third party in order to pursue the pursue above described.
Legal basis and purpose of the processing
In the event of a sale with the subject, the legal basis consists in the fulfillment of a contractual obligation. Your personal data, freely communicated and acquired by us due to the activity carried out, will be treated lawfully and fairly for the following purposes
The legal basis of the processing is identified in service provision from the Company, management and support of the website, as well as terms, execution and termination of on-line contract resulting from it. The personal data processing from IL MALLO S.A.S. is aimed at: 1) management of customers and suppliers with their respective orders for goods; management of company entrances and exits in case of access to our production department Headquarters.
The data processed are updated, relevant, complete and not excessive with respect to the purposes listed above for which they are collected and subsequently processed.
The nature of the data is of a common type (name, address, tax code / VAT number and the like). The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4, no. 2), GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing. 1) SUBSCRIPTION TO ILMALLO.IT NEWSLETTER: if a data subject subscribes to “Il Mallo Newsletter”, personal data will be used only after a specific agreement to receive commercials or promotional communication, updates, for instance, about new arrivals, exclusive offers, special events and promotions. To unsubscribe click on the link located in the bottom of the e-mails or email at info@ilmallo.it. 3) MODULO RICHIESTA INFORMAZIONI SU ilmallo.it: nel caso in cui l’utente decida di contattarci tramite il form nella pagina contatti, solo in seguito ad un eventuale e specifico consenso, i dati personali saranno trattati dal Titolare del Trattamento ai fini di richiesta informazioni circa i nostri prodotti. In particolare, a fronte del conferimento del proprio nome, cognome, indirizzo e-mail, azienda e indirizzo, questi saranno trattati per al fine di fornire le informazioni richieste.
Nature of processing
The legitimate interest of the data controller consists of: compliance with the obligations prescribed by law relating to the civil, corporate, tax-fiscal sphere.
The provision of personal data and the consent to processing them is voluntary as seen in the point 2) of the previous paragraph. If the data subject decides to proceed with registration to the newsletter, provision of personal data and the consent to processing them is mandatory. Failure to provide the consent means impossibility for IL MALLO S.A.S. to send “Newsletter”, commercial or promotions communication, updates, for instance, about new arrivals, exclusive offers, special events and promotions.
In relation to the point 2) of the previous paragraph, the provision of personal data and the consent of processing them is mandatory. Failure to provide consent means impossibility for IL MALLO S.A.S. to register the data subject of ilmallo.it website.
Failure to provide consent led to impossibility for IL MALLO S.A.S. to supply the services offered.
Processed personal data
Personal data object of processing from the Data Controller are those supplied by the data subject during the browsing of www.ilmallo.it website, during eventual registration / compliance with services / programs provided to IL MALLO S.A.S. such as, for instance: name, surname and e-mail address, as well as data necessary for the services provision.
Method of Processing and Data Storage
The processing of personal data is performed by the Data Controller in compliance with the current legislation on Privacy. The Data Controller executes the processing of personal data through information and/or telematic instruments and through organizational methods strictly related to the pursuit of the purposes indicated in this policy, as well as adopting all the necessary measures to prevent non-authorized access, disclosure, modification or destruction of personal data, their loss and their illegal use. However, the Company cannot guarantee to data subjects that the adopted measures aimed to regulate the security of the website and the transmission of data and information on the website could be able to limit or avoid any risk of unallowed access or dispersion of data from devices used by the data subject. For this reason, it is suggested to the data subject to make sure that their computers are equipped with software adequate to the protection of data transmission (for example updated antivirus or anti-spyware software) and that the Internet Provider has taken appropriate measures for the security of online data transmission. The Company also commits to process the data according to the principles of fairness, legality and transparency, to collect them to the extent necessary for their processing and to consent the use only by staff authorized for this aim. The management and storage of acquired personal data will take place in archives or server located in the European Union and owned by the Company and/or by third-party companies appointed as External Responsible for the processing and, anyway, currently located in Italy.
In relation to different purposes, personal data will be stored for the necessary time to achieve those purposes and, anyway, in accordance with the current legislation.
Anyway, the Company will take care of avoiding the use of data indefinitely by properly verify on a regular basis the effective permanence of the interest of the data subject.
Recipients of the data
In addition to the internal use by the Data Controller with reference to authorized subjects as managers and agents, your personal data, with the sole purpose of fulfilling the obligations envisaged, they may be communicated to the following subjects: a) companies, collaborators, consultants or freelancers for certain legal obligations; b) Public bodies in the event of a legally valid request; c) Insurance company.
