PRIVACY POLICY

Information provided in accordance with Art.13 of EU Reg.2016/679 (hereafter GDPR)

1) Background: the importance of data protection

The operator of this site considers the protection of individuals, with regard to the processing of data of a personal nature, a fundamental right. Transparency towards the Users of the site is therefore a primary objective, pursued through effective communication tools aimed at making available basic information on data processing. This notice is therefore aimed at providing detailed information to visitors (hereinafter Users), with specific reference to the various functions of this site.

2) General information

Users are informed of the following general profiles, which apply to all areas of processing:

  • All personal data are processed in accordance with applicable privacy regulations (Reg.EU 2016/679 and D.Lgs.196/2003, as amended and supplemented by D.Lgs.101/2018);
  • All Users’ data are processed lawfully, fairly and transparently, in accordance with the general principles stipulated in Art.5 of the GDPR;
  • specific security measures are observed to prevent data loss, illegal, or incorrect use and unauthorized access, according to Art.32 of the GDPR.

3) Holder References and Rights of Data Subjects

The data controller is the operator of the site, Maior Group srl with registered office in Vicenza (VI), via L. Zamenhof 697, registration with the Register of Companies of Vicenza, tax code 03948440247, VAT number 03948440247, (hereinafter Maior Group). A DPO has not been appointed or appointed since the company does not handle large-scale data.

The User, by contacting the Owner at the contact details given in the contact sections of this site, may exercise the following rights, provided by the GDPR:

  • Right to request the presence of and access to personal data concerning him/her (Art.15 “Right of access”);
  • Right to obtain rectification/integration of inaccurate or incomplete data (Art.16 “Right of rectification”);
  • Right to obtain, if there are justified reasons, the deletion of data (Art.17 “Right to Deletion”);
  • Right to obtain limitation of processing (Art.18 “Right to limitation”);
  • Right to receive in a structured format the data concerning him/her (Art.20 “Right to portability);
  • Right to object to processing and automated decision-making, including profiling (Art.21, 22);
  • Right to revoke a previously given consent;
  • Right to file a complaint with the Data Protection Authority if no response is received.

4) Account creation and purchases

Registration allows the creation of the User, to be used to make purchases on the site (you can also make purchases without registration).

Purpose and legal basis for processing

(GDPR-Article 13(1)(c))

Data necessary for profile creation (e.g.: personal data, contacts, credentials, etc.) and administrative/operational management of purchases made (e.g.: payment data, delivery, etc.) and related services (e.g.: returns, credit notes, vouchers, notices, wishlist, etc.) are requested. The processing is carried out for the fulfillment of contractual and pre-contractual obligations (product purchase) with the customer and related legal obligations (GDPR-Art.6, comma1, lett.b,c), according to the terms and conditions of use explained on the appropriate page. A specific, free and informed consent is also requested (GDPR-Art.6, comma1, lett.a), documented by means of a special check-box (GDPR-Art.7, comma1).

Filling in the optional fields is intended to provide information and services more consistent with the User profile.

The same data, excluding login credentials, will be requested and processed, in the same manner, in the case of orders without registration.

Scope of communication

(GDPR-Article 13, paragraph 1, lett.e,f)

The data are processed by internal staff, duly authorized and trained in the processing (GDPR-Art.29) or by external parties managing the platform or parties preparatory to the provision of purchasing/delivery services. The data could be subject to transfer outside the EU only under the conditions of Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not affected “Art.45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate safeguards, Art.47 Binding Corporate Rules, Art.49 Specific exceptions.”

Period of data retention

(GDPR-Article 13(2)(a))

Data are retained for times compatible with the purpose of collection and related legal obligations (administrative record keeping), however, until any request for deletion by the user.

Contribution

(GDPR-Article 13(2)(f))

Failure to provide data will result in the inability to finalize the registration and make purchases.

5) Newsletter subscription

The newsletter service allows for constant and extensive insights with respect to useful industry information, events and initiatives, products/services offered, as well as any promotional offers.

Purpose and legal basis for processing

(GDPR-Article 13(1)(c))

Only the email address is used for the management of the service, for the sole purpose of sending the newsletter. Subscription is subject to the acceptance of specific, free and informed consent (GDPR-Art.6, para.1, lett.a), documented by means of appropriate check-box (GDPR-Art.7, para.1). Each message sent will be accompanied by appropriate automatic unsubscribe function.

Scope of communication

(GDPR-Article 13, paragraph 1, lett.e,f)

The data are processed by internal staff, duly authorized and trained in the processing (GDPR-Art.29) or by external parties managing the platform or parties preparatory to the delivery of the newsletter. The data could be subject to transfer outside the EU only under the conditions of Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not affected “Art.45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate safeguards, Art.47 Binding Corporate Rules, Art.49 Specific exceptions.”

Period of data retention

(GDPR-Article 13(2)(a))

Data are retained until “unsubscribing,” which can be freely done at any time through the link contained at the bottom of each message sent.

Contribution

(GDPR-Article 13, paragraph 2, lett.f

Failure to provide the email address and consent will result in the inability to obtain the newsletter service.

6) Additional services/downloads

The site may propose download services (e.g., multimedia gadgets, apps, photo/video content, etc.) to the User, which can be activated after filling out the appropriate landing-page, which will enable the use of the service itself.

