INFORMATION ON THE PROTECTION OF PERSONAL DATA PURSUANT TO ART. 13 REGULATION (EU) 2016/679

Maison M DPI S.r.l., pursuant to and for the purposes of art. 13 of Regulation (EU) 679/2016, hereby informs interested parties about the purposes and methods of processing the personal data collected, their scope of communication and dissemination, as well as the nature of their provision.

1) HOLDER OF THE PROCESSING OF PERSONAL DATA
The Data Controller is Maison M DPI S.r.l., in the person of its legal representative, based in (20121) Milan, via Bigli 28, e-mail address info@maisonmdpi.it.
The updated list of internal contact persons, data processors appointed by the Data Controller pursuant to art. 28 EU Regulation 679/2016, is available at the headquarters of the local unit holder of Modena (MO) in the Cognento area Via Campagna nr. 41.

2) TYPES OF DATA PROCESSED
Navigation data
During normal operation and only for the duration of the connection, the computer systems and software procedures used to operate this site acquire some data which are then implicitly transmitted in the use of Internet communication protocols.
This information is not collected for the purpose of associating it with users but, by its very nature, could, through processing and association with data held by third parties, allow it to be identified. These data are deleted a few hours after processing.
Data provided directly by the interested party
The following personal data (Data) referring to you (Interested), common data, such as, for example, identification data, personal data, contact data will be processed.
These data will be provided by the interested party:
– by filling in online forms on the Maison M DPI S.r.l. site, or
– through communications from the interested party, for example reports and requests in the field of information and commercial services connected to the site of Maison M DPI S.r.l.
Maison M DPI S.r.l. cannot accept data from subjects under the age of 16 (sixteen) pursuant to art. 8 GDPR or other age limit possibly defined by the country of residence. Therefore, the interested party confirms and declares that he has reached the age required for the lawfulness of the processing from his country of residence.

3) PURPOSE AND LEGAL BASIS OF THE PROCESSING
i) The Data will be processed only with your consent and will be used in full compliance with the principle of correctness and lawfulness and the provisions of the law to provide feedback to the request of the interested party and for the related and instrumental activities.
ii) The data will also be processed for the following purposes:
a) for the Company’s promotional activities, including the sending of emails, newsletters, commercial communications or advertising material on products or services offered by the Owner, including the detection of the degree of satisfaction with the quality of the services;
b) to organize events, meetings and celebrations as part of the Company’s promotional and social activity.
The provision and processing of data for the purposes indicated above are optional in nature with the consequence that you can decide not to give your consent or to withdraw it at any time.
Please note that the withdrawal of consent does not affect the lawfulness of the treatment based on the consent given before the revocation.
In the absence of consent, the Data Controller will be unable to carry out the processing operations for the purposes described above.
The legal basis of the treatment is the consent to the processing of the aforementioned data also for marketing and advertising purposes. Consent is considered granted by flagging the appropriate boxes at the bottom of the form.

4) METHOD OF TREATMENT
Data processing is performed with or without the aid of IT procedures or in any case telematic means and paper supports, with or without the aid of automated processes by subjects, internal or external, specifically appointed and authorized and committed to confidentiality. The data is processed and stored with suitable tools to guarantee its security, integrity and confidentiality by adopting adequate security measures as required by law. The treatment will be carried out with suitable means to store, manage and transmit the Data and will include all the operations or complex of operations necessary for the processing in question including the processing and management of your Data in the Company’s management programs and through the communication of such Data to subjects.

5) COMMUNICATION AND DISSEMINATION, RECIPIENTS
Your data will be communicated, if and within the limits in which this is necessary or in any case functional to the purposes indicated above, to the following categories of subjects:
– to companies belonging to the corporate group to which the Company belongs;
– other companies or third-party analysis companies authorized for the sole purpose of responding to questions or requests for hiring by the user, in order to satisfy the requests or to provide the information requested by the user;
– to the subjects appointed as Data Processors.
Your data may always be communicated to judicial, supervisory authorities, public bodies and bodies.

6) TRANSFER OF DATA ABROAD TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA

Since Maison M DPI S.r.l. operates globally, it may be necessary to transfer Personal Data to other countries, in particular to the headquarters, for management purposes. Transfers may also need to be made to other countries where we do business. When we export Personal Data to another country, we will take the necessary measures to ensure that this transfer of Personal Data complies with applicable laws and regulations. We have requested binding corporate rules in accordance with the process approved by the European Commission and with the general data protection regulation. These clauses constitute contractual commitments between the companies of Maison M DPI S.r.l. which bind them to protect the privacy and security of Personal Data.
Similarly, when we use third party service providers and their services involve transfers of Personal Data outside the country where the Personal Data was initially collected, we ensure that the third party service provider has adequate Data transfer mechanisms, such as data processing clauses and / or standard contractual clauses to allow the transfer.

7) DATA RETENTION PERIOD
The data will be processed and stored for the time strictly necessary to achieve the purposes for which they are processed and according to the terms of the law and in any case for a period not exceeding two years from the first contacts if in the meantime the right to opposition by the interested party, without prejudice to the possible establishment of contractual relations with the owner.
With reference to the processing for the purpose of sending commercial and promotional communications of the owner’s products and services and for sending informative messages relating to its activity, the data will be kept for 24 months following the last contact with the owner save the establishment of contractual relationships or until the interested party exercises the right of opposition.
The opposition to the treatment can be advanced by the interested party independently for one or the other method of contact.

8) DATA SUBJECT’S RIGHTS
The interested party can exercise the following rights:
a) right of access: obtain confirmation at any time that your data is being processed
Data and receive information relating to this treatment;
b) right of rectification: obtain the rectification of your inaccurate Data or their without undue delay
integration;
c) right to erasure: obtain the cancellation of your data without undue delay;
d) right of limitation: obtain the limitation of the treatment to the only conservation;
e) right to portability: to receive your data in a structured format commonly used and readable by an automatic device and to obtain that your data are transferred to another data controller indicated by you;
f) right to object: object to the processing of your data.
The interested party may contact the Data Controller to exercise the rights recognized by the GDPR by sending a request to the following email address privacy@maisonmdpi.it.
We will respond to the request within a reasonable period of time, usually within a month of receiving it, and we will inform the interested party about the actions taken.
With reference to the processing of your data and the exercise of the rights of the interested party, you can always lodge a complaint with the Guarantor for the protection of personal data, Piazza di Monte Citorio n. 121 -00186 Rome – www.gpdp.it – ​​www.garanteprivacy.it.

9) COOKIES
Our website uses cookies. For more information you can consult our
Cookie Policy at the link: https://www.maisonmdpi.it/cookie-policy/

10) MODIFICATIONS AND UPDATES
This information may be subject to changes and additions, also as a consequence of updating the applicable legislation relating to the protection of individuals with regard to the processing of personal data and the free movement of such data.