The data collected will not be spread in any way, but processed in the limits and for the purposes above described by the staff of the Company on adequate operative instructions (for example, administrative staff, sales staff, marketing staff, legal staff, System administrator, etc.). Some processing could also be made by third parts, appointed External Responsibles, used by the Company or could be used by the Company in the management of the contract, provision of services and for organizational needs. In particular, data could be disclosed to:
a) subjects, public and private, that could access data in accordance with provisions of law, regulation or Community legislation, in accordance with the limits set by such regulations;
b) subjects needing to access the data for purposes connected to the ongoing contractual relations, to the extent strictly necessary to perform auxiliary tasks (such as, for example, banks and financial institutes, technical service providers, hosting provider, IT companies, advertising agencies, courier and shipping companies);
c) advisors, to the extent necessary to perform their professional duties.
The up-to-date list of External Responsibles and subjects authorized to the processing is secured and kept by the Data Controller and is available for the data subject, upon request to be made by e-mail at the address info@ilmallo.it.
Data transfer abroad
The Data Controller will not transfer your personal data to third countries or international organizations.
DATA STORAGE PERIOD
Your data will be used for the activities provided for in the relevant agreement and kept for a period subsequent to the termination of the assignment or service or contract, as follows in relation to the legal terms of control or exercise, forfeiture or prescription of rights of the parties: a) ten years for accounting and tax data managed in relation to the service or supply relationship performed. After this retention period, your data will be deleted or destroyed or transformed into anonymous form, unless otherwise indicated by the interested party as part of the exercise of their rig.
Rights of data subjects
As an interested party, the data subject may exercise at any moment the rights under articles 15, 16, 17, 18, 20 and 21 of the European regulation related to privacy 2016/679 (GDPR) conferring the right:
a) Under article 15: to obtain confirmation from the Data Controller whether or not his/her personal data are processed, in such a case, obtain access to data and information such as: (I) purpose of the processing; (II) categories of personal data; (III) recipients or categories of recipients that had or will receive data, in particular if recipients are located in Third Countries or are International Organizations; (IV) whenever possible, the retention period of personal data, or rather when is not possible, the criteria used to determine that period;
b) Under article 16: to obtain from the Data Controller the rectification of wrong personal data concerning him/her without undue delay; taking into account the purposes of processing, the interested party has the right to obtain completion of personal data where incomplete, also providing a supplementary statement;
c) Under article 17: to obtain from Data Controller the delation of personal data without undue delay. Data Controller has the duty to erase, without undue delay, all the personal data if there is one of the reason referred to Article 17 – paragraph 1;
d) Under article 18: to obtain from Data Controller a limitation of data processing when there is one of the cases regulated by Article 18 – paragraph 1;
e) Under Article 20: to obtain from Data Controller the data portability which means receive the personal data provided to the Data Controller in a common, structured and machine readable format. The interested party has also the right to transmit such data to another Data Controller unimpeded from the first Data Controller, in the occurrence of conditions laid out in the Article 20 – paraghaph 1. Finally, the data subject has the right to obtain a direct transmission of personal data from a Data Controller to the other, if technically feasible;
f) Under Article 21: to object to the processing of personal data. For the exercise of his/her rights the data subject may transmit his/her demands at [info@ilmallo.it].
It is also noted that the data subject has the right to withdraw consent at any time without undermining the legality of the consensus-based processing provided before the revocation, notwithstanding the consequences above mentioned about an eventual rejection to provide such personal data. The data subject has also the right to file a complaint to a Supervisory Authority.
He/She may send a request in relation to the exercise of such rights by contacting the Data Controller at info@ilmallo.it.
IL MALLO S.A.S. is committed to reply to requests received by data subjects within a month, except in those complex cases for which it may take up to 3 months. In any case, the Data Controller will communicate to the data subject the reason for the delay within a month starting from the request, replying on paper or on electronic document. In case of request of rectification, deletion or restriction of processing, the Data Controller commits to reply to each of the recipients, unless it proves impossible or involves a disproportionate effort.
The Company states that any contribution may be required to the data subject if the requests are manifestly unfounded, excessive or repetitive; in this regards the Data Controller must set up a system for recording all the requests.
Changes to this Privacy Policy
Data Controller reserves the right to change the current Privacy Policy at any moment informing data subjects on the website www.ilmallo.it. Therefore is recommended to often visit this page, with reference to the data of the last updating specified below. In case of non-acceptance of the changes made in the current Privacy Policy, the data subject may ask the Data Controller to erase his/her personal data. Unless otherwise expressly stated, the previous Privacy Policy continues to apply to the personal data collected up to that time.
Privacy policy update 21/12/2020
