As foreseen in the European Union Regulation n. 679/2016 (hereinafter "GDPR") and in particular to art. 13, below we provide you with the information required by law relating to the processing of your personal data. Note for minors: We do not knowingly process data from minors under 14, however if you are 14 or under, please obtain parental / guardian permission before providing your personal information. The website www.mamode.it is owned and managed by Mamode srls, with registered office in Tivoli (RM), Italy, Via Paterno 29 B. Mamode srls complies with applicable data protection laws and constantly strives to improve the protection of its customers. This information on the protection of personal data informs you about the processing of your personal data in relation to the website www.mamode.it, how to manage them and how the services are made available through the Mamode website.
1. HOLDER OF THE TREATMENT
The owner of the processing of personal data is pursuant to art. 26 GDPR - European Privacy Regulation: - Mamode srls, with registered office in Tivoli (RM) Via Paterno 29B, VAT number 14933241004
pec: firstname.lastname@example.org; unique code: M5UXCR1
2. WHAT ARE PERSONAL DATA?
Personal data is information that refers to an identified or identifiable natural person, such as name, surname, gender, e-mail address, telephone number, date of birth, postal address.
3. WHAT PERSONAL DATA ARE PROCESSED?
3.1 If you create your personal user account, fill in the registration fields on the Site or give us your consent, we process the personal data provided in this way, in particular the data as defined in section 2.
3.2 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes the IP addresses or domain names of the computers used by the Users, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data will be recorded in anonymous and aggregate form and will be used, always in aggregate form, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted, always in aggregate form, immediately after the processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
4. WHEN DO WE PROCESS YOUR DATA?
We process your personal data when you create your personal user account, when you order products via our website or when you subscribe to our newsletter. Unless otherwise specified in the following provisions, the legal basis for this data processing is Article 6 paragraph 1 b) and a) GDPR (execution of a contract and consent).
5. PURPOSE OF DATA PROCESSING
To make purchases on our site you need to create a personal account (hereinafter "user account"). You can store your personal information in your user account, and facilitate shopping in our online store. To create a personal user account we need your personal details, name and surname and, as appropriate, address and telephone number. Additionally, users must provide their email address and a password of their choice. The e-mail address provided by the users also serves as the login data for the user account. Furthermore, users can store their personal data within the user account and thus conveniently shop in the online shop. The information can be updated at any time in the personal area of the user account ("User Profile"). At the time of registration, the User will be asked to enter personal data, some of which - from time to time expressly identified as such - it will be mandatory and essential to provide for the purposes of registration (eg the e-mail address at which receive newsletters). The other data may or may not be provided, at the discretion of the User, and failure to provide them is in no way prejudicial to the purpose of registration, but may allow only partial use of the Services. Of course, the user can cancel their user account at any time and without giving reasons. The easiest way to do this is to send an e-mail to email@example.com. The legal basis for this data processing is Article 6 paragraph 1 b) GDPR (performance of a contract).
5.2. With regard to the order of products in our online shop, the processing of your personal data is aimed at enabling and optimizing the fulfillment of the order, including payment and delivery. When payment is made by credit card, we receive the payment ID and the last four digits of the credit card number from our payment service provider. We need this for the authentication and allocation of your order and therefore for your security. The personal data required for payment are collected directly by the payment service provider. The legal basis for the aforementioned data processing is the article. 6 paragraph 1 b) GDPR (execution of a contract) and Art. 6 paragraph 1 f) GDPR (legitimate interest, based on our interest in offering you a secure payment option by credit card). Among other things, we also check all previous orders placed from your customer account. The system also checks whether the delivery address is different from the billing address, whether it is a new delivery address or whether the order is to be delivered to an intermediate center. After choosing the payment service provider, you will be asked for the data necessary to use this service. This payment information is forwarded directly to the respective payment service provider and is not stored by Mamode. We save billing and delivery address details in your user account so that you no longer need to enter them the next time you make a purchase. This data can be changed at any time in the future. If you do not agree to the payment method or methods offered, you can inform us in writing by letter or e-mail at firstname.lastname@example.org they are deleted at the latest after the expiry of the warranty terms provided by law, unless this does not conflict with the conservation obligations established by law.
