Dear User, this policy on the processing of personal data (hereinafter “policy”) is given in compliance of art 13 GDPR n. 679/2016.

The policy describes in detail the methods and aims with which the personal data of the user (hereinafter “user”) will be treated during browsing, purchasing of products and fruition of different services available on Malì Milano website, at the following address: www.malimilano.it

 

1) DATA CONTROLLER

The data controller (hereinafter controller) is Malì Milano. It is possible to address the controller for questions, requests, or clarification regarding this policy or, in general, for what concerns the processing of personal data at the following contacts:

• Email: info@malimilano.it (to be used also for complaints),
• Address (per registered mail): Via Mamiani Terenzio 5, 20127 Milano (MI)
• Telephone: 340-7630727

 

2) CATEGORIES OF PERSONAL DATA PROCESSED AND LEGAL BASIS FOR THE PROCESSING

The personal data processed by the data controller are the following:

1)as far as the browsing on the website is concerned, for example but not limited to, the following data are collected: information about the pages and sections of the website viewed, activities and services offered on the website and time of staying on the single pages and sections of the website, etc.

2)regarding the information and data related to the devices used for browsing the website and to use the functions and services included on it, for example but not limited to, the following data are processed: IP address, browser used, type of device, information from cookies or similar instruments released from the webpages, etc.

3)in case of registration to the personal area, the personal data processed will be those requested for the creation of the account, those to access the personal area (name, surname, e-mail address, and all others requested at time of registration) and those related to the activities and services purchased, once logged in to access the services reserved for the registered users.

4)In the event of a commercial transaction on the website (e-commerce services), personal data processed will be exclusively those requested for payment (even processed from third party financial institution related to the user and not to MALI’) and those requested for the execution of the agreement, following the purchase made by the user (personal data, contact details, payment and invoicing details etc.)

5)In case of subscription to the newsletter, upon acceptance of the user, the personal data processed will be the e-mail address indicated by the user for the submission of communication of news, promotions and offers about the products and services advertised by MALI’

6)In case of contact with the Controller through the contact section of the website, or by spontaneous transmission of digital communication, the personal data processed will be those needed to handle the contact requested by the user (name, surname, address, e-mail address etc.)

 

Personal data as per categories 1) and 2) are automatically collected by the controller during the browsing on the website. Personal data belonging to all other categories are provided directly and voluntarily by the user.

The processing of personal data of the above categories is based on the following legal basis:

-execution of an agreement the user is part of

-consent given by the user for the processing of its own personal data (for the newsletter)

-processing requested to fulfill a legal requirement

-pursuit of a legitimate interest of the controller

-payment of services and invoicing

 

 

3) PROVISION OF PERSONAL DATA

The provision of personal data can be optional or mandatory. In the last case, the provision of personal data is necessary in order for Malì to satisfy the needs of the user in relation to the functions of the website. The missing, partial, or inaccurate provision of mandatory personal data (usually highlighted with an asterisk (*) given in the form) can lead to the non-execution of the agreement, for which Malì cannot be held responsible. The missing, partial, or inaccurate provision of optional personal data will not lead to any consequence for the user.

 

4) METHODS OF PROCESSING AND COMMUNICATION TO THIRD PARTIES

The processing of personal data is performed by the data controller:

-through the use of protected automatic systems

-through the use of adequate methods which guarantee the confidentiality of the collected data in order to avoid access to non-authorized third parties.

Notwithstanding the foregoing, as part of its activities and for the aims given above, the controller can rely on services by professional third parties, for fiscal, tax or legal reasons.

Data collected are processed and are based within the European Union.

 

 

5) DURATION AND DELETION OF PERSONAL DATA

Personal data will be processed and stored for the needed time to fulfill the contract between Malì and the user and within the limits of the law. After that they will be deleted.

 

 

6)RIGHTS OF THE USER

GDPR gives the user the following rights:

- access to own personal data. The user has the right to get, free of charge, its own information from the controller, to know the methods and aims of the processing and to get a copy of it in an accessible format

- amend of its own personal data. The user has the right to obtain from the controller the revision or addition of its own personal data if they are not correct, inaccurate, or not updated.

- deletion of its own personal data (right to be forgotten). The user has the right to obtain from the controller  the deletion of its own personal data, for example but not limited to, in the event that the data are not necessary anymore with respect to the aims they were collected or processed; in the event that the data were illegally processed, or must be deleted to fulfill a legal obligation; in the event that the user revoked its consent  and no other legal obligation exists; in the event that the user opposes the processing.

- limitation of personal data, when in specific cases, the controller is limited to process the user’s data following its complaint or opposition

- opposition in whole or part of the user at any moment, for any reason related to its own specific situation has the right to oppose to the processing of its personal data

-portability of the data. When the user has the rights to obtain from the controller its own personal data in a structured format or has the right to transfer its own data to a new controller.

- withdrawal of consent. If the processing of personal data is made in compliance with the authorization of the user, he can revoke its consent at any time, without prejudice to the lawfulness of the processing made before the withdrawal

- submission of complaints to the supervisory authority. The user can always submit a complaint to the Data protection supervisor to the following website:  http://www.garanteprivacy.it.

In any case, for any matter related to the personal data processed and collected, the user can always contact the controller, at the contact details given in art. 1 of this policy.

The controller can always revise or update the content of this Policy. The user is invited to regularly check this page.