Information provided pursuant to Art. 13 of EU Regulation 2016/679 (hereinafter GDPR)
1) Introduction: the importance of data protection
The operator of this website considers the protection of natural persons with regard to the processing of personal data a fundamental right. Transparency towards website Users therefore represents a primary objective, pursued through effective communication tools aimed at making available the basic information on data processing. This privacy notice is therefore intended to provide detailed information to visitors (hereinafter “Users”), with specific reference to the various functions of this website.
2) General information
Users are informed of the following general profiles, applicable to all areas of processing:
- all personal data are processed in compliance with the applicable privacy regulations (EU Regulation 2016/679 and Legislative Decree 196/2003, as amended and supplemented by Legislative Decree 101/2018);
- all Users’ data are processed lawfully, fairly and transparently, in compliance with the general principles set forth in Art. 5 of the GDPR;
- specific security measures are implemented to prevent data loss, unlawful or incorrect use, and unauthorized access, pursuant to Art. 32 of the GDPR.
3) Data Controller and data subjects’ rights
The Data Controller is the website operator, Maior Group srl, with registered office in Vicenza (VI), via L. Zamenhof 697, registered with the Vicenza Companies Register, tax code 03948440247, VAT no. 03948440247 (hereinafter “Maior Group”). No Data Protection Officer (DPO) has been appointed since the company does not process data on a large scale.
The User, by contacting the Controller using the contact details indicated in the contact section of this website, may exercise the following rights under the GDPR:
- right to request the existence of and access to personal data concerning them (Art. 15 “Right of access”);
- right to obtain the rectification/integration of inaccurate or incomplete data (Art. 16 “Right to rectification”);
- right to obtain, where justified, the erasure of data (Art. 17 “Right to erasure”);
- right to obtain restriction of processing (Art. 18 “Right to restriction”);
- right to receive in a structured format the data concerning them (Art. 20 “Right to data portability”);
- right to object to processing and to automated decision-making, including profiling (Art. 21, 22);
- right to withdraw previously given consent;
- right to lodge a complaint with the Data Protection Authority in the event of lack of response.
4) Account creation and purchases
Registration allows the creation of a User profile, to be used for purchases on the website (purchases can also be made without registration).
|
Purpose and legal basis of processing (GDPR – Art. 13, para. 1, lett. c) |
The data necessary for creating the profile (e.g. personal details, contacts, credentials, etc.) and for the administrative/operational management of purchases made (e.g. payment data, delivery data, etc.) and related services (e.g. returns, credit notes, vouchers, notices, wishlists, etc.) are requested. Processing is carried out for the performance of contractual and pre-contractual obligations (product purchase) with the customer and related legal obligations (GDPR – Art. 6, para. 1, lett. b, c), according to the terms and conditions of use specified on a dedicated page. A specific, free and informed consent (GDPR – Art. 6, para. 1, lett. a), documented via a dedicated check-box (GDPR – Art. 7, para. 1), is also requested. The completion of optional fields is intended to provide information and services more consistent with the User’s profile. The same data, excluding login credentials, will also be requested and processed, in the same manner, in case of orders without registration. |
|
Scope of disclosure (GDPR – Art. 13, para. 1, lett. e, f) |
The data are processed by internal staff, duly authorized and instructed in processing (GDPR – Art. 29), or by external entities managing the platform or entities instrumental to the provision of purchase/delivery services. Data may be transferred outside the EU only in compliance with the conditions set forth in Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not undermined (“Art. 45 Transfer on the basis of an adequacy decision, Art. 46 Transfer subject to appropriate safeguards, Art. 47 Binding corporate rules, Art. 49 Specific derogations”). |
|
Data retention period (GDPR – Art. 13, para. 2, lett. a) |
Data are retained for periods compatible with the purpose of collection and related legal obligations (administrative documentation retention), and in any case until the User’s request for erasure. |
|
Provision of data (GDPR – Art. 13, para. 2, lett. f) |
Failure to provide data will make it impossible to complete registration and make purchases. |
5) Newsletter subscription
The newsletter service provides constant and broad updates regarding useful information in the relevant sector, events and initiatives, proposed products/services, as well as possible promotional offers.
|
Purpose and legal basis of processing (GDPR – Art. 13, para. 1, lett. c) |
For the management of the service, only the email address is used, solely for the purpose of sending the newsletter. Subscription is subject to the acceptance of a specific, free and informed consent (GDPR – Art. 6, para. 1, lett. a), documented through a dedicated check-box (GDPR – Art. 7, para. 1). Each message sent will include a dedicated automatic unsubscribe function. |
|
Scope of disclosure (GDPR – Art. 13, para. 1, lett. e, f) |
The data are processed by internal staff, duly authorized and instructed in processing (GDPR – Art. 29), or by external entities managing the platform or entities instrumental to the provision of the newsletter. Data may be transferred outside the EU only in compliance with the conditions set forth in Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not undermined (“Art. 45 Transfer on the basis of an adequacy decision, Art. 46 Transfer subject to appropriate safeguards, Art. 47 Binding corporate rules, Art. 49 Specific derogations”). |
|
Data retention period (GDPR – Art. 13, para. 2, lett. a) |
Data are retained until the eventual “unsubscribe”, which may be freely exercised at any time through the link included at the bottom of each message sent. |
|
Provision of data (GDPR – Art. 13, para. 2, lett. f) |
Failure to provide the email address and consent will make it impossible to obtain the newsletter service. |
6) Additional services / downloads
The website may offer download services (e.g. multimedia gadgets, apps, photo/video content, etc.) to the User, which can be activated by completing a dedicated landing page that will enable access to the service.