We offer to all users of our community the possibility of receiving our newsletter. To activate it, the user can register with his e-mail address on the appropriate page. The user can revoke his consent at any time and without indicating the reasons. The easiest way to do this is to click on the "Unsubscribe" link, which can be found in every newsletter. The Newsletter may also contain advertising banners, advertisements and advertising offers from both the Company and third parties. The legal basis of this process is Article 6, paragraph 1 a) GDPR (consent).
5.4 Contact via contact form
If you send us inquiries using the contact form, we will process the information you provide, including your contact details, in order to process your request. In the event of subsequent requests, this additional data will also be stored. The legal basis is Article 6.1 b) GDPR (fulfillment of the contract - the processing of user data is necessary for the fulfillment of the contract to answer questions or requests) as well as Article 6 paragraph 1 f) GDPR (balancing of interests - based on our interest in processing requests from users of our website). As Data Controller, Mamode informs that Users' personal data, subject to their consent, may be processed by Mamode for the following purposes: a) sending information, promotional and advertising material relating to the Mamode brand (by way of example but not limited to: sending newsletters, promotions, etc.); b) elaborate studies and statistical research; c) collect data and information in general and in particular on the orientations and preferences of consumers and process them through electronic tools in order to identify the products that may be of greatest interest to them, in such a way as to send them promotional communications expressly addressed to them products.
6. METHOD AND PLACE OF TREATMENT
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. The database is accessible only by authorized parties through methods that guarantee its protection and confidentiality, thanks to the adoption of security measures designed to prevent the loss of data, illicit or incorrect use and unauthorized access. Despite all the measures taken to safeguard your information, we cannot guarantee, in the current state of technology, that unauthorized access or abuse of services by third parties can be excluded. PLACE OF DATA PROCESSING The treatments connected to the Services of this Site take place at the headquarters of the Data Controller and are only handled by the Data Controller's technical staff appointed for this purpose in the capacity of person in charge, or by any persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disseminated. The personal data provided by Users who submit requests to join the Services are used only to perform the service or provision requested and are disclosed to third parties only if this is necessary for this purpose. In its capacity as data controller, Mamode may proceed, directly or through any external data processors indicated on the site, to save the personal data of Users in special servers and to carry out all other processing operations through the staff - of the owner and of the manager - appointed for this purpose in the capacity of person in charge, or through any external agents during maintenance operations.
7. RESPONSIBLE FOR TREATMENT
For the operation of our website, we commission external providers of data processing services (e.g. order dispatch, software newsletters, data centers). If necessary, these service providers also process personal data. Service providers are carefully selected and monitored by us. The data is processed exclusively in accordance with our instructions and is also bound by this data protection declaration. Only in the presence of an express authorization from the User, Mamode proceeds to use his data for the same activities referred to in the previous point with the aid of automated tools without the intervention of an operator and / or for others purposes authorized by the User from time to time. The updated list of all data processors is available at each headquarters of the Data Controller and can be requested at the following e-mail address: email@example.com. This list can be subsequently integrated and / or updated as needed.
8. PERIOD OF CONSERVATION
Personal data will be kept only for the time necessary to achieve the purposes indicated here or as required by law (civil, fiscal and tax obligations in force). The data entered by you pursuant to section 3.1 will therefore be deleted at the latest after 10 years from the expiry of any retention periods provided for by commercial and tax law. The automatically recorded data, as defined in section 3.2, will therefore be deleted or made anonymous after 24 months.
9. YOUR RIGHTS
As an interested party, pursuant to articles 15-21 of the GDPR you have the right to: a) obtain confirmation of the processing of your personal data; b) access your personal data and know its origin (when the data are not obtained from you directly), the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the retention period of your data or useful criteria to determine it; c) obtain the updating and correction of your personal data so that they are always exact and accurate; d) obtain the cancellation, in the cases provided for by art. 17 of the GDPR, of your personal data or request the limitation of processing; e) obtain a copy of your personal data. You can therefore know what your personal data are in our possession, their origin and how they are used, request their updating, rectification or integration as well as, in the cases provided for by the provisions in force, cancellation, limitation of treatment or oppose to their treatment. If you wish, you can request to receive the personal data we hold about you in a format that can be read by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you. Any requests will be processed at the latest within one month of receipt, except for the possibility of extending this deadline for a further two months, if necessary, taking into account the complexity and number of requests received by the Data Controller.