Purpose and legal basis for processing

(GDPR-Article 13(1)(c))

For the provision of services it may be required, completely independently, freely and optionally, the compilation of personal data and/or the ability to send commercial information. The processing is based on specific, free and informed consent (GDPR-Art.6, para.1, lett.a), documented through special check-box (GDPR-Art.7, para.1).

Scope of communication

(GDPR-Article 13, paragraph 1, lett.e,f)

The data are processed by internal staff, duly authorized and trained in the processing (GDPR-Art.29) or by external platform operators or subjects preparatory to the provision of services. The data could be subject to transfer outside the EU only under the conditions of Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not affected “Art.45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate safeguards, Art.47 Binding Corporate Rules, Art.49 Specific exceptions.”

Period of data retention

(GDPR-Article 13(2)(a))

Data are kept for times compatible with the purpose of collection and related legal obligations, however, until any request for deletion by the user.

Contribution

(GDPR-Article 13(2)(f))

Failure to provide the data may result in the inability to obtain the service.

7) Information requests and optional sending of e-mail messages.

The optional, explicit and voluntary sending of electronic and/or ordinary mail to the addresses indicated on this site, as well as any specific requests made through contact forms/notes fields, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the missive (with respect to which the sender is responsible for general privacy principles).

However, the Holder will process the data sent in accordance with the security and confidentiality criteria indicated herein and will keep it for a time compatible with the purpose of the request. Should the sender send their resume to submit their professional application, they remain solely responsible for the relevance and accuracy of the data sent. Please note that any resumes without the authorization for data processing will be deleted.

8) Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes the IP addresses or domain names of the computers used by Users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User’s operating system and computer environment.

Purpose and legal basis for processing

(GDPR-Article 13(1)(c))

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site (legitimate interests of the owner).

Scope of communication

(GDPR-Article 13, paragraph 1, lett.e,f)

The data are processed exclusively by internal staff, duly authorized and trained in the processing (GDPR-Art.29) or by external platform operators. The data could be subject to transfer outside the EU only under the conditions of Chapter V of the GDPR, aimed at ensuring that the level of protection of data subjects is not affected “Art.45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate safeguards, Art.47 Binding Corporate Rules, Art.49 Specific exceptions.” Only in the event of an investigation may they be made available to the competent authorities.

Period of data retention

(GDPR-Article 13(2)(a))

Data are usually kept for short periods of time, except for any extensions related to investigative activities.

Contribution

(GDPR-Article 13(2)(f))

The data are not conferred by the User, but automatically acquired by the technological systems of the site.

9) Cookies and social links

Cookies Cookies are short text fragments (letters and/or numbers) that allow the web server to store information on the User’s client (the browser) to be reused during the same visit to the site (session cookies) or later, even days later (persistent cookies). Cookies are stored, based on the User’s preferences, by the individual browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as, for example, web beacons, transparent GIFs and all forms of local storage introduced with HTML5, can be used to collect information about the User’s behavior and use of services. In the remainder of this policy we will refer to cookies and all similar technologies by simply using the term “cookies.”

The following table shows the main types of cookies that may be carried by the site

TYPES

PURPOSE.

DETAILS AND PREFERENCE MANAGEMENT

Technical cookies

Facilitate and ensure normal navigation and enjoyment of the site, as well as the various functions provided

Through the automatic functions of the main browsers, by clicking the appropriate icon next to the URL of the site it is possible to obtain the details of the cookies conveyed, complete with: name, contents, domain, sending path, persistence.

Through major browsers it is also possible to:

– Block by default the receipt of all (or some) types of cookies;

– Remove all or some of the installed cookies.

See specific section for information on setting individual browsers. Please note that blocking or deleting cookies may affect the navigability of the site.

First- and third-party analytical cookies

Collect information on the number of visitors and pages viewed (for those from third parties, IP masking is performed, as well as avoiding combination with other processing or passing them on to third parties)

Correlations with social portals

On the pages of the site there may be buttons, widgets, plug-ins, links, Social Network cookies to facilitate interaction with Social platforms and sharing of content. We point out, by way of non-exhaustive example: facebook pixel, facebook remarketing, facebook segmentation, google analytics, etc. (which in any case use technologies and tools that reduce the identifying power of cookies, such as anonymization or hashing/encryption systems). It should be noted that the processing of data entered by the user on the various social channels takes place according to the rules and privacy settings of the social itself, accepted by the user at the time of registration. For information purposes, we provide some links of the main social through which you can manage your privacy settings and cookie acceptance:

Managing preferences using major web browsers You can decide whether or not to accept cookies using your browser settings (we point out that, by default, almost all web browsers are set to automatically accept cookies). The setting can be changed and defined specifically for different sites and web applications. In addition, the best browsers allow you to define different settings for “proprietary” and “third-party” cookies. Usually, cookie configuration is done from the “Preferences”, “Tools” or “Options” menu. Below are links to guides to cookie management for the major browsers:

More information

10) Policy update

It should be noted that this disclosure may be subject to periodic revision, including in relation to relevant legislation and case law. In case of significant changes will be given, for a reasonable time, appropriate evidence in the home-page of the site. However, the interested party is invited to periodically consult this policy.