|
Purpose and legal basis of processing (GDPR – Art. 13, para. 1, lett. c) |
For the provision of services, Users may be asked, on a completely voluntary and optional basis, to provide personal data and/or consent to receive commercial information. Processing is based on specific, free and informed consent (GDPR – Art. 6, para. 1, lett. a), documented through a dedicated check-box (GDPR – Art. 7, para. 1). |
|
Scope of disclosure (GDPR – Art. 13, para. 1, lett. e, f) |
The data are processed by internal staff, duly authorized and instructed in processing (GDPR – Art. 29), or by external entities managing the platform or entities instrumental to the provision of the services. Data may be transferred outside the EU only in compliance with the conditions set forth in Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not undermined (“Art. 45 Transfer on the basis of an adequacy decision, Art. 46 Transfer subject to appropriate safeguards, Art. 47 Binding corporate rules, Art. 49 Specific derogations”). |
|
Data retention period (GDPR – Art. 13, para. 2, lett. a) |
Data are retained for periods compatible with the purpose of collection and related legal obligations, and in any case until the User’s request for erasure. |
|
Provision of data (GDPR – Art. 13, para. 2, lett. f) |
Failure to provide data may result in the impossibility of obtaining the service. |
7) Requests for information and voluntary sending of email messages
The optional, explicit and voluntary sending of emails to the addresses indicated on this website entails the subsequent acquisition of the sender’s email address, which is necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the website dedicated to particular services on request.
8) Processing methods
Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
9) Redirect to external websites
The website may use so-called social plug-ins. Social plug-ins are special tools that allow for the incorporation of the features of social networks directly within the website (e.g., the “like” function of Facebook). All social plug-ins on the website are marked with the respective logo owned by the social network platform.
When visiting a page on our website and interacting with the plug-in (e.g., clicking the “like” button) or leaving a comment, the corresponding information is transmitted from the browser directly to the social network platform and stored there. For information on the purposes, type, and methods of personal data collection, processing, use, and storage by the social network platform, as well as the ways to exercise your rights, please consult the privacy policy adopted by the relevant social network.
10) Links to/from third-party websites
From this website it is possible to connect, through appropriate links, to other third-party websites. The Data Controller disclaims any responsibility regarding the possible management of personal data by third-party websites and concerning the management of authentication credentials provided by third parties.
11) Data subject rights
Data subjects have the right at any time to obtain access to their personal data, to request rectification or erasure, to oppose their processing, and to request restriction of processing in the cases provided under Art. 18 GDPR, as well as to obtain the data concerning them in a structured, commonly used, and machine-readable format, in the cases provided under Art. 20 GDPR.
Requests should be addressed to the Data Controller, who can be contacted at the following email: privacy@maiorsrl.it.
12) Right to lodge a complaint
Data subjects who consider that the processing of their personal data carried out through this website infringes the provisions of the GDPR have the right to lodge a complaint with the Italian Data Protection Authority, as provided by Art. 77 GDPR, or to take appropriate legal actions (Art. 79 GDPR).
13) Updates
The Privacy Policy of this website is subject to updates. Users are therefore encouraged to check its content periodically.
14) Cookies
The website uses cookies to ensure the proper functioning of procedures and improve the user experience of online applications. This document provides detailed information on the use of cookies and similar technologies, how they are used by the Data Controller, and how to manage them.
15) Definitions
- Cookies: small text files sent by a website to the User’s terminal (usually to the browser), where they are stored before being re-transmitted to the website upon the next visit by the same User.
- First-party cookies: cookies set and managed directly by the operator of the website the User is visiting.
- Third-party cookies: cookies set by a website other than the one the User is visiting.
- Session cookies: cookies that are automatically deleted when the User closes the browser.
- Persistent cookies: cookies that remain stored on the User’s terminal until their expiration date or erasure by the User.
16) Types of cookies used by the website
The website uses the following categories of cookies:
- Technical cookies: necessary for the proper functioning of the website.
- Analytical cookies: used to collect information, in aggregate form, on the number of Users and how they visit the website.
- Profiling cookies: aimed at creating user profiles and used to send advertising messages in line with the preferences expressed by the User while browsing.
17) Management of cookies
The User can decide whether or not to accept cookies using their browser settings. Please note that disabling all or part of the technical cookies may compromise the optimal use of the website. Disabling third-party cookies does not affect navigability in any way.
Settings can be defined specifically for different websites and web applications. Furthermore, the best browsers allow you to define different settings for “proprietary” and “third-party” cookies.
18) Third-party cookies
When visiting a website, cookies may be received both from the visited site (“owners”) and from sites managed by other organizations (“third parties”). An example is the presence of “social plugins” for Facebook, Twitter, Google+, or LinkedIn, or embedded multimedia display systems (integrated) such as YouTube, Flikr. These are parts of the visited page generated directly by the aforementioned sites and integrated into the host site. The most common use of social plugins is aimed at sharing content on social networks.
19) Google Analytics
The website also includes components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. (“Google”). These cookies are used solely to monitor and improve the performance of the website. For further information, please refer to the following link: https://www.google.it/policies/privacy/partners/
20) Duration of cookies
Some cookies (session cookies) remain active only until the browser is closed or the logout command is executed. Other cookies “survive” when the browser is closed and are available even on subsequent User visits. These are known as persistent cookies, and their duration is set by the server upon their creation.
21) Consent to the use of cookies
The User consents to the use of cookies by continuing navigation after reading the banner on the website. The consent can be revoked at any time.